Name and rank the risks
Write down what could hurt the business, how likely it is and what it would cost, in terms the owner or board can follow.
Security leadership -- unpublished draft
A named security leader for your business, without a full-time CISO.
Most growing businesses have security tools and no one accountable for the whole picture. A virtual chief information security officer (virtual CISO) is a senior person who owns your security direction part-time: what the risks are, what gets fixed first, what the board or an insurer is told, and whether the plan is being followed. Kritical provides that role alongside the engineers who can act on it. Tell us where you are and we will come back with a clear proposal and a written quote.
What a virtual CISO does for you.
The role is accountability and direction. It is not another tool, and it does not replace the people who run your systems day to day.
Set the order of work
Turn a long list of findings into a short plan: what to fix first, who does it and when you will check it is done.
Own the policies
Keep the security policies current, approved and known to staff, so they match what the business actually does.
Who this is for.
Three situations bring people to this.
You have tools but no owner
Someone bought the products, but nobody is accountable for how they fit together or whether they are working.
Someone is asking you questions
A customer, insurer, regulator or board wants to know how you manage security and you want the answer written down.
You are growing
The business has outgrown informal habits, and a full-time security hire is too big a step yet.
How we work with you.
We agree the scope in writing first, then keep a steady rhythm so you always know where things stand.
Start with a conversation
We ask what you hold, who relies on it and what has gone wrong before. We scope from your answers, not from a template.
A plan you can follow
You get a short written security plan with owners and dates, reviewed on a regular schedule we agree with you.
Engineers behind it
Where the plan needs hands-on work, Kritical's engineers can do it, or we work with your existing provider.
Questions before you enquire
What is a virtual CISO?
A senior security leader who works for you part-time. They own the security plan, the risk picture and the reporting, without the cost of a full-time executive.
Will you replace our IT provider?
No. The role sits above day-to-day IT. We work with your current provider or with Kritical's own engineers, whichever suits you.
Does this give us a certification?
No. A virtual CISO sets direction and keeps the work on track. If you are aiming at a certification or audit, we can plan for it, but we do not promise an outcome.
What should we send with an enquiry?
Tell us roughly how many people and systems you run and what prompted the question. Never include passwords or admin credentials in an enquiry.
Why is there no price on this page?
The work depends on your size and what you already have in place, so we scope and quote it in writing after a first conversation.
Let’s define the next step.
Tell us what you want to achieve, what you have today and when it matters.