vCISO 90-Day Plan
The structured first ninety days of a fractional engagement.
The structured ninety-day approach used to take a vCISO engagement from kickoff to a board paper that earns the next quarter. Three phases: orient (weeks 1–4), control inventory pass (weeks 5–8), board paper (weeks 9–12). Distilled from twenty years of senior security leadership.
02Use this paper when
Scenarios where this paper earns its place on the desk.
- 01Hiring a vCISO and want to know what good looks like in 90 days
- 02A new CISO is starting and the first board paper is due
- 03Filling a CISO gap during succession or post-departure
- 04Resetting a security function after an audit finding or incident
03What you'll find inside
Artefacts and templates included with the paper.
- ARTEFACTAsset & data flow map template
- ARTEFACTControl inventory rubric
- ARTEFACTObligation register schema
- ARTEFACTDay-90 board paper template
AUTHOR
Paul Jolliffe
FOUNDER · INFOSECAI · MBA · CISSP · ISO 27001:2022 LA / LI / IA · PRINCE2 Practitioner
Twenty years of senior security leadership across financial services, healthcare, government, telecoms and technology. Independent UK practice founded 2025. Author of the InfoSecAI insights library.
Get The Brief: practitioner notes on what is changing.
Weekly. No tracking pixels, no marketing automation. Unsubscribe in one click.