Today, we’re going to be talking about fractions. For those already breaking out into cold sweats, don’t worry; it’s not the math kind. Fractional CISOs, also known as virtual CISOs (vCISOs), have long been viewed in the industry as a cost-effective alternative for companies unable to hire a full-time executive to bolster their cybersecurity posture. However, Fractional CISO founder and CEO Rob Black told IT Brew that small organizations aren’t the only entities that can gain something from the outsourced services. IT Brew caught up with Black to discuss the changes the fractional CISO provider is seeing from the industry these days. This conversation has been edited for length and clarity. Is it still true that fractional CISOs usually work with smaller companies who don’t have the budget to afford a full-time CISO? We have some, I would say, pretty large clients. Usually, the larger the client, it might be more of an interim situation. So, basically, the CISO left for whatever reason. You’re probably not hiring someone right away. You need someone to fill the role…Where maybe they have a team, but they have a CISO and five employees, and none of those five employees are senior enough to step up. They might hire us or someone like us to bridge the gap as an interim basis. What about accountability and security oversight?—BM |