Advise · Advisory & Governance · Retained service
Fractional CISO
Customers, insurers and regulators increasingly ask suppliers to prove how they manage cyber risk. A fractional CISO gives you an accountable security lead who sets direction, answers the questionnaires and reports to the board, drawn from a principal who has led a government-scale cyber security programme.
Talk to us about this
Who it is for
Organisations without a full-time CISO: growing firms, suppliers to the public sector, the NHS or financial services, charities and boards being asked hard questions about cyber risk.
What is included
- Security strategy and a prioritised roadmap
- Policy framework and risk register
- Board and leadership reporting
- Supplier assurance and customer security questionnaires, including public sector, NHS and financial services requests
- AI governance: acceptable-use policy and ISO/IEC 42001 gap analysis where needed
- Oversight of your IT and managed service providers
What you get
- A security roadmap agreed with leadership
- A maintained policy set and risk register
- Regular board reporting
- A named, SC-cleared security lead
Why Cipherer
- Principal-led. The person who scopes the work does the work, with no hand-off to a junior team.
- SC-cleared principal consultant (National Security Vetting), and a Cyber Essentials certified company.
- Seventeen years of delivery across government, healthcare, banking and Web3, including an organisation-wide cyber security programme for the Scottish Government.
- Security by design in everything we build and run, from a community website to a bank's data platform.
- One partner from advice to operation, based in Scotland and working across the UK.
Every engagement starts with a short call to agree scope, then a written proposal setting out deliverables, timeline and price.