Services

Security leadership and assurance, sized to your mission.

Most clients start with an assessment, then decide how much ongoing help they need. You can begin anywhere.

  1. 1 · Assess

    Risk or gap assessment

  2. 2 · Plan

    A prioritized, budget-aware roadmap

  3. 3 · Build

    Compliance readiness projects

  4. 4 · Lead

    Ongoing vCISO partnership

Not sure where to start?

Risk assessment or gap assessment?

Risk Assessment

“What could hurt us most, and what should we fix first?”

Best when you don’t have a specific standard to meet yet, or you want to spend a limited budget where it counts.

Framework Gap Assessment

“How do we measure up against a specific standard?”

Best when a funder, partner, customer, or regulator expects a named framework, or you’re preparing for an audit.

All services

Lead · Monthly

Virtual CISO (vCISO)

Part-time security leadership without a full-time salary. I lead your security program as part of your team: setting strategy, keeping the work moving, and reporting to your leadership and board. You keep the final say on risk decisions.

Learn about vCISO →
  • Security strategy and roadmap
  • Policies and program management
  • Board, funder, and insurer reporting
  • Incident readiness and response guidance
  • On-call advice when questions come up

Assess · Fixed price

Risk Assessment

A structured look at your people, data, systems, and vendors, based on NIST methods, ending in a plan ranked by impact and cost.

Learn more →
  • Interviews and lightweight technical review
  • Risk register you can maintain
  • Prioritized remediation plan
  • Leadership-ready summary

Assess · Fixed price

Framework Gap Assessment

A control-by-control comparison against the framework you need, with maturity scores and a clear path to close the gaps.

SOC 2 NIST CSF 2.0 CIS Controls ISO 27001 HIPAA GDPR
Learn more →
  • Control-by-control gap report
  • Maturity scoring
  • Remediation roadmap and timeline
  • Audit-readiness estimate

Build · Project

Compliance Readiness

Hands-on help closing gaps and getting audit-ready, from policies to evidence to auditor walkthroughs.

Learn more →
  • Policy and procedure writing
  • Evidence collection and organization
  • Privacy programs (GDPR, data mapping)
  • Audit preparation and support

Respond · Project

Due-Diligence Support

Accurate, confident answers when funders, insurers, or partners ask about security, plus a reusable answer library for next time.

Learn more →
  • Funder and grant security reviews
  • Cyber insurance applications
  • Vendor security questionnaires
  • Reusable answer library

Not sure which fits? Let’s figure it out together.

A free 30-minute call. I’ll recommend a starting point, even if it isn’t me.

Book a free intro call