CISM and CISA certified security leadership for UK SMBs. Monthly security reviews, policy sign-off, board reporting, and incident support — from £497/month.
Book a Free Discovery Call3 client spots available this month · No long-term contract required
A full-time CISO costs £80,000–£150,000 per year. For most growing businesses, that's not realistic. But the risks that demand one — cyber insurance requirements, ICO scrutiny, client security questionnaires, board-level reporting — are very real and growing.
A Fractional CISO gives you everything you need: certified expertise, documented security programmes, board-level credibility, and incident support — at a fraction of the cost of a full-time hire.
Cyber insurance providers now require documented security programmes. The ICO fined UK businesses over £4.5M in 2024. Client security questionnaires are becoming standard in procurement. Without a CISO, these requirements fall on whoever has time — which means they don't get done properly.
Structured review of your security posture — threat landscape, control gaps, emerging risks, and remediation priorities. Written report delivered monthly.
Review, update, and sign off on security policies. Covers information security, acceptable use, data protection, incident response, and supplier management.
Monthly board security report — non-technical, decision-ready. Metrics, risks, incidents, and recommendations in plain language your board can act on.
When something goes wrong, you have a certified expert on call. Incident triage, ICO notification guidance, supplier breach management, and recovery planning.
Own your ISO 27001, Cyber Essentials, SOC 2, or CMMC programme. Gap assessments, remediation roadmaps, and audit preparation — all managed for you.
Answer security questionnaires from clients and partners. Review supplier contracts. Provide security sign-off for new vendor onboarding.
No long-term contracts. Cancel with 30 days notice.
For businesses that need documented security policies and basic governance in place.
Full fractional CISO service for businesses with active compliance requirements or client-facing security obligations.
For businesses scaling rapidly, preparing for enterprise clients, or managing complex regulatory requirements.
30 minutes. No obligation. We'll discuss your security posture, what you need, and whether a Fractional CISO is the right fit.
A consultant delivers a project and leaves. A Fractional CISO is ongoing — they own your security programme, attend board calls, respond to incidents, and build something that compounds over time. Same expertise, fraction of the cost of a full-time hire.
No minimum term. We ask for 30 days notice to cancel. Most clients stay because the value is obvious — but we don't lock you in.
Essentials: approximately 3–4 hours. Core vCISO: 8–10 hours. Strategic: 15–20 hours. Hours are focused on deliverables, not time-tracking — you get the outcomes, not a timesheet.
Yes. The Core and Strategic tiers include full compliance programme management — gap assessment, documentation, remediation roadmap, and audit preparation. ISO 27001 certification typically takes 6–12 months depending on your starting point.
Yes — small and mid-size businesses are exactly who this is built for. Enterprise companies hire full-time CISOs. SMBs get the same quality of expertise through the fractional model at a price that makes sense.