Skip to content

VISO Consulting

An information security program needs attention from someone who follows changes in regulatory guidance and examiner expectations. Boost VISO Consulting gives you a dedicated Virtual Information Security Officer, backed by the CoNetrix Security team, who develops and maintains your program at the level and involvement you choose. Boost Consulting has developed information security programs since 2001, and our experts hold CISSP, CRISC, CISM, and CISA certifications.

Boost-VISO-Consulting

Experienced Leadership, Consistent Oversight

Your VISO builds and maintains the core of your information security program, including your information security policies, risk assessments, business continuity plan, vendor management program, cybersecurity assessments, and incident response plan. The engagement can extend to annual security awareness training, quarterly phishing email tests, security testing schedules, and reporting on the full program.

You work with one consultant who knows your program and gives it consistent oversight and added capacity. Your VISO works with your IT staff and IT providers as needed, and a full team of CoNetrix Security experts backs every engagement. Recommendations account for your goals and risk tolerance, and your organization keeps ownership of the program and the final say on its priorities. Quarterly committee meetings and an annual board report keep leadership informed, and audit and exam assistance keeps you prepared.

Service Features

Boost VISO Consulting is offered in three tiers.

  • VISO Managed: Your VISO manages and maintains your entire program, and your team provides periodic input and approvals.

  • VISO Select: Your VISO covers the program areas you choose, with responsibility shared based on that scope.

  • VISO Advisory: Your team runs the program and develops most deliverables, and your VISO reviews and guides the work. Program work is organized in Tandem.

Included in every tier:

  • Designated VISO backed by a full team of information security experts

  • Monthly status updates by email or meeting

  • Direct calendar access to your VISO

  • Regulatory monitoring by our internal GRC team

  • Quarterly security committee meetings

  • Audit and exam assistance

  • Annual report to the board

  • Annual business continuity and incident response plan tests

  • Cybersecurity insurance review and VISO mentorship