vCISO services ยท AI assessment included
Someone has to own your security.
It doesn't have to be a full-time hire. Heights gives your business a senior security leader who checks where you stand, finds where AI can save you time and money, builds your security program, and stays on to run it.
Why it matters
Everyone is asking about your security.
Your customers, your insurer, the government, and your own team. A vCISO is the person who answers for you.
-
Your customers
"Can you prove you protect our data?"
You getwritten rules and a folder of proof you can hand them.
-
Your insurer
"What happens if you get hacked?"
You geta written plan for a hack, and a practice run with your team.
-
The government
"Are you CMMC ready?"
You getthe paperwork CMMC requires, if you work on defense contracts.
-
Your own team
"Can we use this AI tool?"
You getclear AI rules, plus a report on where AI can save you time and money.
What you get
The Heights vCISO Program.
Four things, all included.
-
Security checkup
A report card on where your security is strong and where it's weak.
-
AI assessment
Where AI can save your business time and money, and the rules to use it safely.
-
Security program
Written rules, a hack plan, staff training, and a folder of proof for customers and inspectors.
-
Your security leader
A senior expert on your side, month to month, who answers those questions for you.
How it works
We build it. Then we run it.
Part 1 has a set scope and a set end. Part 2 is month to month, and you can stop anytime. Everything we build is yours either way.
-
We get started
One safe place to keep all your security files.
-
We check everything
A report card on your security, plus an AI report on where AI can save you time and money.
-
We give you a plan
What to fix first, which AI ideas are worth doing, and what each will cost.
-
We fix it
Security and AI rules, a hack plan and practice run, staff training, a folder of proof, and the paperwork your rules require.
-
You choose what's next
Everything we built is yours to keep.
-
We keep you safe
An expert you can call, reviews of new AI tools, monthly check-ins, and a yearly checkup.
Who you'll work with
Founded by Dan Glauber.
Dan founded Heights Consulting Group and wrote Cybersecurity in the Age of Artificial Intelligence.
Questions
vCISO questions, answered.
What's a vCISO?
It stands for virtual Chief Information Security Officer. In plain terms, it's a part-time security leader. You get the expert without paying for a full-time one.
What does a vCISO do?
A vCISO leads your security. They check where you stand, write the plan and the rules, work with your IT company, keep your leaders updated, help with customer security forms and inspections, and take charge if you get hacked.
Is an AI assessment included?
Yes. Every engagement includes one. We show you where AI can save your business time and money, and we set the rules so your team uses it safely.
What's the difference between a vCISO and a full-time CISO?
A full-time CISO is a full-time executive salary. A vCISO gives you the same kind of leadership, part time.
We already have an IT company. Isn't that enough?
Not usually. Your IT company keeps your computers running. A security leader decides what keeps your business safe and makes sure it gets done. We work with your IT company, not against them.
Do I have to keep you after Part 1?
No. Everything we build is yours either way.
Can you help with CMMC?
Yes. We get you ready and give you the paperwork you need.
What security rules do you help with?
CMMC, NIST 800-171, HIPAA, SOC 2, NIST Cybersecurity Framework, PCI DSS, and ISO 27001.
Where are you located?
Our office is at 504 W. Plant Street, Winter Garden, Florida, near Orlando.
Let's talk.
Got a security form, a contract, an inspection, or questions about AI? Book a call. We'll tell you where you stand and what it takes to fix it.