Virtual CISO (vCISO)
An experienced security leader on your team, a few days a month. I set direction, keep your program moving, and give your board and funders clear answers.
A good fit if you:
A 12-month plan tied to your real risks and budget, updated as things change.
Clear, right-sized policies your staff will actually follow.
Plain-language updates on where you stand and what’s next.
Vendor-neutral advice on what to buy, and what you don’t need.
A response plan, a tabletop exercise, and guidance if something happens.
Security reviews and insurance applications, answered accurately.
Plans start at $2,000 a month, with 20% off for qualifying nonprofits. See pricing →
A clear start, so you see progress right away.
Days 1–30
Interviews, a baseline risk assessment, and a few quick wins, like MFA everywhere.
Days 31–60
Your prioritized roadmap, core policies, and an incident response plan.
Days 61–90
Your first board update and a steady monthly rhythm of progress and check-ins.
Your IT provider keeps systems running. A vCISO decides what “secure enough” means for you, sets priorities, and holds the program accountable, including your IT provider’s part.
No. A baseline assessment is built into the first 30 days. If you’ve had a recent one, we’ll start from it.
Yes, by default, with on-site visits available when they help.
No. I don’t resell products or take referral fees, so recommendations stay independent.
Related services
A free 30-minute call, with no pressure and no jargon.
Book a free intro call