Fractional CISO services
Executive security leadership, scaled to your business
A fractional CISO, sometimes called a virtual CISO or vCISO, gives you an experienced security executive who owns your security program.
Book a Cybersecurity Assessment
Fit
Who this is for
- SMBs and mid-market businesses without a senior security leader
- Software companies facing client security questionnaires or SOC 2
- Firms handling sensitive or regulated data, including legal and professional services
- Businesses adopting AI that need guardrails in place first
Scope
What I deliver
- Security Program & Governance
- Policies, incident response readiness, vendor risk, ongoing leadership.
- Cybersecurity Assessments
- A clear picture of where you stand and a prioritized plan to fix what matters.
- Compliance Readiness
- SOC 2 and ISO 27001 preparation, from gap analysis to audit support.
- AI Security & Governance
- AI policies and guardrails so your team adopts AI without exposing company data.
- Microsoft 365 & Google Workspace Security
- Locking down identity, access, and data in the platforms you already run.
- Secure Development
- Secure coding standards and practices for software teams.
- Cloud Security
- Hardening Azure, AWS, and Google Cloud environments.
Engagement
How the engagement works
- Start with an assessment: establishes where you stand and what needs attention first
- Agree the engagement: a flexible monthly arrangement shaped around your priorities
- Ongoing leadership: I set priorities, lead execution, manage vendors, and report to leadership
- Scale as needed: step the engagement up or down as your business changes
Who you work with
Why me
I'm Keith Myers. I've led enterprise IT and security for more than 25 years, including as SVP IT at Live Nation and VP International IT at Ticketmaster. I hold CISSP, CISM, and AAISM certifications. Today I work with SMBs and mid-market businesses as their fractional CISO.
Questions
Frequently asked
What's the difference between a fractional CISO and a vCISO?
In practice, nothing; fractional emphasizes the part-time executive arrangement, vCISO the remote delivery. I provide both under one engagement.
How much time do you commit?
Engagements are monthly and shaped around your priorities; they scale up or down as your business changes.
Do you work remotely?
Yes, I work with clients across the US and internationally.
Do we have to start with an assessment?
It's the recommended starting point; it gives us both a clear picture before committing to ongoing work.
Start with a Cybersecurity Assessment
It begins with a free 30-minute intro call
Book a Cybersecurity Assessment