<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: performing-ciso-advisory-consulting
description: >-
  Provide fractional CISO advisory services including program audits,
  strategic planning, board preparation, regulatory guidance, and
  security leadership coaching.
domain: cybersecurity
subdomain: security-leadership
tags:
  - ciso-advisory
  - fractional-ciso
  - program-audit
  - strategic-planning
  - leadership-coaching
  - regulatory-guidance
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: []
---

# Performing CISO Advisory Consulting

## Overview

CISO advisory consulting provides executive-level security leadership
to organizations lacking a full-time CISO. Covers program audits,
strategy development, board preparation, and regulatory navigation.

## Prerequisites

| Requirement | Purpose |
|---|---|
| Assessment framework | NIST CSF or ISO 27001 |
| Industry knowledge | Sector-specific regulatory landscape |
| Executive access | Direct line to CEO, CTO, or board |

## Key Concepts

### CISO Advisory Engagement Model

```python
advisory_model = {
    "engagement_types": {
        "program_audit": {"duration": "2-4 weeks", "output": "assessment_report"},
        "strategic_planning": {"duration": "4-8 weeks", "output": "3_year_roadmap"},
        "board_prep": {"duration": "1-2 weeks", "output": "board_presentation"},
        "fractional_ciso": {"duration": "ongoing", "output": "monthly_retainer"},
    },
    "deliverables": [
        "program_maturity_assessment", "security_roadmap",
        "board_reporting_package", "policy_framework",
    ],
}
```

## Workflow

1. **Scope engagement** — Define objectives, deliverables, timeline
2. **Assess current state** — Program audit against maturity framework
3. **Identify quick wins** — High-impact, low-effort improvements
4. **Develop strategy** — Multi-year roadmap aligned to business
5. **Prepare leadership** — Board presentation coaching and materials
6. **Guide implementation** — Advise on execution and vendor selection
7. **Transition or retain** — Hand off to CISO or ongoing advisory

## Verification

| Check | Method |
|---|---|
| Workflow completed | All steps executed and documented |
| Output validated | Results match expected format and content |
| Quality assured | Peer review or automated validation passed |

## References

- [NIST Cybersecurity Framework](https://www.nist.gov/cyberframework)
- [MITRE ATT&CK](https://attack.mitre.org/)
