Leadership · fractional vCISO

A security lead who answers for it.

NIS2 makes management accountable for cyber risk, DORA puts suppliers under review, and every large client now sends a security questionnaire. Most mid-sized companies do not need a full-time CISO for that. They need one person who knows their environment, owns the plan and turns up when it matters.

Three tiers

Essentials · about 2 days a monthFor companies under client or NIS2 pressure that need a named security lead. Monthly risk and action review, policy set maintained, answers to client security questionnaires, quarterly report for management.

Growth · about 4 days a monthEverything in Essentials, plus running the security roadmap with your IT team or provider, supplier reviews, incident response plan with a yearly tabletop, and preparation for audits and certifications.

Regulated · about 8 days a monthFor essential or important entities under NIS2 and financial entities under DORA. Everything in Growth, plus the maturity self-assessment and evidence file, incident reporting duty on call, management body briefings and coordination with auditors and authorities.

Fixed monthly fee per tier, quoted after a free 30-minute call. Minimum term three months, then month to month. Days you do not use in a quiet month can move to the next one.

Every tier includes

A named security lead who knows your systems, in Romanian or English
One prioritised security plan, updated every month and owned by us
Help on the day if something happens, with a clear escalation path
Free use of our tools and the weekly brief for your team

What we will not claim: a fractional lead does not replace the accredited management training NIS2 asks of the board, or an audit by a DNSC-attested auditor. We prepare you for both and work alongside them.

Need someone to own security?

Tell us about your company, what is driving the need (NIS2, DORA, a client audit) and who runs IT today. We'll suggest a tier and send a fixed monthly price.

Get in touch →