Ongoing security leadership
Fractional CISO Services
Experienced security leadership that connects your priorities, people and investment decisions with a practical cybersecurity program.
Fractional CISO and advisory engagements are scoped through Legion Cyberworks.
The problem addressed
Security decisions can become fragmented when no one owns the overall direction. Teams may be busy addressing individual issues while executives lack a clear view of priorities, accountability and risk. Fractional CISO support brings a regular leadership cadence to that work.
Who this is for
Organizations that need security leadership without a full-time CISO appointment, and established leadership teams navigating growth, a specific initiative or a period of change.
What’s included
- Security strategy and roadmap oversight, aligned with business priorities.
- Risk and investment prioritization with internal teams and service providers.
- Executive and board reporting at an agreed cadence.
- Governance, decision ownership and incident-readiness planning.
What you receive
- An initial priorities plan and maintained security roadmap.
- A risk and decision register with assigned responsibilities.
- Recurring executive updates and board reporting materials.
- Agreed actions and a cadence for reviewing progress.
How the work progresses
Establish the scope
Agree business priorities, decision authority, stakeholders and the responsibilities covered by the engagement.
Build the initial plan
Review the current program, identify the most pressing gaps, and agree the priorities for the first delivery cycle.
Lead and communicate
Work with your teams, track decisions and progress, and translate technical findings into leadership discussions.
Review and adapt
Revisit the roadmap as evidence, business needs and available resources change.
Relevant experience
My background includes security leadership at Deutsche Bank and North Carolina’s Electric Cooperatives, along with experience across healthcare and professional services. At NCEMC, I strengthened the statewide cybersecurity program, aligned it to CIS, and developed a support model shaped around the individual needs of 26 electric cooperatives as they requested assistance. Executive and board communications were part of that work.
Scope and timing
An initial 90-day planning and delivery cycle, followed by an agreed ongoing cadence. Contract terms are agreed during scoping.
Operational responsibilities, incident response coverage and availability are agreed explicitly. The engagement starts with a defined scope and reporting cadence.
Fractional CISO and advisory engagements are scoped through Legion Cyberworks.