Frequently Asked Questions (FAQs)

1. What is a virtual CISO (vCISO)?

   Answer:

   The vCISO is a security practitioner who uses the culmination of their years of cybersecurity and industry experience to help organizations develop and manage the implementation of the organization’s information security program. At a high level, vCISOs help architect an organization’s security strategy, with some helping and caring for its performance. Internal Security staff may still exist, either reporting to or working with the vCISO and their team to execute an impactful security program. Additionally, the vCISO is usually expected to be able to present the organization’s state of information security to an organization’s board, executive team, auditors, or regulators.

2. Why would an organization need a vCISO?

   Answer:

   According to the Texas Attorney General’s Site on Data Security Breach Reports, four (4) businesses have been impacted in the immediate vicinity - three (3) in Amarillo and one (1) in Dalhart. The number of people affected by those data breaches equates to 293,337 Texans.

   To put this into perspective, the total number is over the number of people residing in the Amarillo, Texas, area based on the 2022 United States Government Census (201,291).

   IT leaders have a lot of stuff taking place, and a vCISO can come in and help you build a security plan to mitigate data security risks to your organization. Having someone you can call with experience and knowledge of how a security program functions and operates is essential.

3. What businesses or industries are your primary focus?

   Answer:

   Our services are versatile enough to aid any organization of any size.

4. What is the “11th Hour Compliance, LLC Process”?

   Answer:

   First, we must know your organization as well as you do. Next, we look at your organizational structure to understand who does what. After building those relationships, we assess your documentation base and look at documents or processes that may be missing. Lastly, we create a system security program plan to hit the easy targets and build your organization’s security program “from the ground up.”

5. Are the rates mentioned above “firm” rates?

   Answer:

   The rates you see above are a starting point. The idea is to show that we are willing to negotiate costs. It does require a contract, and this ultimately protects all of us. We do not intend to “drain you,” so we will provide the same service to those in the Emerald as we would for the other packages.

   There will be times when, in the case of a security incident, we would need to work long, long hours with our partners to uncover what is taking place, how to mitigate it, and what we can do to recover any data. Security events are costly and can affect everyone and everything in an organization. It is our prayer that we lessen that risk by your side.