_edited.png)
SECURITY REFERENT & SECURITY OFFICER
These two support formats have been designed to give all companies access to expert cybersecurity services, even when the need is low or resources are limited.
These support formats start at half a day a month and go up to 2 days a month. If you're looking for more extensive support, take a look at our outsourced, time-sharing CISO service.
The security referent
The security officer is a cybersecurity consultant external to your organisation working on a time-sharing basis to progressively secure your activities. This expert profile is relevant to all types of organisations, regardless of their size or resources.
Using the services of a security officer allows you to have an expert and available contact in case of questions or need for daily operational support, in order to be accompanied in the progressive securing of your activities.
The tasks of a security referent are :
-
Drafting of specifications and monitoring of the implementation of security measures;
Security consultancy: development and design of security, consultancy on the implementation of security configurations, choice of technologies, technology watch, etc. ; -
Drafting of the main guidelines for security governance within the company (in consultation with the client).
Workload: 1 half day per month. In order to remain relevant, this service requires a commitment over a period of one year.
It could be useful: An additional 1-day flash audit (application or organisational) may be relevant in order to build the appropriate specifications.
The security officer
The security referent is an external cybersecurity consultant working on a time-sharing basis to progressively secure your activities. This expert profile is relevant to all types of organisations, regardless of their size or resources.
Calling on the services of a security referent allows you to have an expert contact person available in case of questions or need for daily operational support, in order to be accompanied in the progressive securing of your activities.
The tasks of a security officer are to :
-
Follow-up of the implementation of the security measures identified in the specifications;
-
Support in the implementation of security measures;
-
Security consulting: secure development and design, consulting on the implementation of security configurations, choice of technologies, technology watch, etc;
-
Management of audits on developed functionalities;
-
Responding to customer requests related to security;
-
Reflection and drafting of a light version of the ISSP;
-
User awareness (limited to 1 session/year).
Requirements for this mission:
-
A state-of-play audit: 3 to 5 working days.
-
The specifications are drawn up on the basis of the inventory of fixtures: 1 working day.
Workload: 1 to 2 days per month. In order to remain relevant, this service requires a one-year commitment.
Are two working days a month not enough for you?
Do you have major cybersecurity needs and/or wish to delegate your security actions completely to an expert?
All our security referent/officer and outsourced CISO services are carried out by Saghar Estehghari, co-founder, CTO and expert cybersecurity consultant, certified PECB/IEC ISO 27001 Lead Implementer.
WHAT THEY SAY
Denis Chincholle, Head of Information System for Vif Town of Hall
"What we really appreciated was the personalised response. CyberSecura clearly understood that, as a local authority, we have specific problems and that the resources had to be adapted [...]. We really had the impression that we were talking as equals, which is very interesting, and we have the feeling that we are understood and heard."
Batiste Roger, Technical Director at Odonatech
"Although I already have pretty robust notions of data governance and GDPR compliance, I really feel the added value of having [experts to support us]: it's a huge time saver! There are plenty of things we don't need to re-invent because you already have templates and procedures for everything."
THE USECASE
For you to find out more about out outsourced timeshare CISO services.
(This usecase is in French, an English version is coming soon).
