Virtual CISO Services

A virtual Chief Information Security Officer (vCISO) is an independent resource that acts as a trusted advisor to the business providing the knowledge and skills needed to ensure that it meets its information security governance, risk and compliance management objectives. In short, you get the talent and experience you need without the overhead. Given the skills shortage in the market today, the service delivers an exceptional return on investment.

Risk Crew provides an extremely flexible vCISO offering created to fit any business model to ensure you get the expertise you need – when you need it. Nothing more. Nothing less.

Our unique, cost-effective service lets you customise deliverables by identifying the specific strategic and tactical assistance you need. To include: setting objectives, procuring solutions, drafting, developing or implementing security policies, guidelines and standards or deploying awareness training – to conducting vendor risk assessments, code reviews, vulnerability scanning, security penetration testing or remediation activities. Our vCISO could also design, implement and manage a framework to ensure your business compliance with standards like ISO 27001, PCI DSS, SOC 2 or DPA.

Anything you need. You get full information security department functionality – on demand. Who else does that?

vCISO roadmap activities and deliverables are customised to meet your specific business requirements but typically include strategic deliverables such as:

• Board presentations on the threat landscape
• Confirm the risk appetite, tolerance, capacity and strategy
• Design a business information security management system
• Identify, locate, classify and document information assets
• Conduct and document risk and threat assessments
• Conduct and document security compliance gap assessments
• Produce business remedial recommendations
• Draft and update policies, standards and guidelines
• Provide threat landscape information to business stakeholders
• Manage compliance to information security legislation, regulation or standards (such as ISO 27001, PCI and SOC 2)

Additionally, your Risk Crew vCISO can deliver bespoke tactical deliverables — or alternatively, you can use our CISO on-Demand Security Support Team Service.