OUTSOURCED CISO
InfoScreen's Outsourced Chief Information Security Officer (CISO) Program is a compelling alternative to a salaried executive model for addressing this key management position. Infoscreen's part time CISO can be contracted for a flexible part time or interim engagement. There are several key reasons why our outsourced CISO Program may be preferable to a salaried executive staff approach:
  • Senior management sponsorship: Perhaps the greatest challenge faced by a staff CISO is securing a proactive and broad based buy-in from functional managers and individual employees, without direct authority over this personnel. InfoScreen leverages our third party 'for hire' status to drive a high and consistent level of participation among internal stakeholders.
  • Human Firewall: InfoScreen's information security program is fundamentally built around the notion that sound information security requires active participation from employees and business partners. Our emphasis on balanced approach and the creative methods we employ to measure the performance will distinguish our approach from the actions of a staff CISO.
  • Cost effectiveness: Survey data suggests that the fully burdened cost of an employee CISO approaches $250,000. Depending on the scope of our engagement, InfoScreen's Outsourced CISO Program is likely to yield substantial cost savings.
  • Depth of resources: A staff CISO is one person. Conversely, InfoScreen assigns a dedicated Project Manager who serves as the primary point of contact with support from the entire InfoScreen team. This approach enables InfoScreen to spread our specialists across multiple clients.
  • Documentation: InfoScreen develops customized documentation for each Outsourced CISO client, reflecting each client's unique organizational structure, risk profile, and business requirements.
» Comprehensive Program
» Basic Assessment,
Design and Training
» ISO 17799 Certification
» Outsourced CISO Program
» Modular Services
» Information Risk
Assessment
» Program Design
» Policy, Standard and
Process Review
» Design and Implement
Controls
» Business Continuity
Planning
» Vulnerability/Penetration
Testing
» Monitoring and Oversight
» Training and Awareness
Programs
» Cyber-Investigation
Support
» Due Diligence
Home | Legal | Contact Us
© 2006, InfoScreen, Inc.