01
Roadmap
A prioritised security plan tied to business risk.
virtual ciso & advisory
Virtual CISO,
Virtual CISO,
Security needs an owner.
Senior security ownership and direction without the cost of a full-time CISO.
what it is
Many organisations have security tools but no one owning the strategy. A virtual CISO gives you that senior ownership: a roadmap, a risk register, the right policies, and reporting your board actually understands, scaled to what you need.
Grounded in NIST CSF, ISO 27001 and a 90-day Assess, Build, Prove approach.
what is included
Scope of the engagement.
02
Risk Register
Identify, rate and track your real risks.
03
Policy
Practical policies and procedures that fit your business.
04
Reporting
Board-ready reporting and vendor risk reviews.
what you receive
Clear deliverables.
01
Executive summaryRisk in business terms your leadership can read in five minutes.
02
Technical detailFindings with evidence and clear severity, where applicable.
03
Remediation roadmapPrioritised, actionable next steps your team can run with.
04
Follow-upRetest or review to confirm the work landed.
// engagement models
Ways to work together
Monthly advisory
- Regular strategy sessions
- Risk register maintenance
- Board-level reporting
- On-call security guidance
Most common
Quarterly programme
- Everything in monthly
- Quarterly audit & gap analysis
- Policy drafting & review
- Vendor security assessments
Project-based
- Fixed-scope engagements
- ISO 27001 / SOC 2 readiness
- M&A security due diligence
- Defined deliverables
Ready to start?
Send a short request, and I will help shape the right scope on the first call.