NEWChief Information Security Officer as a Service
An experienced CISO in your company, without the cost of a full-time executive.
The executive responsible for information security, on a continuous, tailored basis: strategy, governance, risk and incident response, led by someone with 28 years of experience.
What it is
Security leadership, from the boardroom to the shop floor.
Many companies know they need someone responsible for information security, but don't have the size or budget to hire a full-time CISO. CISO as a Service solves that: an expert takes on the role, works alongside the executive team and IT, and makes security happen.
Strategy
Sets security priorities based on business risk and turns them into a roadmap with planned investment.
Governance
Builds policies, roles and controls based on NIST CSF 2.0, ISO 27001 and LGPD, and tracks progress with KPIs.
Response
Prepares the company for incidents and leads the response when they happen, from containment to communication with the board.
When to reach out
It makes sense for your company if you've ever said one of these
We serve small, mid-sized and large companies. Want to measure first? Take the security self-assessment →
What we deliver
A year with your CISO, quarter by quarter
The program's 10 deliverables organized into a 12-month plan. The order is adjusted to your company's priorities.
Understand and plan
Understand the business, measure maturity and agree with the board on where we're headed.
MATURITY PROGRESSION · SCALE OF 1 TO 5
2,4 by the end of Q1
Illustrative example. The actual target is set during the assessment.
How it works
From assessment to continuous improvement.
- PHASE 1
Assessment
We get to know the business, assess maturity and map the main risks.
- PHASE 2
Plan
We present the prioritized roadmap and align investment and goals with the executive team.
- PHASE 3
Execution
We lead the initiatives, the governance routines and the support for the IT team.
- PHASE 4
Improvement
We measure results, report to the board and adjust priorities.
Engagement models
Choose the level of support your company needs.
Pricing on request, based on size and scope.
ESSENTIAL
To take the first step
- Maturity assessment
- Essential policies
- Regular follow-up meetings
- Support with questions and decisions
EXECUTIVE
Your company's CISO
- Everything in Essential
- Roadmap and risk management
- Security committee with the board
- Incident response plan
- Recurring executive reporting
ON DEMAND
For one-off needs
- Incident response
- Audits and due diligence
- Client questionnaires
- Specific projects
Comparison
In-house CISO or CISO as a Service?
Who your CISO will be
Felippe Britto
CISO | Head of IT · 28 years of experience
He has led information security and IT for critical operations in banking, manufacturing, government and services. He combines business vision and technical depth to run your company's security program.
FAQ
Questions about CISO as a Service
The CISO [Chief Information Security Officer] is the executive responsible for information security. They set the strategy, oversee governance and risk, guide the IT team and report results to the board.
The Gestão de TI ecosystem
One partner for all your technology
All 8 service areas work together, with the same team and the same standard. Combine the ones your company needs.