Virtual CISO · Self-assessment
Which Virtual CISO does your organization need?
Answer a few questions about your business and we will recommend the plan that best fits your requirements, your size and how you are governed. No technical knowledge needed.
- 3 to 4 minutes
- 13 to 15 questions
- Instant result
- No technical knowledge
Self-assessment
Find your plan in a few minutes
Your answers are recorded anonymously to improve the assessment. Your contact details only reach us if you choose to send them at the end.
What a Virtual CISO is
Executive-level security leadership, without hiring a full-time CISO
A Virtual CISO is an information security leader who works with your organization as a service. They set the strategy, govern risk and answer to management, the Board, customers and supervisors.
The self-assessment measures need, not maturity: how many external requirements, how much complexity and how much governance responsibility you have today. From that it recommends the plan that gives you what you need without an oversized program.
- Security governance and roadmap
- Risk and third-party management
- Audit and ISO 27001 readiness
- Reporting to management and the Board
The three plans
A plan for every level of requirement
All of them include a maturity assessment, security governance and risk management. What changes is the depth and who you answer to.
For SMBs
Essential
For organizations that need order, control and visibility without an oversized security program.
Basic governance, a tracking dashboard, incident readiness, operational risk and a light ISMS.
Most chosen
Professional
For growing organizations already feeling pressure from customers, audits and suppliers.
Everything in Essential plus third-party risk, audit readiness and a baseline ISO 27001 ISMS with evidence.
Board of Directors
Executive
For regulated companies, multinationals or organizations with high reputational exposure.
Everything in Professional plus security in corporate decisions, Board reporting, cross-functional drills and an auditable ISMS.
How it works
Three steps, no commitment
- 1
Answer
Business questions about your sector, customers, governance and the impact of an incident.
- 2
Get your recommendation
Recommended plan, three reasons and what it includes, instantly on screen.
- 3
Talk to an advisor
We validate the result with you and agree the scope based on your priorities.
Frequently asked questions
Do I need technical knowledge?
No. The questions are about the business: customers, sites, Board, contracts and impact.
Do I have to sign up to see the result?
No. The result appears on screen when you finish. We only ask for your details if you want to book a session.
Is the result final?
It is a guiding recommendation. An advisor reviews it with you and fits the scope to your situation.