// 313SEC Service

Virtual CISO (vCISO)

Board-level security leadership, without the board-level salary.

You do not need a full-time Chief Information Security Officer on a six-figure salary. You need the thinking, the direction and the accountability. A vCISO gives you exactly that, for a fraction of the cost.

What it is

A Virtual CISO is fractional security leadership. We act as your senior security voice: setting strategy, owning the risk picture, writing the policies, steering compliance, and reporting to your board in language they understand. You get the seniority and the structure without carrying a full-time hire.

What you get

01 //

Security strategy & roadmap

A clear, prioritised plan for where your security needs to go and in what order.

02 //

Risk management

A living risk register that reflects your actual business, not a tick-box template.

03 //

Policy & governance

The policies, standards and governance you need, written to fit how you really work.

04 //

Compliance direction

Cyber Essentials, ISO 27001 readiness, and alignment with the new UK cyber rules (CSRB / NIS).

05 //

Board-level reporting

Regular, honest reporting your leadership and clients can trust.

06 //

Supplier & third-party risk

Bringing your supply chain and delegated access under control.

Who it is for

Who you are working with

MK
Mohammed Khan
Founder & Principal Consultant, 313SEC · Cardiff, Wales
CPTS · arcX CTI Practitioner & Advanced · MAD20 · Cyber Essentials Plus · Cyber Wales

Frequently asked questions

What is a vCISO?
A Virtual CISO is an experienced security leader who works with you on a fractional basis, providing strategy, governance and accountability without the cost of a full-time executive.
When do I need one?
Usually when clients or regulators start asking hard security questions, when you are pursuing certification, or when security decisions are being made by people who should not have to make them alone.
How many days a month?
It flexes to your needs, from a couple of days a month for steady governance to more during a certification push or incident. We scope it honestly up front.
Can you get us Cyber Essentials or ISO 27001 ready?
Yes. Readiness and certification support is a core part of the role. See our dedicated Cyber Essentials page for the certification route.
What does it cost?
It is a monthly retainer scaled to the days you need. The usual starting point is a Cyber Clarity Sprint to scope the gap, which credits toward the engagement.

Related

Cyber Essentials certificationCyber Clarity SprintThe Resilience BillCyber hygiene