Fractional CISO Services
Bronze Service Level
Gold Services (add-on to Bronze and Silver)
Silver Services (add-on to Bronze)
- Risk assessment report with identified risks and recommended mitigation strategies.
- Risk register to track identified risks and their status.
- Security program development:
- Security program framework outlining policies, procedures, and controls.
- Security awareness materials (e.g., training modules, posters) for employee education
- Security aware
- Risk assessment report with identified risks and recommended mitigation strategies.
- Risk register to track identified risks and their status.
- Security program development:
- Security program framework outlining policies, procedures, and controls.
- Security awareness materials (e.g., training modules, posters) for employee education
- Security awareness training materials (e.g., presentations, e-learning modules).
- Phishing simulation reports and analysis.
- Incident response planning and management:
- Incident response plan detailing roles, responsibilities, and response procedures.
- Incident response tabletop exercise report with identified areas for improvement
- Vendor and third-party risk management:
- Third-party risk assessment report for critical vendors.
- Vendor risk management framework with due diligence and monitoring guidelines.
- Business impact analysis report highlighting critical processes, dependencies, and recovery priorities.
- Impact assessment templates for future use.
- Development of business continuity plans:
- Business continuity plan templates tailored to the organization's needs.
- Business continuity plan testing and exercise reports.
- Basic crisis management planning:
- Crisis management plan outlining roles, communication protocols, and escalation procedures.
- Crisis management tabletop exercise report with identified areas for improvement.
Silver Services (add-on to Bronze)
Gold Services (add-on to Bronze and Silver)
Silver Services (add-on to Bronze)
- Regulatory compliance assistance and audit support
- Compliance assessment reports identifying gaps and recommended remediation actions.
- Assistance during regulatory audits and compliance reporting.
- Security governance and policy development:
- Security governance framework outlining responsibilities and decision-making processes.
- Policies and p
- Regulatory compliance assistance and audit support
- Compliance assessment reports identifying gaps and recommended remediation actions.
- Assistance during regulatory audits and compliance reporting.
- Security governance and policy development:
- Security governance framework outlining responsibilities and decision-making processes.
- Policies and procedures addressing specific regulatory and compliance requirements.
- Comprehensive business impact analysis:
- In-depth business impact analysis report with detailed recovery time objectives (RTOs) and recovery point objectives (RPOs).
- Dependency mapping and criticality assessment reports.
- Enhanced business continuity plans:
- Comprehensive business continuity plans with recovery strategies and documented procedures.
- Business continuity plan maintenance and update recommendations.
Gold Services (add-on to Bronze and Silver)
Gold Services (add-on to Bronze and Silver)
Gold Services (add-on to Bronze and Silver)
- Advanced threat intelligence and vulnerability management
- Threat intelligence reports highlighting emerging threats and recommended actions.
- Vulnerability assessment reports with prioritized recommendations for remediation.
- Security incident response readiness and testing
- Incident response readiness assessment reports with identified gaps and
- Advanced threat intelligence and vulnerability management
- Threat intelligence reports highlighting emerging threats and recommended actions.
- Vulnerability assessment reports with prioritized recommendations for remediation.
- Security incident response readiness and testing
- Incident response readiness assessment reports with identified gaps and improvement recommendations.
- Incident response tabletop exercise reports with comprehensive analysis and lessons learned.
- Advanced crisis management planning and simulations
- Comprehensive crisis management plan with detailed playbooks and communication protocols.
- Full-scale crisis management exercises and simulations with detailed post-exercise reports.
Advisory Services
Cyber Security Assessments
Conduct comprehensive maturity assessments of clients' existing cybersecurity posture, including network infrastructure, systems, applications, and policies. Identify vulnerabilities, weaknesses, and potential threats to provide clients with an accurate overview of their security landscape. Promote a roadmap to improve maturity This may include Software Development Lifecycle or Security Operations Center security maturity assessments.
Risk Management and Mitigation
Assist clients in identifying and prioritising cyber risks specific to their business. Develop risk management strategies, policies, and procedures to mitigate those risks effectively with a definition of POAM (Plan of Actions and Milestones) in line with the risk apetite of the organization.
Incident Response and Recovery
Offer support during and after a cyber incident. Help clients develop and implement effective incident response plans, which outline the steps to be taken in the event of a security breach. Provide guidance and expertise in containing, investigating, and recovering from cyber incidents.
Training and Awareness
Conduct employee training programs to raise awareness about cybersecurity threats, best practices, and policies. Educate employees on how to recognize and respond to common cyber threats such as phishing, social engineering, and malware attacks. Promote a security-conscious culture within client organizations
Security Architecture and Design
Assist clients in designing secure and resilient IT architectures. This includes evaluating existing infrastructure, recommending appropriate security controls, and designing secure network segmentation. Help clients integrate security measures into their systems, applications, and cloud environments.
Compliance and Regulatory Support
Help clients navigate the complex landscape of cybersecurity regulations and standards. Assist with compliance assessments, gap analysis, and remediation planning to ensure adherence to industry-specific regulations such as ISO 27001, ISO 22301, ISO 20000, GDPR, HIPAA, SOC 2, DORA, NIS 2, or PCI-DSS including Internal Audits.
Cybersecurity Incident Simulation and Testing
Conduct simulated cyber attack scenarios to test clients' incident response capabilities and identify areas for improvement. This may include Tabletop, Drills or real disruptive scenarios for testing.
Continuous Monitoring and Threat Intelligence
Provide solutions to detect and respond to potential cyber threats in real-time. Offer threat intelligence services to provide clients with up-to-date information on emerging threats and proactive measures to mitigate risks.
Business Continuity and Disaster Recovery Planning
Help clients develop robust business continuity and disaster recovery plans. Identify critical systems and data, establish recovery objectives, and design recovery strategies to minimize downtime and ensure operational resilience in the face of cyber incidents.
Security Governance and Compliance
Assist clients in establishing effective cybersecurity governance frameworks. Develop policies, procedures, and controls to ensure compliance with internal security requirements and industry best practices. Define strategies to deal with third-party cybersecurity questionnaires.