Building a Security Program Without a Full-Time CISO

What's inside

• What a security program is, in five parts
• Who owns what: leadership, the program owner, IT operations and staff
• A first risk review in six steps
• How to choose a framework (NIST CSF, CIS Controls, NIST SP 800-171, HIPAA, PCI DSS)
• The first eight policies to write
• A 12-month roadmap, quarter by quarter
• What leadership should see each quarter
• Your options for the program owner, and a quick self-check

7-page PDF, written for owners and leaders of small and mid-sized businesses.

From Balancelogic, a managed technology provider in Waldorf, Maryland. We own the technology function for SMBs.
Related: Fractional CISO Services · Sample Cybersecurity Assessment Report · All resources