The Virtual CISO Moment S1E12 - The Rise of the Virtual CISO

There is a growing rift between the information security “haves” and “have nots,” and the threat actors know that as well. Cyber criminals increasingly target small and midsized businesses (SMBs) because they know SMBs likely do not have information security programs as robust as those large organizations have in place. Nor do they have experienced information security leadership, as the average annual cost of nearly $260,000 for a full-time CISO is out of the reach of most SMB budgets.  The Virtual CISO, or vCISO, has emerged to fill this need. While most SMBs cannot afford a full-time CISO, most also do not need one, just access to CISO expertise. Often as little as ten hours per month of a virtual CISO can bolster an SMB's information security program and posture to nearly the same level as if they had a full-time CISO on staff.  This presentation discusses why the virtual CISO has become a viable option for businesses, what to look for in a virtual CISO, and what a virtual CISO can and cannot do for your small or midsized business.