Virtual CISO
Strategic cybersecurity leadership, without a full-time CISO.
TeutoSec takes on the strategic cybersecurity leadership of your organization: structured, continuous, and aligned with your business goals.
For companies that need clear governance and measurable security, without hiring a full-time position.
Cancel anytime
Ongoing governance instead of a one-off project
Ongoing governance instead of a one-off project
Three packages
Essential, Advanced, and Premium, based on maturity level
Essential, Advanced, and Premium, based on maturity level
From €1,800 / month
Fixed price, transparent and predictable
Fixed price, transparent and predictable
NIS2 · DORA · ISO 27001
Ongoing regulatory alignment and audit readiness
Ongoing regulatory alignment and audit readiness
OVERVIEW
What the Virtual CISO service delivers
TeutoSec provides experienced cybersecurity expertise at the management and executive level, helping organizations manage cyber risk, meet regulatory requirements, and sustainably strengthen resilience.
The Virtual CISO service takes on the strategic information security leadership role, without the fixed costs and long hiring cycles of a full-time position. It's designed for companies that need clear governance, measurable security, and capable structures, but can't or don't want to build this permanently in-house.
This service catalog describes the structure, scope, deliverables, and the three engagement models in detail, and serves as the basis for proposals and contracts.
HOW WE WORK
The Virtual CISO cycle
The vCISO service follows a continuous four-phase cycle that repeats and forms the basis for governance, reporting, and prioritization of all measures.
PROTECT
What matters
Identifying and safeguarding critical assets: systems, data, and processes whose failure would cause the greatest damage.
DETECT
Identifying risks
Systematic detection of relevant threats, vulnerabilities, and deviations from the security baseline.
ANALYZE
Assessing impact
Assessing identified risks by likelihood and business impact: putting resources where they make a difference.
RESPOND
Staying capable of action
Building and testing the ability to respond quickly, in a coordinated way, and aligned at the leadership level when it counts.
ONBOARDING
Structured onboarding — all models
Every engagement begins with a 4-week onboarding phase before the regular retainer starts. If results from a Cyber Risk & Resilience Assessment are already available, they feed directly into this phase and significantly shorten the situational assessment.
WEEK 1
Kick-off & context gathering
Discussions with leadership, IT, and business units. Review of existing documentation and assessment results.
WEEK 2
Situational assessment & prioritization
Current state, most urgent action areas, alignment on first 90-day priorities.
WEEK 3
Governance setup
Definition of roles, reporting rhythm, escalation paths, and communication formats.
WEEK 4
Roadmap & retainer start
Presentation of the initial security roadmap. Start of the regular retainer rhythm from month 2.
SCOPE
What we do for you
Five service areas — each modular, adjusted in scope and frequency according to the chosen engagement model. In brackets: from which model each service is available.
SERVICE AREA 01
Strategic Leadership & Governance
Taking on or supporting the CISO function with clear governance, risk steering, and management alignment.
✓Establishing and maintaining a cybersecurity governance structure (roles, responsibilities, escalation paths)
✓Developing and evolving the cybersecurity strategy in alignment with business goals
✓Defining and tracking security KPIs/KRIs for leadership
✓Steering and prioritizing the security budget (security investment planning) from Virtual CISO
✓Representing the cybersecurity function to leadership, oversight bodies, clients, and partners from Virtual CISO
SERVICE AREA 02
Risk Management & Analysis
Identifying, assessing, and prioritizing cyber risks and relevant threat scenarios.
✓Building and continuously maintaining a structured risk register
✓Regular threat and vulnerability analyses
✓Cyber risk scoring by likelihood and impact
✓Business Impact Analysis for critical systems and processes from Virtual CISO
✓Third-party and supply-chain risk management Embedded CISO
SERVICE AREA 03
Compliance & Audit Readiness
Supporting regulatory requirements and audit preparation.
✓Regulatory orientation: NIS2, DORA, GDPR, ISO 27001 Governance Advisory
✓Gap analyses and building audit-proof documentation from Virtual CISO
✓Preparing and supporting internal and external audits from Virtual CISO
✓Coordination with auditors, certification bodies, and regulators from Virtual CISO
✓Support with regulatory reporting obligations (NIS2/DORA)
SERVICE AREA 04
Resilience & Incident Readiness
Developing and improving processes for Incident Response (IR) and Business Continuity (BC).
✓Incident advisory support (remote, reactive) Governance Advisory
✓Developing and maintaining Incident Response Plans (IRP) from Virtual CISO
✓Building Business Continuity and Disaster Recovery concepts (BCM/DR) from Virtual CISO
✓Conducting tabletop exercises (annually or semi-annually) from Virtual CISO
✓Crisis coordination at the leadership level in a real incident Embedded CISO
SERVICE AREA 05
Reporting & Communication
Board and management reporting with clear recommendations and prioritized measures.
✓Quarterly management reporting Governance Advisory
✓Monthly management and executive reporting from Virtual CISO
✓Board-ready reports and presentations for leadership and advisory boards
✓Communication with insurers, regulators, and external partners
✓Participation in leadership and board meetings (scheduled, not optional) Embedded CISO
Engineered Cybersecurity. Made in Germany.
DELIVERABLES
What you receive
Every engagement delivers recurring, concrete work products — aligned to management level and directly usable for steering, evidence, and communication.
DELIVERABLE 01
Risk analysis & security maturity assessment
Continuously updated risk overview and maturity assessment as a management steering tool.
DELIVERABLE 02
Management & executive reporting
Regular reports without IT jargon: quarterly (Governance Advisory) or monthly (Virtual CISO, Embedded CISO).
DELIVERABLE 03
Prioritized action program (roadmap)
Continuously updated roadmap with concrete measures, ownership, and timeline.
DELIVERABLE 04
Compliance documentation & audit evidence
Building and maintaining audit-proof evidence for NIS2, ISO 27001, DORA, and other relevant frameworks.
DELIVERABLE 05
Incident Response & DR plans
Plans tailored to your organization, including NIS2-compliant reporting processes (24h/72h/1 month).
DELIVERABLE 06
All documents in German/English
All deliverables available in German or English, for international owners, investors, or oversight bodies.
INVESTMENT OVERVIEW
Three engagement models
The right entry point is determined together during the free initial consultation and confirmed in the advisory agreement. All models are Month-to-month. Cancel any time after the minimum term.
Governance Advisory
From €1,800excl. VAT
6 months
–
Quarterly
Baseline orientation: NIS2, ISO 27001
Remote advisory (reactive)
–
–
–
–
–
Virtual CISO
From €7,000excl. VAT
6 months
✓
Monthly
Active: ongoing gap analysis, audit readiness
Priority response
Annually
Optional
–
–
–
Embedded CISO
From €12,000excl. VAT
12 months
✓
Monthly
Continuous: incl. auditor coordination
Crisis coordination + dedicated SLA
Semi-annually
Scheduled / fixed
Defined in contract
✓
✓
TARGET AUDIENCE
Who is the Virtual CISO for??
SITUATIONS — FOR ORGANIZATIONS THAT …
need structured cybersecurity governance without a full-time position
must demonstrably meet NIS2, DORA, or ISO 27001 on an ongoing basis
want continuous risk management instead of one-off projects
need regular reporting for leadership and oversight bodies
want established incident processes to fall back on in a real event
OUR INDUSTRIES
Manufacturing & Industry
Energy & Utilities
Logistics & Transportation
Healthcare
Financial Services
Technology & IT
Under acute pressure or in a critical phase? Our Transitional On-Site CISO takes over on-site immediately
WHY TEUTOSEC
Cybersecurity leadership
that speaks your language.
Technical depth meets business thinking
Cybersecurity only delivers value once it's understood as a business risk. We think in both dimensions at once: technical substance and business consequence.
The true cost of a cyber incident
Years in the industrial cyber insurance industry showed us: the real cost of an incident is rarely where you'd expect. This knowledge shapes which measures we recommend.
At home in two worlds
Experience across NATO operations, European finance, and international insurance, paired with a deep understanding of small and medium-sized businesses.
Advice that serves your interests
No product recommendations, no vendor lock-in. Our recommendations are guided solely by your business and operational priorities.
