what do these engagements focus on?
Clients who prefer these engagements are looking to build a cybersecurity program, many times from the ground-up, but some want to expand what they are currently doing and mature their program.
For many small to mid-sized businesses, there might be no need for a full time Chief Information Security Officer (CISO), so the option of a temporary or longer-term virtual CISO is a great option.
Some businesses already have an internal or external vendor-based IT/Security team and clients want their cyber defense strategy audited against best-practices. This is also a great hygiene choice for many.