Managed security services are any outsourced function of your security program that is run by a 3rd party vendor.

A virtual Chief Information Security Officer, also called a virtual CISO or vCISO, is an executive level security professional hired to guide the planning, development, implementation, and on going maintenance of a cyber security program. Virtual CISOs are often contracted or hired on a part-time basis to lead security projects as needed.

The responsibilities of a virtual CISO include performing Security Policy Review, Security Architecture Review, Security Risk Assessment, Incident Response Planning, Vulnerability Management Program Oversight, Vendor Risk Management, Data Classification, and Compliance Readiness. A virtual CISO’s responsibilities will depend greatly on the goals of the organization, the level of inhouse support provided, and the projects assigned to the virtual CISO.