Vendor Risk
Management Template

Fractional CISO came in and helped us build a cybersecurity program from the ground up. They developed a security management framework for us based on CIS Controls, adapted specifically to our use. Our regular meetings with our vCISO keep us informed of new risks, and push us to constantly improve. I feel much more confident in my company’s cybersecurity with them in our organization!

I’ve been impressed at how Fractional CISO has systematically tackled our complex, multi-product environment. Their evaluations and recommendations have given me a complete understanding of each products’ cybersecurity posture. As the guy who is on the hook for keeping all of our corporate and customer data secure, the piece of mind that Fractional CISO brings me is invaluable!

Fractional CISO analyzed our environment and made great security recommendations right away. Our technical team implemented many of their suggestions resulting in significantly reduced cybersecurity exposure within three months of starting the relationship. Thank you, Fractional CISO!

We needed to improve our cybersecurity program to protect our rapidly growing business. Fractional CISO quickly integrated themselves with our team. They were able to provide great guidance for our security and privacy programs.

Many of our enterprise customers were looking for assurance on how one of our new features works and that it is operating in a secure manner. We hired Fractional CISO in part to create a cybersecurity whitepaper to explain how our new feature is secure. They did an amazing job, resulting in better customer acceptance of the feature and we continue to work with them in other areas and departments of the company to review security.

One of our large financial services customers had a lot of security demands and we needed quick action. I emailed Fractional CISO in the middle of the night and seven hours later, we were a client! Now, as our security partner, Fractional CISO is helping us to manage this and other customers and their security expectations. They are also assisting us with maintaining our security program including assisting with SOC 2 and ISO 27001.

We now have a SOC 2 program in place! Fractional CISO got us from start to a SOC 2 Type 1 Attestation Report in just a few months. They helped us put the controls in place, helped us make process changes and are now helping us maintain the program.