PRACTICE 01 — FRACTIONAL CISO
A CISO, two days a week.
Security leadership from people who've held the seat — without the £200k hire or the six-month search.
PRACTICE 01 — FRACTIONAL CISO
Security leadership from people who've held the seat — without the £200k hire or the six-month search.
THE PROBLEM
Most mid-size regulated firms reach the same point. The security questions from the board, from clients and from regulators now need someone senior to answer them — but a full-time CISO is a £200k commitment, the search takes the better part of six months, and the work doesn't yet fill a week.
The regulation won't wait for the headcount. DORA and the FCA both expect a named owner for security risk, with the standing to act on it. That seat can't sit empty while the business grows into the hire.
WHAT YOU GET
A named owner for security risk, in the room where it's decided.
DORA, NIS2, the FCA — handled by people from both sides of that table.
A practised hand on the incident — decisions, comms, board. In that order.
Capability compounds in your team, not ours. We plan our own exit.
WAYS TO WORK TOGETHER
| SHAPE | CADENCE | BEST WHEN |
|---|---|---|
| Embedded | 1–2 days a week | You need a standing CISO. The usual shape. |
| Interim | Full-time, 3–9 months | The seat can't sit empty while you hire. |
| Advisory | Monthly, plus on-call | Your security lead needs senior backing, not replacing. |
WHERE WE'RE USUALLY CALLED IN
You're hiring the judgement, not the hours.
Start a conversation