vISM | Virtual Information Security Manager | Revolution InfoSec
Governance, Risk & Compliance ยท vISM

Someone to run your security programme, day to day

A virtual Information Security Manager (vISM) is the hands-on counterpart to a vCISO. If you already know your direction and just need someone to manage your framework, keep the risk register current and get you through audits. The vISM is a lighter service built around your needs.

Get a free security health check
What your vISM does

Framework-based management, handled for you

Framework operation
Day-to-day running of your cyber framework, such as ISO 27001, NIST CSF, HISO/HISF, NZ Cyber Minimum Standards or Essential Eight. Controls tracked, actions followed up, nothing left to drift.
Risk register upkeep
Risks reviewed and updated as your business changes, so the register reflects reality rather than last year's snapshot.
Policy maintenance
Policies and procedures kept current, reviewed on schedule and rolled out to staff.
Audit & certification support
Evidence gathered as you go, auditors coordinated, and surveillance audits handled without the annual scramble.
Customer security questionnaires
Those long supplier-assurance spreadsheets from your customers, answered accurately and on time.
SecurityCentral access
All of it managed in one platform, which you can log into and track your cyber journey at any time.
Which one do I need?

vCISO, vISM or a Cyber Officer?

VCISO
Sets the direction
  • Security strategy, roadmap and investment decisions
  • Answers to your board or senior leadership
  • Leads tabletop exercises
  • Senior counsel when the stakes are high
Explore the vCISO service โ†’
VISM
Keeps it running
  • Operates the framework your strategy has chosen
  • Keeps risks, policies and evidence up to date
  • Gets you through audits and customer questionnaires
  • Escalates to vCISO-level help only when needed
Talk to us about a vISM โ†’
CYBER OFFICER: FOR SMALLER BUSINESSES
Both, in one service
  • Combines vCISO and vISM in a single offering
  • Strategic direction and day-to-day management together
  • One point of contact, one predictable investment
  • Right-sized for smaller businesses
Ask about our Cyber Officer service โ†’

Many clients use both: a vCISO to set and govern the programme, and a vISM to run it week to week. For smaller businesses, we can provide a mini Cyber Officer service which combines vCISO & vISM to provide cross-outcomes. Other businesses may start with a vISM and add senior leadership as they grow. We will recommend whichever fits your size and risk.

Not sure whether you need a vCISO or a vISM?

Start with a free health check. We will tell you which fits, and what it should cost.

Get a free security health check