Ongoing senior security leadership

Own security risk without a full-time CISO hire.

Not every growing business needs a full-time CISO. But someone still needs to own risk, priorities, governance, and executive communication. Choose a defined level of senior-practitioner support.

For 20–75 employee teams

Security Advisor

For organizations with capable IT or MSP support but no security owner.

$2,000 CAD/month

Approximately four hours of planned senior advisory capacity each month. Three-month initial commitment. General response target: within two business days.

Included

  • Monthly security review and roadmap tracking
  • Policy and AI governance questions
  • One small vendor or customer questionnaire
  • Quarterly risk review
  • Annual External Security QuickCheck

Flagship recurring offer

Security & AI Lead

For teams ready to track risk, security controls, and workplace AI governance as an ongoing leadership program.

$3,500 CAD/month

Approximately eight hours of planned senior advisory capacity each month. Three-month initial commitment. General response target: within one business day.

Included

  • Monthly control review and risk-register tracking
  • Quarterly executive reporting and policy updates
  • Vendor risk and customer security questionnaires
  • AI governance and incident-readiness guidance
  • Annual Cybersecurity Risk Assessment

Executive-level capacity

Fractional Security Executive

For organizations needing active program ownership and executive or board-ready communication.

$5,500 CAD/month

Approximately 14 hours of planned senior capacity each month, with biweekly working sessions. Three-month initial commitment.

Included

  • Active risk-register and policy-program leadership
  • Executive, audit, and customer meetings
  • Recurring AI governance and vendor-security support
  • Board-ready reporting
  • Annual NIST CSF-aligned assessment

Service boundaries

Defined capacity, clear escalation.

These are planned advisory services, not unlimited support or 24/7 incident response. Emergency forensic investigation and containment services are handled separately through specialist partners where required.

Start with an assessment

Need to establish the priorities first? The Cybersecurity Risk Assessment provides a practical starting roadmap.

Practical answers

Frequently asked questions

Who is fractional leadership for?

Organizations with IT or MSP support that need a senior owner for security risk, AI governance, and roadmap follow-through.

Is this unlimited support?

No. Each tier has defined planned monthly capacity and a three-month initial commitment.

Do you provide 24/7 incident response?

No. Emergency forensics and containment are separate specialist services when needed.

How do we choose a tier?

We review your team, current risks, and decision cadence, then confirm the right level of capacity before engagement.

Discuss your scope

Get a clear next step.

Tell us about your business and what you need to understand. We will confirm scope, timing, and the most useful engagement.