You Don’t Need More Cyber Tools. You Need a Clear Plan.
A vCISO (virtual Chief Information Security Officer) gives SMEs and smaller organisations access to senior cyber security leadership without the cost of employing a full-time CISO. Black Swan helps you take control of cyber risk, governance, compliance, suppliers, insurance and resilience, turning them into a practical security roadmap that works alongside your existing IT provider.
Get cyber security under control.
Know what matters, what needs fixing, what can wait and how to show that cyber security is being properly managed.
A virtual Chief Information Security Officer - or vCISO - gives smaller organisations access to senior cyber security leadership without employing a full-time CISO.
Black Swan helps you join together risk, technology, compliance, insurance, suppliers and recovery into one practical security plan.
You have IT support. You have security tools. But who owns cyber security?
Your IT provider may look after devices, Microsoft 365 and day-to-day support. Your insurer asks about controls. Different suppliers manage different systems. Policies exist somewhere.
Each piece may be perfectly reasonable on its own. The problem starts when nobody is looking across all of them.
Who decides which risks matter most? Who challenges the suppliers? Who checks the roadmap? Who explains security to the leadership team? Who makes sure the recovery plan matches reality?
That is where a vCISO fits.
Less guessing. Clear priorities. Better evidence.
The value is not the job title. It is what changes because somebody is taking ownership of the security picture.
Know what matters
Understand the risks most likely to affect your organisation rather than treating every security issue as equally urgent.
Know what to do next
Work from a practical roadmap instead of reacting to the latest product, scare story or supplier recommendation.
Show security is under control
Give insurers, clients, boards and other stakeholders clearer evidence of how cyber risk is being managed.
Be better prepared
Make sure incident response, backup and recovery are considered before somebody is trying to make decisions during a crisis.
Someone taking responsibility for the cyber security roadmap.
A vCISO should do more than produce a report, identify a few gaps and disappear. The role is to keep the organisation moving towards better security over time.
Review. Prioritise. Improve. Keep it moving.
You do not need to fix everything at once. The point is to create a sensible order and make sure important improvements do not disappear underneath the next urgent job.
Understand
Look at how the organisation operates, what technology it relies on and what would cause the most damage or disruption.
Prioritise
Separate important risks from things that can wait, are already adequately covered or are not worth the spend.
Improve
Put the agreed controls, policies, supplier changes and resilience improvements into practice.
Review
Revisit the roadmap, check progress and adjust the priorities as the organisation changes.
Similar idea. Different focus.
Smaller organisations often need senior advice but do not need a full-time executive. The question is which problem you are trying to solve.
Get cyber security under control
Best when the main concern is cyber risk, governance, compliance, assurance or resilience.
- Cyber security strategy
- Risk and priorities
- Cyber Essentials and insurance
- Security policies and governance
- Incident and recovery planning
- Supplier security
Make better technology decisions
Better when the challenge is broader than cyber and includes IT strategy, suppliers, projects, budgets and technology change.
- IT strategy and planning
- MSP and supplier management
- Budgets and procurement
- Projects and change
- Business continuity
- Technology and AI decisions
Advice first. Tools where they genuinely solve the problem.
Sometimes the right answer is a policy, a process change or a better supplier conversation. Sometimes a technical control is missing.
Black Swan can help put those controls in place too, so you do not have to leave the roadmap sitting in a document.
Email Security
Reduce phishing, malicious links, fake invoices and account compromise attempts.
Huntress EDR & ITDR
Add human-led monitoring around endpoints and Microsoft 365 identity activity.
Microsoft 365 Backup
Make recovery from deletion, compromise or other data loss less dependent on hope.
Patch Management
Keep operating systems and third-party applications updated without relying on people remembering.
Cyber Essentials
Build a stronger baseline and demonstrate recognised cyber security controls.
SMB1001
Develop a broader cyber assurance programme for smaller organisations that want to show progress over time.
Senior cyber security guidance without a full-time salary.
Some organisations need a one-off sense-check. Others need somebody involved regularly. The right level depends on the risks, pressures and amount of support required.
Security Review
A structured review of your current position, important risks and immediate priorities.
From £295 Fixed-fee options available
vCISO Support
Regular reviews, roadmap oversight, advice and ongoing support as risks and requirements change.
From £150 per month Typically £150 - £500 per month
Compliance-led Support
Focused work around Cyber Essentials, SMB1001, cyber insurance or another assurance requirement.
Scoped to requirements Typically £500 - £2,500 depending on scope
Not every organisation needs a vCISO.
It makes most sense when cyber security matters but nobody internally has the time, experience or remit to take ownership of the bigger picture.
This is a good fit if...
- You have IT support, but nobody clearly owns cyber security strategy and risk.
- You are not sure whether your current protection is actually enough.
- Insurers, clients, boards or tenders are asking more difficult security questions.
- You need Cyber Essentials, SMB1001 or another assurance framework.
- You want somebody who can sense-check suppliers, decisions and priorities.
- You need an ongoing roadmap rather than another one-off report.
This is probably not the right fit if...
- You already employ an experienced security leader who owns strategy, risk and governance.
- You only want the cheapest possible cyber security product.
- You want a compliance certificate without addressing gaps that are found.
- You expect one product to remove all cyber risk.
- You only need emergency incident response after an attack has already happened.
Straight answers before you speak to us.
What is a vCISO?
A vCISO - virtual Chief Information Security Officer - provides senior cyber security leadership without you employing a full-time CISO.
The role can cover security strategy, risk, governance, compliance, suppliers, resilience and ongoing priorities.
Does a small business really need a vCISO?
Many do not need a full-time CISO. That does not mean cyber security needs no ownership.
A vCISO can make sense where the organisation is heavily dependent on technology, has growing compliance or customer requirements and needs somebody senior to keep the security roadmap moving.
Will you replace our IT support company?
Usually not. Black Swan can work alongside your existing IT provider or internal IT team.
Day-to-day IT support and cyber security leadership are related, but they are not the same job.
What is the difference between a vCISO and Fractional IT Director?
A vCISO concentrates on cyber security: risk, governance, compliance, assurance, resilience and security strategy.
A Fractional IT Director has a broader technology remit that can include IT strategy, suppliers, projects, budgets, procurement and technology change.
Some organisations need one role. Some need a little of both.
Can you help us implement the recommendations too?
Yes. Black Swan can provide strategic advice and can also help implement technical controls such as managed endpoint protection, identity monitoring, email security, patch management and backup.
That does not mean every recommendation has to result in buying something from us.
Can you help with Cyber Essentials and cyber insurance?
Yes. These are common reasons organisations start looking for more structured cyber security leadership.
We can help identify gaps, prioritise improvements and prepare the evidence needed for certification, insurance or customer requirements.
How often would we speak to our vCISO?
That depends on the level of support required. Some organisations need a regular monthly review. Others need less frequent strategic oversight with additional support around projects, insurance renewals or compliance deadlines.
How much does vCISO support cost?
Ongoing vCISO support starts from £150 per month, with many smaller organisations falling between £150 and £500 per month depending on the scope.
One-off security reviews start from £295.
Senior cyber security thinking without adding another full-time salary.
Black Swan is based in Chesterfield and works with smaller organisations across Derbyshire, Sheffield, South Yorkshire, Nottinghamshire and the wider UK.
Whether you need a one-off review, help preparing for an assurance requirement or somebody to stay involved over time, the starting point is the same: understand where you are now and decide what actually needs to happen next.
Stop wondering whether cyber security is somebody else's job.
Tell us what you already have, what is worrying you and what your organisation is being asked to demonstrate. We will help you work out what is working, what is missing and what should happen next.
Backed by the world's leading cyber defenders
Meet Kevin: Founder & lead security consultant
Kevin has spent over 20 years solving real-world IT and cyber security challenges for organisations like yours. His approach is refreshingly straightforward: listen first, understand your constraints, then build security that actually works within your budget and compliance requirements.
Beyond technical expertise, Kevin brings a deep understanding of how organisations really operate, gained through years serving as a Parish Councillor, school governor, and charity trustee. He knows what it’s like to balance competing priorities, stretch budgets, and maintain public trust.
Whether you’re dealing with a security incident or simply want an honest assessment of your current protection, Kevin provides clear guidance without the sales pitch.
Ready to discuss your security needs?
Contact Kevin directly – no lengthy sales process, just practical advice from someone who genuinely wants to help.
Meet Kevin: Founder of Black Swan
Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you!
From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.
Ready to replace sleepless nights with peace of mind? It all starts with an informal chat!
Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.