Fractional CISO
Put a security leader on your team. A Fractional CISO from IT Hawaii leads your cybersecurity program on NIST CSF 2.0, reports to your owners, and takes charge when something goes wrong, part-time and on a schedule that fits.
Security leadership when the stakes go up
A Fractional CISO, sometimes called a vCISO, is a part-time chief information security officer who leads your security program and keeps it current. Businesses often bring one in when insurers, clients or vendors send hard security questionnaires, when HIPAA, PCI DSS, SEC Regulation S-P or CMMC applies, or after an incident. The best time is before any of those, when owners want someone accountable for security.
Led by Steve Massaro and our team
Steve Massaro, our CEO, and a small group of our team deliver IT Hawaii's fractional CISO services. Your CISO builds your program on NIST CSF 2.0, then reviews it with you semi-annually, quarterly or monthly, depending on your plan.
Ready when it counts
When a security incident happens, your Fractional CISO leads the response. Throughout the year, they check the security of new vendors and software before you sign, help with cyber insurance applications and renewals, help you answer security questionnaires from insurers, clients and vendors, and report your security posture and risk to your owners or board.
What your Fractional CISO delivers
A security program that stays current, reviewed on a schedule that fits.
Your cybersecurity program
Yearly program work
Incident response leadership
Vendors, insurance and questionnaires
Ready for a security leader?
Tell us what's driving your security questions. A Fractional CISO meets with you semi-annually, quarterly or monthly, depending on your plan, and works alongside your current IT provider or in-house team. A real person will reach out within one business day.
Frequently asked questions
A Fractional CISO is a part-time chief information security officer. IT Hawaii's Fractional CISO leads your cybersecurity program on NIST CSF 2.0, reviews it with you on a regular schedule, leads incident response, reviews vendor security, supports cyber insurance applications, helps answer security questionnaires, and reports to your owners or board.
Steve Massaro, IT Hawaii's CEO, and a small group of IT Hawaii team members.
Your Fractional CISO leads it. IT Hawaii builds your cybersecurity program on NIST CSF 2.0, and your CISO keeps it current. Managed IT clients also get SentinelOne endpoint protection monitored by a 24/7 SOC.
Yes. Fractional CISO and virtual CISO (vCISO) describe the same role: a part-time security leader who works with your business on a regular schedule.
IT Hawaii updates your program assessment, reviews your policies, runs an incident response tabletop exercise sized to your plan, and tests a backup restore.
Semi-annually, quarterly or monthly, depending on your plan. IT Hawaii's Fractional CISO services are offered statewide to businesses with 10 or more employees and work alongside your current IT provider or in-house team.