How we work
How We WorkWith You
What to expect, from first call to last day.
A clear plan at the start, regular reporting along the way, and a clean handover if we ever part ways.
Getting started
- A named person coordinates your onboarding, and an account manager owns the relationship after it.
- We hold a weekly status check-in during onboarding, so you always know where things stand.
- A written shared responsibility matrix shows who covers which control, you or us.
- Managed security services go live on a fixed plan, typically within 90 days. See Managed SOC. A vCISO engagement has its own first 90 days.
How we report
You always know what we found
Reports lead with what matters: incidents, how we performed against our service levels, risks, and what we need from you.
Monthly security report
First week of each month
What we monitored, what happened, service level performance, vulnerability status, tool coverage and health, tuning changes and open recommendations.
Quarterly business review
First week of each quarter
A 60 to 90 minute review with your leaders: value delivered, trends, risks, the roadmap and priorities for the next quarter.
Annual summary
Second week of your financial year
The year in review, how your posture changed, and recommendations for the year ahead.
Plain and checked
Every report
We note gaps in data or coverage instead of hiding them, a second person reviews each report before it goes out, and reports describe findings without copying your CUI out of your environment.
Default response targets are on the Managed SOC page. If you raise an issue or concern, we acknowledge it within 4 hours and respond within 48.
How we handle your data
- Your CUI stays in your environment. Our analysts work with it where it lives and do not copy it out.
- Access is limited and removed at the end. We use named, privileged access for the work, and we revoke all of it when the engagement ends.
- Data goes back or is destroyed, on your instruction. We locate every place client data sits, return it if asked, then delete or sanitize it using methods based on NIST SP 800-88. We verify the result and keep a record, with a certificate of destruction where your contract requires one. Data under a legal hold is not destroyed.
If we part ways
An orderly ending protects both of us and leaves the door open to work together again.
- Notice and planning. We confirm the final service date and list every service, access, data set and asset involved.
- Knowledge and access transition. You receive current documentation, runbooks and configuration exports as your contract provides, and we help transfer any tools or licenses you own.
- Access and data. We revoke our access, return or destroy your data, and remove you from our monitoring platforms.
- Close. A final summary of open items, the access revocation confirmation, the data record, and a final invoice.
Bring us the complicated part.
Talk with a credentialed CISO and an accountable team. Email [email protected] or call (877) 77-vCISO.