Chief Information Security Officer (CISO) As A Service
If you want to be fully prepared to face a cyber attack, our expert consultants acting as a Chief Information Security Officer (CISO) can help you achieve the best possible security level for your business and its specific needs.
Our services include:
- Data and system classification to identify critical assets
- Ensuring industry-best security practices are implemented and providing solutions to enhance your protection level
- Employee training to promote the right behaviors against potential attacks
- Assistance in obtaining required certifications such as ISO 27001
- Advice and support for penetration testing and external audits if needed
- Development of a crisis management plan to limit the impact of any attack and ensure a quick recovery.
Confort
Chf.3950
/month
Review of the services below with drafting of corresponding security procedures: (Objective 12 months)
Information security policiesInformation security policies
Organization of information securityOrganization of information security
Human resources securityHuman resources security
Asset managementAsset management
Access controlAccess control
CryptographyCryptography
Physical and environmental securityPhysical and environmental security
Operations securityOperations security
Communications securityCommunications security
Acquisition, development, and maintenance of information systemsAcquisition, development, and maintenance of information systems
Supplier relationshipsSupplier relationships
Information security incident managementInformation security incident management
Information security aspects of business continuity managementInformation security aspects of business continuity management
ComplianceCompliance
Crisis management planning and annual reviewCrisis management planning and annual review
Establishment of a notification process to authorities in case of an attackEstablishment of a notification process to authorities in case of an attack
Personnel training and awarenessPersonnel training and awareness
Assistance with the implementation of procedures and monthly review of compliance with security rules and proceduresAssistance with the implementation of procedures and monthly review of compliance with security rules and procedures
Preparation and facilitation of a quarterly 2-hour "security committee"Preparation and facilitation of a quarterly 2-hour "security committee"
Personalized advice/specific requestsPersonalized advice/specific requests
Assistance with the selection of monitoring/tracking/protection tools for systemsAssistance with the selection of monitoring/tracking/protection tools for systems
Objective : 1st level of complianceObjective : 1st level of compliance
Advanced
Chf.6950
/month
Review of the services below with drafting of corresponding security procedures: (Objective 6 months)
Information security policiesInformation security policies
Organization of information securityOrganization of information security
Human resources securityHuman resources security
Asset managementAsset management
Access controlAccess control
CryptographyCryptography
Physical and environmental securityPhysical and environmental security
Operations securityOperations security
Communications securityCommunications security
Acquisition, development, and maintenance of information systemsAcquisition, development, and maintenance of information systems
Supplier relationshipsSupplier relationships
Information security incident managementInformation security incident management
Information security aspects of business continuity managementInformation security aspects of business continuity management
ComplianceCompliance
Crisis management planning and annual reviewCrisis management planning and annual review
Establishment of a notification process to authorities in case of an attackEstablishment of a notification process to authorities in case of an attack
Personnel training and awarenessPersonnel training and awareness
Assistance with the implementation of procedures and monthly review of compliance with security rules and proceduresAssistance with the implementation of procedures and monthly review of compliance with security rules and procedures
Preparation and facilitation of a quarterly 2-hour "security committee"Preparation and facilitation of a quarterly 2-hour "security committee"
Personalized advice/specific requestsPersonalized advice/specific requests
Assistance with the selection of monitoring/tracking/protection tools for systemsAssistance with the selection of monitoring/tracking/protection tools for systems
Objective : Concerted management of security and risk.Objective : Concerted management of security and risk.
Premium
Chf.12950
/month
Review of the services below with drafting of corresponding security procedures:Review of the services below with drafting of corresponding security procedures:
Information security policiesInformation security policies
Organization of information securityOrganization of information security
Human resources securityHuman resources security
Asset managementAsset management
Access controlAccess control
CryptographyCryptography
Physical and environmental securityPhysical and environmental security
Operations securityOperations security
Communications securityCommunications security
Acquisition, development, and maintenance of information systemsAcquisition, development, and maintenance of information systems
Supplier relationshipsSupplier relationships
Information security incident managementInformation security incident management
Information security aspects of business continuity managementInformation security aspects of business continuity management
ComplianceCompliance
Crisis management planning and annual reviewCrisis management planning and annual review
Establishment of a notification process to authorities in case of an attackEstablishment of a notification process to authorities in case of an attack
Personnel training and awarenessPersonnel training and awareness
Assistance with the implementation of procedures and monthly review of compliance with security rules and proceduresAssistance with the implementation of procedures and monthly review of compliance with security rules and procedures
Preparation and facilitation of a quarterly 2-hour "security committee"Preparation and facilitation of a quarterly 2-hour "security committee"
Personalized advice/specific requestsPersonalized advice/specific requests
Assistance with the selection of monitoring/tracking/protection tools for systemsAssistance with the selection of monitoring/tracking/protection tools for systems
Objective : Implementation of advanced security procedure management and proactive attack monitoring support to minimize risks.Objective : Implementation of advanced security procedure management and proactive attack monitoring support to minimize risks.
