Virtual CISO

Back to services

A virtual CISO is a retained security lead for companies that are too small for a full-time one, and too exposed to keep answering insurer questions from the owner's inbox.

Usual scope

• A one-page risk register the owner can read.
• Policies that match what the tenant does: acceptable use, access, incident, backup. Not a 40-page PDF nobody signed.
• Vendor questionnaires and cyber-insurance applications filled from evidence.
• A quarterly note to whoever signs the cheques: what changed, what is still open, what it would cost to close.

We do not sell a certification badge. If you need SOC 2 or ISO later, the register is the starting pile, not the certificate.