Office of the CISO

Office of the CISO offering is designed to help an enterprise secure best in class Technical Subject Matter Experts (SME) to advise and consult on core security technology, risk, and compliance areas. Today all organisations are struggling to balance the cost of cyber defences and effective utilisation viz the ever-increasing complexity and need for ever-increasing budgets. With Gamithya OOC (Office of the CISO) offering we bring a team of specialists to support the CISO with an industry experienced shared skill pool, monthly on demand as a retainer, effectively cutting down your super specialist talent ownership costs by 60-80% whilst delivering the outcomes to secure your enterprise.

The Package of skills that are available for the OOC offering are briefly described in the Catalogue below.

Infrastructure & Cloud Security

  • Periodic review of Cloud Security posture
  • Validate impact of new workload deployments
  • Advise on best practices and deployment architecture and tools
  • Implementation/Remediation oversight

Network Security

  • Advise periodically on network security architecture
  • Firewall/ IDS/IPS rule and configuration/change review
  • Advise on best practices and deployment architecture and tools
  • Implementation/Remediation oversight

Workplace & Endpoint Security

  • Advise periodically on Desktop/ Mobile security policy and procedure
  • DLP/ Data security processes and configuration/change review
  • Advise on best practices and deployment architecture and tools
  • Implementation/Remediation oversight

Identity Access Management

  • Advise periodically on Identity life cycle management
  • Periodic review of IAM and PAM processes, tools & security posture
  • Access Governance & Provision management
  • Implementation/Remediation oversight
Compliance Documentation
cloud network

Vulnerability Management and Governance

  • Continuous review of reported and zero-day vulnerabilities
  • Advise mitigation actions and prioritisation
  • Vulnerability closure validation
  • Implementation/Remediation oversight

Governance Risk & Compliance (GRC)

  • Advise in definition of security policies
  • Adherence of policies and standards
  • GRC automation advise
  • Support on Governance & Reporting, CIO/ CISO Dashboards
Advisor & SME Profile: Cybersecurity professionals with industry accreditation in relevant domains with 10-15 years of average experience of working in complex global security environments with a wide depth and breadth on multiple technologies.