Virtual CISO
A fractional chief information security officer, who owns your security program, reports to leadership and the board, and works as part of your team.
Cybersecurity consulting · Oslo, Norway
Build security your customers can trust
Senior security leaders and engineers who set up your security program, prepare you for audits, test what you build, and stand by you when something goes wrong, so the feeling and the reality of security converge.
- 25years of industry experience in our security leaders
- 10–100%of a full-time role, from fractional advice to an embedded team
- ISO · SOC 2 · PCI DSScertification, attestation, and assessment readiness, plus privacy compliance
- 24/7security monitoring and incident response when it matters
Everything a security program needs
From board-level strategy to hands-on testing. Pick a single engagement, or let us run your security function end to end.
Leadership and strategy
Direction, decisions, and accountability at the top.
Risk assessment, strategy and roadmap
Enterprise and technology risk assessments that turn into a prioritized IT, AI, and security roadmap, with advice while you implement it.
Leader mentorship
Continuous and on-demand mentorship for board members, CISOs, and senior security managers stepping into leadership roles.
Engineering and design
Security built into your organization, systems, and products.
Resident security engineers
Highly qualified engineers embedded in your environment. They grow your team’s expertise and set up change management, bug bounty triage, business continuity, and disaster recovery planning.
On-demand security support
A lightweight option through Amleth: experts in your Slack or Teams channel, for a flat monthly fee.
Amleth serviceOrganizational, system and product security design
Security processes and documentation for your organization, security features for your products, and trust profiles your customers can rely on.
Testing and compliance
Evidence that your controls work, for you, your customers, and your auditors.
Security reviews
Application and IT security assessments, including design and protocol reviews, and code and configuration reviews.
Penetration tests
Black-box and grey-box testing of IT infrastructure, web applications, and mobile applications.
Compliance support
Preparation for ISO 27001 and ISO 42001 certification, SOC 2 attestation, and PCI DSS assessment, plus privacy compliance with DPO and EU representative services.
Detection and response
Ready before an incident, and at your side during one.
Crisis management
The right actions during a security incident: investigation, ransomware negotiation, crisis communication, and mitigation.
Security monitoring 24/7
Night/Shift, our security monitoring and posture management platform, runs on-premises or in public or private clouds, with an optional fully or partially embedded SOC team.
Night/Shift platform
Engage us the way that fits
Start small and scale as you grow. Every engagement is led by senior practitioners, and every one of them leaves your team stronger.
-
Fractional
Security leadership without a senior hire
A virtual CISO for 10 to 20 percent of a full-time role, owning strategy, risk, and reporting to the board.
-
Embedded
Engineers inside your team
Resident security engineers from a quarter-time to a full-time role, working in your tools and processes.
-
Project
A clear scope and clear deliverables
Risk assessments, security reviews, penetration tests, security design, and training, delivered to a fixed scope.
-
Ongoing
Support that keeps running
Monthly compliance support, crisis readiness, and 24/7 monitoring that work in the background while you build.
Let the feeling and the reality of security converge
Customers, partners, and auditors want to see that you take security seriously. We help you do the work, and show it.
Senior from day one
Experienced practitioners do the work. Our security leaders bring 25 years of industry experience.
We leave you stronger
We grow your team’s skills and processes as we go, so security keeps working after we step back.
Sized for startups and scale-ups
Fractional and project-based engagements give you the program you need now, with room to grow.
Trust you can show
Policies, trust profiles, certifications, and attestations that your customers and partners can rely on.
Security training that sticks
Online and on-site training and workshops for security professionals, in groups of up to 10 people so everyone gets hands-on time.
Online or on-site · Up to 10 people per group
Plan a training- Security for Sysadmins
- Security Auditing
- Managing Security Teams
- Fundamentals of Privacy Engineering
- Fundamentals of Enterprise Risk Management
- Fundamentals of Application Security
- Incident Response and Disaster Recovery
Let’s talk about your security
Tell us where you are and where you need to be. We aim to respond within 24 hours, weekends included.
Prefer email? hello@digital-trust.no