Fractional CISO and vCISO services.
Fractional CISO, virtual CISO (vCISO), and security program leadership for growing companies. Most cannot justify a full-time security executive and do not need one. Refit takes the role on retainer and answers for the decisions.
Three tiers of fractional CISO service
Each has a defined scope and a fixed monthly fee.
Advisory
A monthly security strategy session, plus access in between. We handle the auditor call and the customer security questionnaire so your team does not have to.
Standard
We own the security program: policy lifecycle, vendor risk reviews, audit liaison, and quarterly board reporting. An advisor recommends. This tier executes.
Embedded
For pre-IPO and fast-scaling companies. We join your weekly leadership cadence, mentor your security team, own incident response, and carry the disclosure and audit workload.
Security programs and buildouts
Security Program Buildout (90 days)
A 90-day security program buildout for companies where IT has absorbed security alongside everything else. Governance, security policies, identity and access controls, centralized logging, and executive reporting, stood up and documented.
IT Governance & Audit Readiness
IT governance and audit readiness for companies whose auditors have flagged IT controls. Change management, access reviews, and a control framework that stands up to examination.
Building a complete security program? Explore Risk & Advisory and Compliance Readiness.
Which tier fits?
That is what the intro call is for. Fifteen minutes is usually enough to tell.
Book an intro call Prefer email? advisory@refitsecurity.com