A security leader for your business, beside your IT provider
As your vCISO, we're accountable for your security, compliance, and governance, so you don't have to hire a full-time chief information security officer. It starts with a 15-minute call.
Why you need one, even with a good IT provider
Your IT provider runs your systems. The decisions around them often have no owner. Someone has to choose which risks you accept, what your policies say, what you tell your insurer and your clients, and what the rules in your industry require. Your provider can do excellent security work and still shouldn't be the one grading it.
What your vCISO does
- Owns the roadmap. Your security plan and the risk decisions behind it, made with you and written down.
- Writes policies people can follow. Short enough to read, and matched to the way your staff actually work.
- Maps what your industry requires. The duty to protect client confidences for law firms, the FTC's safeguards rule for tax preparers and accountants, the SEC's privacy rule for registered investment advisers, and the cybersecurity rules many states set for insurance agencies, each checked against the rule itself.
- Answers your insurer and your clients. Cyber-insurance applications and client security questionnaires, filled in so the answers match what's really in place.
- Oversees your provider's security work. Reviews what's been done against the roadmap and raises any gaps with them.
- Gets you ready for an incident. A written response plan, and a tabletop exercise where your team walks through a breach before one happens.
- Reports to the owners in plain language. What changed and what needs your decision.
How it works with your IT provider
We set the security direction with you, and your provider puts it in place. They keep running your systems the way they do today. Nothing here replaces your IT provider.
Who it's for
It's for firms whose clients, insurer, or regulator ask what's in place, when nobody inside can answer with confidence. That includes law firms, accounting and tax practices, insurance agencies, investment advisers, family offices, and private schools, along with any small business with security obligations it can't handle on its own.
How the engagement runs
It's fractional and monthly, sized to your firm. The first 30 days go to taking stock of where you are and setting the roadmap. After that, the work settles into a steady monthly cadence, with a quarterly review for the owners. You get a quote after the 15-minute call.
Who you'd work with
Jason Martino is FyrTech's vCISO. His full bio is on the About page.
Questions
Give your security an owner
Tell us about your firm and what you're being asked to prove.