DESCRIPTION
Most organizations under 500 staff don't need a full-time CISO. They need one experienced person who owns the risk, reports to the board and keeps the security programme moving. Everett brings 17 years as Head of IT for a major port operator and eight years as a principal consultant and vCISO, on a fixed monthly retainer.
BENEFITS
Strategy plan and board performance reporting.
A named security leader who owns your risk register and roadmap.
Monthly risk and progress report.
Policies kept current.
Vendor and third-party security reviews.
Incident-response and business continuity planning and testing.
Board and audit-committee briefings.
First call when something goes wrong.
HOW IT RUNS
30-day baseline: risk review and 12-month roadmap (month 1).
Monthly working sessions and reporting (ongoing).
Quarterly board or management briefing.
Annual programme review and plan for the next year.
