When you need us: a new mandate
A new mandate: an honest baseline, and a first hundred days you can defend.
A new chief executive, chair, CISO or private equity owner has arrived with a mandate to look hard. You want the truth about where the firm stands, and you do not want to inherit somebody else's blame.
The moment
The seat is new, or the owner is. Somebody has asked a plain question (where do we really stand?) and the answers on file were written to satisfy an audit, not to answer it.
What changes
You get a baseline with nowhere to hide: what is protected, what is not, what is merely documented. It is written in plain English, so the board can read it and so you can defend it. From it comes a first hundred days with a short list of decisions, in the order they matter, each traceable to something the business cares about.
Who does it
A fractional CISO holds the seat while the picture is built, and independent board advice tests that the picture is the true one. The person you meet is the person you get.