Services
Three ways to work together.
Start with the one that fits today. Most organizations start with an assessment or a deadline, then move to ongoing leadership.
Ongoing
Fractional CISO
A senior security leader on your team, without the cost of a full-time hire. I own the plan, keep it moving, and give your leadership straight answers.
Best for: organizations where nobody clearly owns security, or where an IT or security team needs senior direction.
What's included
- Security strategy and a prioritized roadmap
- Practical, right-sized policies
- Safe, practical rules for using AI tools
- Risk and vendor reviews
- Incident response planning and a practice run
- Board and leadership reporting
How it runs
- Regular check-ins on a schedule that fits you
- Available between check-ins when questions come up
- Quarterly progress summary for leadership
One-time
Security assessment
A clear-eyed look at where you stand today, so you can spend your security budget where it matters most.
Best for: organizations that don't know where they stand, or need a baseline before making decisions.
What I look at
- Accounts, passwords, and multi-factor sign-in
- Email, devices, and backups
- Cloud and SaaS setup, including AWS and Microsoft 365 or Google Workspace
- Vendors and third parties with access to your data
- How your team uses AI tools, and what data goes into them
What you get
- A plain-English findings report
- A short list of fixes, ranked by impact and effort
- A one-page summary for leadership
- A walkthrough call to answer questions
Deadline-driven
Compliance readiness
When someone outside your organization asks for proof, I help you answer honestly and confidently, and build what you need so the next request is easier.
Best for: organizations facing an insurance renewal, a customer or funder questionnaire, or a framework requirement.
What I help with
- Cyber insurance applications and renewals
- Customer, partner, and funder security questionnaires
- SOC 2 readiness
- ISO 27001 implementation (certified Lead Implementer)
- NIST CSF and CIS Controls alignment
What you get
- Answers you can stand behind
- The policies and evidence to back them up
- A plan for any gaps that need closing
How the work gets done
I lead and advise; your IT staff or provider handles the hands-on changes. With a background in AWS, IT operations, and corporate IT, I make sure the plan is practical for them and that the work gets done right.
Not sure which fits? Let's talk it through.
Thirty minutes, free, no obligation. You'll leave with at least one thing you can do this week.