A Virtual Chief Information Security Officer is an experienced Cybersecurity expert that tailors a security program for an organization based on the needs of an organization that not only takes into account the current threat landscape, but also the business objectives that results in a measurable improvement to the security posture of an organization.
Cost-Effective Expertise
Strategic Guidance
Risk Management
Scalable
Support
Building out a security program
Policy creation and implementation
Security product and services selection
Vendor management
Assisting with completing security questionnaires
Risk assessments
Audits
Professional mentoring
Extensive Cybersecurity experience and skills at your fingertips
Lower cost option compared to hiring a fulltime CISO
Pay as you go and only for what you need
Fast ramp up of a security program
Trusted advisor to assist with security decisions as they pertain to business objectives and goals
For a vCISO service most engagements start around $30K for a small to medium size business, but can run as high as $150K depending on what a client needs and what their security goals are.
The cost in most cases decreases over time after the initial up front work is completed to build out a security program, then most clients go into “maintenance mode”.
Mark Schliemann is a seasoned cybersecurity professional with nearly 30 years of experience spanning diverse IT disciplines, including systems, network, and cloud engineering, with a strong emphasis on cybersecurity. His journey in security began in the late 1990s, culminating in earning his CISSP certification from ISC² in 2001. Over the years, his expertise has grown significantly, leading to the acquisition of numerous certifications across various IT and cybersecurity specialties.
Mark holds advanced degrees in Cybersecurity, Leadership and Management, and an MBA. He maintains active ISC² certifications, including the CISSP and CCSP (#26253), along with a broad range of credentials in security, cloud, and network engineering. His extensive knowledge and certifications position him as a trusted leader in the field.
The Cybersecurity industry unfortunately has a lot of security professionals that want to lock everything down. This often times results in a negative impact to productivity across several business units in an organization or even crippling an organization’s ability to function properly.
We don’t believe in this philosophy of locking everything down. We take a risk based approach when designing security programs. There must always be a balance with security and business productivity. We believe a properly designed security program not only protects an organization but also has a near zero impact on productivity. Ideally, we can help improve productivity through streamlined processes and tooling that revolve around the security program. We strongly believe a properly designed security program is a business enabler, rather than a hinderance.