Virtual CISO

Whether you are looking for an interim CISO, or a longer-term arrangement, Soteria’s Virtual CISO Advisory Services provide the leadership you need, when you need it.

Our engagement models include:

  • Interim CISO role
  • Part-time (“fractional”) vCISO on an ongoing basis
  • Executive coaching for Information Security professionals
  • Project based (assessments, pre-audits, audits, etc.)
  • Team evaluation and reconstruction

Our service offerings include:

Program Management

  • Development of long-term cyber security strategy.
  • Management of the development and implementation of cyber initiatives, programs, and projects.
  • Management of consistent and objective performance standards of accountability.
  • Design action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats.
  • Development of presentations for the leadership teams.
  • Short-term and long-term budget planning of Operational and Capital budgets.
  • Development of security metrics and KPIs.

Awareness and Education

  • Development of Security Awareness training, education, and measurement of efficacy.
  • Prepare and deliver information security training, education, and awareness activities as appropriate.
  • Ensure that your security awareness program meets all industry regulations and compliance requirements.

Security Architecture

  • Create or review of the security policy for current and new technology implementations, data sharing agreements, and third-party access capabilities.
  • Development of security integration plans to protect existing infrastructure and to incorporate future solutions.
  • Develop roadmap of security practices and technical security implementations.

Governance Risk Compliance

  • Evaluate modern cybersecurity technology policies and standards which are relevant and achievable.
  • Partner with key stakeholders across privacy, legal, technology, and others to support GRC compliance.
  • Evaluate security risk management process and vendor risk management process.