vCISO Service — Your Security Lead, Part-Time
A senior security lead for a few days a month: owns your policies, audits, insurer and customer questionnaires, and picks up the phone when something goes wrong.
Growing businesses hit a point where customers, insurers and auditors expect someone to own security — but a full-time CISO makes no sense at 30 or 300 people. A vCISO retainer gives you that person: a named senior lead who knows your environment, runs a monthly review, keeps the paperwork honest and is reachable when it matters.
What is included
- Monthly security review: Secure Score, alerts, patching, access reviews, backups tested
- Policies and controls that fit your size (not a 90-page template), kept current
- Cyber Essentials / Cyber Essentials Plus, ISO 27001 or SOC 2 readiness owned end to end
- Customer, supplier and cyber-insurance questionnaires answered properly
- Vendor and MSP oversight: are they doing what they said, at the right price?
- Staff awareness: short, practical sessions, phishing simulations if you want them
- Incident support: first call when something looks wrong, with a plan already written
How it works
- Starts with the Security Health Check so we have a baseline and a roadmap
- Fixed monthly fee for an agreed number of days; unused days roll into project work
- Quarterly board-level summary in plain English
Frequently asked
Is this instead of our IT support company?
No — alongside them. Your MSP runs the helpdesk and infrastructure; we set the security direction, check the work, and represent you to auditors and customers.
Minimum term?
Three months, then rolling monthly.
Not sure where your business stands?
Book a free 30-minute call. We will tell you the three things we would fix first — no report to buy, no hard sell.