Our own team delivers this service and is accountable for it end to end.
7 servicesManaged security services
Security operations, run for you
Monitoring, detection, response, testing, infrastructure controls and security leadership, delivered as services with agreed targets and plain reporting.
- Services
- 20
- Groups
- 4
- Packages
- 3
- Reports in
- Arabic and English
Who delivers each service
Some managed services are delivered by a vetted delivery partner rather than by CISO Consulting's own team. Each service states who delivers it, and the proposal confirms the delivering party and the contract before you commit.
Who delivers each service
A vetted delivery partner operates the service. CISO Consulting sets the scope, checks quality and reports to you.
11 servicesA specialist partner delivers and contracts for this service. CISO Consulting advises you on selection and fit.
2 servicesFind the right service
Narrow the list below with the choices, or describe your situation and let the AI suggest where to start.
The AI chooses only from this list. You can always use the choices instead.
Detect and respond
Monitoring, detection and response around the clock.
Managed SOC (24x7 Security Monitoring)
Eyes on your environment around the clock, with analysts who know your business. Delivered by a vetted partner, overseen by CISO Consulting Ongoing (12-month terms)View serviceManaged Detection and Response (MDR)
Detection that ends in action: threats found, contained and explained. Delivered by a vetted partner, overseen by CISO Consulting Ongoing (12-month terms)View serviceManaged SIEM and Log Management
A SIEM that is built, tuned and kept healthy for you. Delivered by a vetted partner, overseen by CISO Consulting Ongoing (12-month terms)View serviceManaged Endpoint Protection (EDR/XDR)
Endpoints protected, monitored and kept current without adding headcount. Delivered by a vetted partner, overseen by CISO Consulting Ongoing (12-month terms)View serviceProactive Threat Hunting
Look for the intruder your tools have not flagged. Delivered by CISO Consulting Monthly or quarterly cyclesView serviceIncident Response and DFIR Retainer
A responder on call before you need one. Delivered by CISO Consulting Annual retainerView serviceExposure and testing
Find weaknesses and threats before attackers use them.
External Attack Surface and Brand Monitoring
See your organization the way an attacker sees it. Delivered by a vetted partner, overseen by CISO Consulting Ongoing (monthly reviews)View servicePenetration Testing as a Service
Testing on a rhythm, not once a year. Delivered by a vetted partner, overseen by CISO Consulting Annual program, tested quarterlyView serviceCyber Threat Intelligence Service
Intelligence about threats to your sector, turned into action. Delivered by a vetted partner, overseen by CISO Consulting Ongoing (monthly and alert-driven)View serviceVulnerability Management Program
Find, prioritize and fix weaknesses before attackers use them. Delivered by CISO Consulting Ongoing (monthly cycle)View serviceInfrastructure and cloud
Network, email, cloud, identity and data controls, operated for you.
Managed Firewall and Network Security
Network controls that are configured, reviewed and changed with discipline. Delivered by a partner we introduce Ongoing (12-month terms)View serviceManaged Email Security and Anti-Phishing
Stop the most common way in, and handle what slips through. Delivered by a vetted partner, overseen by CISO Consulting Ongoing (12-month terms)View serviceManaged Cloud Security Posture
Cloud configuration kept within policy, continuously. Delivered by a vetted partner, overseen by CISO Consulting Ongoing (12-month terms)View serviceManaged Identity and Privileged Access
The right people, the right access, with proof. Delivered by a vetted partner, overseen by CISO Consulting Ongoing (12-month terms)View serviceManaged Data Loss Prevention
Know where sensitive data is, and when it moves where it should not. Delivered by a vetted partner, overseen by CISO Consulting Ongoing (12-month terms)View serviceManaged Web Application Firewall and DDoS Protection
Keep customer-facing services up and clean under attack. Delivered by a partner we introduce Ongoing (12-month terms)View serviceGovernance as a service
Leadership, compliance and awareness delivered as a managed program.
Virtual CISO (Managed Retainer)
Senior security leadership on a retainer, accountable to your board. Delivered by CISO Consulting Ongoing retainerView serviceContinuous Compliance Monitoring
Stay compliant between audits, not just on audit day. Delivered by CISO Consulting Ongoing (quarterly cycles)View serviceManaged GRC Platform Operations
Your risk and compliance platform, kept current by specialists. Delivered by CISO Consulting Ongoing (12-month terms)View serviceManaged Security Awareness Program
A year-round program that changes behavior, with proof for your regulator. Delivered by CISO Consulting Annual program, monthly activityView servicePackages at a glance
Every managed service comes in the same three packages. The exact scope and targets are on each service page and confirmed in your proposal.
Shown for Managed SOC (24x7 Security Monitoring)
| Essential | AdvancedRecommended | Enterprise | |
|---|---|---|---|
| Monitoring hours | Business hours | Extended hours | Round the clock |
| Log and sensor coverage | Core sources | Core and cloud sources | All sources, including custom and OT |
| Response | Notify and recommend | Guided containment | Authorized containment |
| Critical alert triage target | One hour | Thirty minutes | Fifteen minutes |
| Reporting | Monthly | Weekly and monthly | Weekly, monthly and board-ready |
| Service review | Quarterly | Monthly | Monthly with executive review |
Shown for External Attack Surface and Brand Monitoring
| Essential | AdvancedRecommended | Enterprise | |
|---|---|---|---|
| Coverage | Primary domains and assets | All internet-facing assets | All assets, subsidiaries and brands |
| Frequency | Monthly | Weekly | Continuous |
| Remediation support | Prioritized list | Guided fixes | Fix tracking with your owners |
| Validation | On request | Included for high findings | Included for all findings |
| Reporting | Monthly | Monthly with trends | Monthly with executive briefing |
| Service review | Quarterly | Quarterly | Monthly |
Shown for Managed Firewall and Network Security
| Essential | AdvancedRecommended | Enterprise | |
|---|---|---|---|
| Scope | Core environment | Core and secondary environments | All environments and entities |
| Support hours | Business hours | Extended hours | Round the clock |
| Change handling | Standard changes | Standard and urgent changes | Standard, urgent and emergency changes |
| High-severity response | Four hours | Two hours | Thirty minutes |
| Reviews | Twice a year | Quarterly | Monthly |
| Reporting | Quarterly | Monthly | Monthly with executive summary |
Shown for Virtual CISO (Managed Retainer)
| Essential | AdvancedRecommended | Enterprise | |
|---|---|---|---|
| Advisory time | Light | Regular | Dedicated lead |
| Frameworks covered | One | Two | All that apply |
| Reporting | Quarterly | Monthly | Monthly with board pack |
| Board and committee attendance | On request | Quarterly | Every meeting |
| Regulator interaction | Guidance | Preparation | Preparation and attendance |
| Response time | Two business days | One business day | Four hours |
From first call to steady service
- 1ScopeWe agree what is covered, the targets and who is called.
- 2ProposalYou receive the scope, tiers, delivering party and terms in writing.
- 3OnboardSources, access and escalation are connected and
- 4tested.
- 5OperateThe service runs against its targets and reports every month.
- 6ReviewResults are reviewed with you and the service is tuned.
Who does what
| Activity | You | CISO Consulting | Delivery partner |
|---|---|---|---|
| Set scope and risk appetite | Decide | Advise | Inform |
| Operate the service day | |||
| to day | Inform | Oversee, or operate when it is our service | Operate, when a partner delivers it |
| Quality and service targets | Review | Own the oversight | Meet the targets |
| Incident decisions | Approve | Advise | Recommend and act within limits |
| Reporting to your board and regulator | Own | Prepare with you | Supply data |
| Contract | Party | Party, or adviser | Party, when a |
| partner delivers it |
Frameworks the suite supports
SAMA CSFNCA ECC-2:2024NCA Critical Systems Cybersecurity Controls (CSCC)CST Cybersecurity Regulatory Framework (CRF)PCI DSSISO 27001SAMA BCM FrameworkSAMA CRFRNCA CCCPDPL
Questions
Is every managed service delivered by CISO Consulting?
No. Some are delivered by a vetted partner under our oversight, and a few by a partner we introduce. Each service page states which, and the proposal names the delivering party.
Who do we
contract with?
The proposal says. When CISO Consulting delivers or oversees the service we contract with you; when a partner we introduce delivers it, you contract with that partner and we advise.
Can we change tiers later?
Yes. You can move up or down at renewal, or sooner by agreement.
Where is our data processed?
The proposal states where data is processed and stored, based
on the residency rules that apply to you.
Can a service be exited?
Yes. The agreement sets the notice period and how your data and configurations are returned.
Can't see what you need?
Describe the requirement and the deadline. We reply with a scoped proposal.
Readiness self-check
How ready are you? Find out in two minutes
Answer a few questions for your framework. You get a score, your biggest gaps and — if you want it — a detailed assessment from our team.
Ready to talk about your compliance?
Tell us where you stand. We will show you the shortest path to what your regulator expects.