Executive security leadership
Virtual CISO
Regular support for security decisions and oversight of the agreed improvement plan.
Who it is for
Businesses that need information security leadership on an agreed basis, working alongside their internal IT team or service provider.
What we cover
- Agree responsibilities, priorities, communication arrangements and the monthly workload at the start.
- Maintain the risk register and action plan, and support reviews of new projects or supplier risks.
- Review draft policies, customer questionnaires and audit findings according to agreed priorities.
- Discuss progress regularly with management and the staff responsible for implementation.
What you receive
- An updated risk and action register.
- A monthly progress summary highlighting overdue actions and decisions required.
- Agreed document drafts and advice aligned with the monthly priorities.
Your input
We need a management sponsor for decisions, an IT contact and agreed information about risks, incidents, changes and ongoing work.
Scope and working arrangements
Hours, availability and response arrangements are set out in the contract. Technical administration, continuous monitoring and 24/7 incident response are outside the base service. Management decisions and risk acceptance remain the client’s responsibility.