Fractional CISO

26th December 2018

Top Fractional CISO blogs of 2018

It’s that time of year… the top lists of 2018. Here at Fractional CISO we are not immune to the phenomenon. So, we’ll shamelessly follow suit with our top blogs of 2018. #6 Actual breaking news… Typeform Data Breach: 100,000 Records and Counting We are usually a commentary site. But sometimes we get a scoop….

28th November 2018

18 months in: What I’ve learned starting a cybersecurity company

After twentyish years working for someone else, I quit my corporate job and started a cybersecurity consulting company. While it seemed risky at the time, now I can’t imagine doing anything else. When I first quit, I got questions like, “You have clients lined up, right?” and “What are you really doing?” The answers, “no”…

8th June 2018

Cybersecurity Risk Assessment – A Better Way

What do cybersecurity pros mean when they talk about a “high vulnerability” or “high risk?” – if you’ve ever scratched your head listening to someone present a cybersecurity risk assessment, you’re not alone. Many of us have these questions about risk: What does a high vulnerability mean to a business? How do we rank cybersecurity…

28th June 2017

Why Fractional CISO: How medium-sized businesses can improve their cybersecurity posture

Many medium-sized businesses know that they are not doing enough to address cybersecurity threats. The frequent news reports of cyberattacks are unsettling. Many of them occur because of human error, not because of technology. The good guys have to be nearly perfect but the bad guys only have to find a single vulnerability. People, Process…

9th November 2016

Benefits of a vCISO for Your Medium-Sized Business

You know you need better security for your organization. The security consultants you hired ran a penetration test on your website but did they look comprehensively at your organization’s security posture? Did they talk with your executive management about their business goals and risk tolerance for the organization? Often in the security space there is…

30th April 2016

How to check if someone is really a CISSP

The Certified Information Systems Security Professional (CISSP) is the most prestigious security certification. People with the certification demonstrate a comprehensive understanding of many aspects of security as well as many years of relevant experience in the security space. The test is one of the more challenging tests with a fair number of experienced security professionals…

28th March 2016

Temporary CISO

A Temporary CISO is the interim appointment of a CISO at an organization for a period of transition. Often an Temporary CISO is needed during a period of crisis for instance during a security breach, because of a key departure or because the existing CISO needs to take a leave of absence for personal reasons. However, it may…

25th February 2016

Interim CISO

An Interim CISO is the temporary appointment of a CISO at an organization for a period of transition. Often organizations need an Interim CISO during a period of crisis. The organization needs to hire the Interim CISO quickly due to a departure. Sometimes the existing CISO may need to take a leave of absence for health…

2nd November 2015

Welcome to Fractional CISO!

Fractional CISO is intended to solve the challenges that we have encountered being responsible for security at a medium-sized cloud company. Many cloud companies charters do not have security as the primary responsibility but security is one of the first questions that customers ask and one of the biggest risks to your company’s success. Many leaders…