Virtual CISO (vCISO) Services Sydney

Overview

What this service does

A virtual CISO gives you the judgement and authority of a chief information security officer without the salary of a full-time executive. Sagar Kamra works with your leadership team as your named security lead, for a set number of days a month or around a specific milestone such as a tender, an audit or an incident.

The engagement is practical. We set the security strategy, own the risk register, report to the board, and make sure the controls you have promised customers and regulators are the controls you actually run.

A consultant presenting a security dashboard to a small leadership team in a Sydney meeting room at dusk

What's included

Scope of the engagement

Security strategy and roadmap aligned to your business goals
Risk assessment, risk register and treatment plans
Board and executive reporting in plain language
Policy framework and ownership of the ISMS
Vendor and supply-chain security assurance
Incident response planning and oversight when something happens
Security questionnaires and tender responses answered properly

Who it's for

Right for you if

Businesses with 20 to 500 staff that have outgrown ad hoc IT security
Suppliers to government that need a named security lead
Organisations between CISOs, or building towards their first full-time hire

FAQ

Virtual and fractional CISO: common questions

How many days a month do we need?

Most clients start with two to four days a month. Project phases such as certification readiness need more; a steady state usually needs less.

Is this a managed security service?

No. We provide the leadership, decisions and accountability. Your IT team or managed service provider keeps running the technology, and we direct and verify their work.