Services / Packages
Fractional Security Officer (vCISO)
A part-time security leader who owns your security program, policies, and risk decisions, including AI systems.
From $4,000 per monthOngoing
Public agencies receive quotes structured to fit their procurement rules.
You own everything we produce.
Who this is for
Organizations usually call us about this when:
Customers keep sending security questionnaires no one has time to answer.
You need SOC 2 or ISO 27001 readiness without a full-time security leader.
AI tools are connecting to your data and no one owns the security review.
Overview
Many organizations need security leadership but not a full-time chief information security officer. A fractional security officer sets your security priorities, owns policies and risk decisions, oversees vendors and AI tools from a security standpoint, and reports to leadership and the board.
What’s included
- Security program ownership and roadmap
- Security policies and standards
- Risk assessments and remediation tracking
- Vendor and AI tool security reviews
- Incident response planning
- Quarterly reporting to leadership or the board
How it works
Assess
We review your current security program, risks, and priorities in the first month.
Lead
We own the roadmap, policies, and risk decisions on a regular cadence.
Report
Leadership receives regular updates on risks, progress, and incidents.
How it works for your organization
The same service, tailored to the obligations and realities of each sector.
Private Sector
Companies use a fractional security officer to meet customer security demands without a full-time hire.
- Answers for customer security questionnaires
- Readiness for SOC 2 or ISO/IEC 27001
- Security review of AI tools and vendors
- Board reporting on cyber risk
Public Sector
Agencies use a fractional security officer to strengthen security leadership while building internal capacity.
- Security program leadership
- Alignment with state security standards
- Vendor and AI tool reviews
- Reporting to agency leadership
Nonprofits
Nonprofits use a fractional security officer to protect client and donor data within budget.
- Practical security policies
- Protection of client and donor data
- Security review of donated tools
- Board-level reporting
Frequently asked questions
How much does Fractional Security Officer (vCISO) cost?
Fractional Security Officer (vCISO) starts at $4,000 per month. The final price depends on scope, and we confirm it in writing before any work begins.
How long does it take?
It’s an ongoing engagement, billed monthly, that you can scale up or down.
What do we receive?
The engagement includes: security program ownership and roadmap; security policies and standards; risk assessments and remediation tracking; vendor and AI tool security reviews.
What if a deliverable doesn’t meet the agreed scope?
We revise it until it does, at no extra cost. And if we miss an agreed delivery date, we take 10% off that deliverable.
Who owns the deliverables?
You do. Everything we produce for you is yours to keep, use, and share.
Related Guides
- AI Vendor Assessment Checklist for Credit UnionsThe questions credit unions should ask AI vendors about member data, security, model fairness, and contract terms before signing.
- AI Incident Response Playbook for Credit UnionsWhat a credit union should do, hour by hour, when an AI tool exposes member data, makes wrong decisions, or misleads members.
- AI Tabletop Exercise Scenario for Credit UnionsA ready-to-run scenario where a member service chatbot exposes account details, with timed developments and questions for each phase of the response.
- AI Laws by StateWhere each state’s AI and privacy rules stand, with key dates and a page for every state.
Related services
HIPAA Security Risk Analysis
The security risk analysis HIPAA requires, covering every system that holds health information, including AI tools.
AI Vendor Risk Management Program
An ongoing program to vet, approve, and monitor the AI vendors and AI features your organization relies on.
Fractional Chief AI or Privacy Officer
A named senior executive who owns your AI governance or privacy program and reports to your leadership.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.