--- title: "Hired guns: The rise of the virtual CISO" description: "Hired guns: The rise of the virtual CISO" --- [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/head-logo-2.svg "TowerWall")](https://towerwall.com/) [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/towerwall-logo-white-test.svg "TowerWall")](https://towerwall.com/) - [Our Partners](https://towerwall.com/how-we-protect-you/our-technology-partners/) - Our Solutions - - Our Cybersecurity Solutions - We operationalize infosec, building security solutions that safeguard your most critical assets. - - [Solutions Overview](https://towerwall.com/cybersecurity-solutions/) - [Risk Assessments & Security Reviews](https://towerwall.com/cybersecurity-solutions/risk-assessments-security-reviews/) - [Program & Policy Development](https://towerwall.com/cybersecurity-solutions/program-policy-development/) - [Incident Response & Remediation](https://towerwall.com/cybersecurity-solutions/incident-response-remediation/) - [Managed Detection & Response](https://towerwall.com/cybersecurity-solutions/managed-detection-response/) - - [Compliance & Privacy](https://towerwall.com/cybersecurity-solutions/compliance-privacy/) - [Comprehensive Security Training](https://towerwall.com/cybersecurity-solutions/comprehensive-security-training/) - [Vulnerability Protection](https://towerwall.com/cybersecurity-solutions/vulnerability-protection/) - [Penetration Testing](https://towerwall.com/cybersecurity-solutions/penetration-testing/) - Virtual Security Officers - - Virtual Security Officer - Leverage the experience and security acumen of Towerwall’s on-demand security experts. - - [Virtual Chief Information Security Officer (VCISO)](https://towerwall.com/virtual-security-officers/virtual-chief-information-security-officer-vciso/) - [Virtual Data Protection Officer (vDPO)](https://towerwall.com/virtual-security-officers/virtual-data-protection-officer-vdpo/) - [Virtual Chief Privacy Officer (vCPO)](https://towerwall.com/virtual-security-officers/virtual-chief-privacy-officer-vcpo/) - We Advise - - We Advise - One-size security solutions only lead to failure. - Industries - [Higher Education](https://towerwall.com/industries/higher-education/) - [Financial Services & Banking](https://towerwall.com/industries/financial-services-banking/) - [Healthcare](https://towerwall.com/industries/healthcare/) - [BioPharma & Bio-Therapeutics](https://towerwall.com/industries/biopharma-bio-therapeutics/) - [Retail](https://towerwall.com/industries/retail/) - [Government](https://towerwall.com/industries/government/) - [Catholic Diocese](https://towerwall.com/industries/catholic-diocese-cybersecurity/) - [Cannabis](https://towerwall.com/industries/cannabis/) - [Small Business](https://towerwall.com/industries/small-business/) - [Enterprise](https://towerwall.com/industries/enterprise/) - Trends & Threats - [Remote Workforce](https://towerwall.com/trends-threats/remote-workforce/) - [Vendor Questionnaire](https://towerwall.com/trends-threats/vendor-questionnaire/) - [HIPAA](https://towerwall.com/trends-threats/hipaa/) - [Ransomware](https://towerwall.com/trends-threats/ransomware/) - [GDPR](https://towerwall.com/trends-threats/gdpr/) - [Cloud Security](https://towerwall.com/trends-threats/cloud-security/) - [Phishing](https://towerwall.com/trends-threats/phishing/) - [Cybersecurity Insurance](https://towerwall.com/trends-threats/cybersecurity-insurance/) - [Resources](https://towerwall.com/resources/) - - Resources - Our latest insights, events, and tools to keep you safe. - - [Insights](https://towerwall.com/resources/?resources_category=MTU%3D&focusarea=0&industries=0&search=) - [Webinars](https://towerwall.com/resources/?resources_category=MTg%3D&focusarea=0&industries=0&search=) - [Whitepapers](https://towerwall.com/resources/?resources_category=MTY%3D&focusarea=0&industries=0&search=) - [View All](https://towerwall.com/resources/) - [Company](https://towerwall.com/company/) - - Our Company - We are the industry’s leading cybersecurity preparedness partner. - - [Who We Are](https://towerwall.com/company/) - [Our Team](https://towerwall.com/company/our-team/) - [Our Approach](https://towerwall.com/our-approach/) - [Our Values](https://towerwall.com/company/our-values/) - - [Awards & Recognition](https://towerwall.com/company/awards-recognition/) - [Certifications & Affiliations](https://towerwall.com/company/certifications-affiliations/) - [Community Involvement](https://towerwall.com/company/community-involvement/) - [Careers](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) Topics Virtual CISO, Information Systems Security Association, Fractional Chief Information Security Officer (CIS, CISO, PCI, HIPAA, Compliance, cannabis, vCISO, Enterprise # Hired guns: The rise of the virtual CISO [By Michelle Drolet](https://blog.towerwall.com/author/towerwall2020) [Read More](https://blog.towerwall.com/author/towerwall2020) 3 Minute Read August 19, 2016 ## When is the right time to rent yourself a CISO? The enterprise is facing a dangerous combination of mounting cybersecurity threats of increasing subtlety—and a widening gap in the skills required to identify and combat them. Having someone who knows how to lead the charge in identifying and analyzing threats, creating strategic security plans and ensuring compliance requires the right level of expertise. The [Information Systems Security Association](http://c.ymcdn.com/sites/www.issa.org/resource/resmgr/PDF/ISSA_CSCL_Release_final_for_.pdf) spoke of a “missing generation” in information security, pointing to an estimated 300,000 to 1 million vacant cybersecurity jobs. To further complicate the labor shortfall, security professionals at enterprises understand they are in demand, and it is understood that employees will be receiving offers from other companies. According to a Ponemon study, senior security executives on average leave after 30 months on the job.< Almost three-fourths of respondents in a 2014 Ponemon report said their organizations do not have enough IT security staff. The fact is enterprises are looking to fill security positions. According to [Burning Glass](http://burning-glass.com/research/cybersecurity/), a labor analytics firm, cybersecurity job postings grew 74 percent from 2007 to 2013. Filling those positions, however, is another story. ### Finding the right person to drive enterprise security According to Cisco's [2015 Annual Security Report](https://www.cisco.com/web/offer/gist_ty2_asset/Cisco_2015_ASR.pdf), 91 percent of companies have an executive who is directly responsible for security, but only 29 percent of them have a chief information security officer (CISO). Businesses with a CISO in place recorded the highest levels of confidence in their security stance, both in terms of optimization and clarity. *"Contracting a virtual CISO can be far more cost effective than hiring a full-timer. They can fill in where you need it the most, helping your CIO pull together your security policies, guidelines and standards.* *Many organizations are asking other executives to step into the gap, and they often lack the expertise required to outline a solid information security policy and drive it forward. Would you want a podiatrist filling in for a neurosurgeon?"* For small- to mid-sized businesses, it may be difficult to justify the expense of a full-time CISO. Recruitment can also be a challenge. How do you find the right fit for your business within your budget when you lack the internal experience to properly evaluate a candidate?   ### Enter the virtual CISO For smaller businesses, it simply doesn't make sense to invest in a full-time CISO when you can hire a virtual one and get the specialty skills you need to draw up a strategic overview and deliver the big picture. With a virtual CISO, there's no need to worry about benefits or monthly overhead. Say you’re a larger enterprise. You're suffering from attrition and need someone to step in on an interim basis. You want some supervision and advice for a relatively green InfoSec manager or you want to ensure that you only pay for what you actually need. Renting a CISO could be the answer.   ### Making the business case for a virtual CISO There’s no set universal standard for hiring a virtual CISO. You can set up a retainer for a certain number of hours, you can hire someone on a project basis, and/or you can even buy a chunk of support hours and use them when you need them. It's a way of getting the cream of security talent without buying the whole cow. Contracting a virtual CISO can be far more cost effective than hiring a full-timer. They can fill in where you need it the most, helping your CIO pull together your security policies, guidelines and standards. That could entail anything from coming to grips with HIPAA or PCI compliance to staying on top of vendor risk assessments. A qualified virtual CISO is going to be fully up to speed on the latest best practices, they have experience dealing with a wide variety of scenarios, and they are well-positioned to train your internal security staff. The normal annual contract rate for virtual CISOs is 35 percent to 40 percent of what it costs to pay the normal industry salary for a full-time information security team to perform the same services, according to [Bank Info Security](http://www.bankinfosecurity.asia/business-case-for-virtual-cisos-a-8459).   ### Preventive security vs. post-incident cleanup Many companies are being forced to spend an ever-increasing proportion of their budget on cleaning up after incidents. A virtual CISO can be invaluable as a firefighter, but don't wait until a breach occurs; prevention is always better than cure. Whether you're looking to get a snapshot of your security posture, you need to fill a temporary gap, or you need a leader to roll out a company-wide information security policy, the virtual CISO is a compelling value proposition. Until the new generation of security graduates matures, the virtual CISO may be your best shot at tempering security risks.     ### [Get more information on Towerwall's vCISO Program >](http://towerwall.com/vciso-program/virtual-ciso-program/) This article appeared in [NetworkWorld](http://www.networkworld.com/article/3104645/security/hired-guns-the-rise-of-the-virtual-ciso.html) Image courtesy of: [Roel Wijnants](https://commons.wikimedia.org/wiki/File%3AGarde_Fuseliers_Prinses_Irene.JPG) #### Hired guns: The rise of the virtual CISO Back to Top ## Related Insights ### [Do you have the right person for the job?](https://blog.towerwall.com/do-you-have-the-right-person-for-the-job) Virtual CISO, Information Systems Security Association, Fractional Chief Information Security Officer (CIS, CISO, PCI, HIPAA, Compliance, cannabis, vCISO, Enterprise ### [Securing Your Future with a Virtual CISO](https://blog.towerwall.com/securing-your-future-with-a-virtual-ciso) Virtual CISO, Information Systems Security Association, Fractional Chief Information Security Officer (CIS, CISO, PCI, HIPAA, Compliance, cannabis, vCISO, Enterprise [View All Insights](https://blog.towerwall.com) × ## Talk with us now about: #### Your security needs. - ![Phone](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/phone-icon.svg "Phone") [Call 774.204.0700](tel:774.204.0700) - ![Mail](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/mail-icon.svg "Mail") [Email Us](mailto:info@towerwall.com) ### The front line of cybersecurity.™ For over 23 years, Towerwall, a woman-owned business, has helped scores of companies safeguard their data and leverage their investment in IT with advanced information security technology solutions and services. Our experience in all facets of information security coupled with serving in the CIO/CISO/ISO roles provides a unique first-hand understanding of the security challenges organizations face daily. ### Connect - - - - - [Career Opportunities](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) © Towerwall, Inc. and its licensees. All rights reserved [Privacy Policy](http://towerwall.com/privacy-policy/) Sitemap [Created by Howbridge](https://meethowbridge.com/) [![Towerwall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/footer-logo.svg "Towerwall")](https://towerwall.com/)