Email and employee access
MFA configuration, administrator roles, offboarding practices, and available email protection settings.
Cybersecurity · AI Security · Virtual CISO
Protect your business.
Move forward with confidence.
Security assessments and virtual CISO leadership for businesses of every size. Understand your exposure, set priorities, and guide your security program with experienced advisory support.
Discuss your assessment Independent review · Defined scope · Clear next steps
Led by Todd BethuneCISSP · CISM · CISA · CRISC
What we examine
Get a clearer picture of what is covered.
Scope the review around your business needs, from email and employee access to cloud systems, security operations, and AI use cases.
Endpoints and security operations
Review endpoint protection, vulnerability management, and security monitoring within an agreed scope. Broader reviews receive a custom proposal.
Cloud systems and data protection
Examine agreed cloud configurations, data access, sharing practices, and recovery evidence to identify supported findings and improvement priorities.
AI readiness
Review agreed AI use cases, data flows, access controls, and safeguards. The scope and depth are defined in a custom proposal.
Assessments and advisory services
An assessment that fits your business.
Small businesses
A defined review of one email environment and limited supporting evidence. The $1,500 pilot below provides a focused starting point.
Growing and midsize companies
A broader review of agreed identity, endpoint, cloud, data protection, and security operations controls. Custom quote after discovery.
Enterprises
Assess a specific application, environment, business unit, or security program. Depth, stakeholders, evidence, and reporting are agreed before pricing. Custom quote.
Businesses using AI
An AI readiness and security assessment of agreed use cases, data flows, and safeguards. Available for any business size. Custom quote.
Company size alone does not determine the fee. Pricing reflects the systems reviewed, assessment depth, evidence volume, interviews, and deliverables.
Ongoing security leadership
Virtual CISO services.
Executive security guidance on a defined monthly engagement.
Discuss vCISO servicesGive your security program direction, accountability, and a voice at the leadership table.
Work with Todd to build a security roadmap, prioritize risk, and coordinate improvements with your internal IT team or service providers. Engagements can support owners without a dedicated security leader or provide additional advisory capacity to an established team.
- Strategy and investment priorities — a security roadmap tied to business goals and budget planning.
- Risk and remediation oversight — a risk register, assigned actions, and regular progress reviews.
- Governance and AI oversight — policies, responsibilities, and review processes for agreed technology and AI use cases.
- Leadership reporting — concise risk summaries and scheduled executive or board briefings.
- Vendor and incident readiness — coordination of vendor security reviews, response planning, and agreed tabletop exercises.
Custom monthly retainer. Scope, hours, meeting cadence, deliverables, and response expectations are agreed before kickoff. Hands-on implementation, continuous monitoring, and 24/7 incident response require separate arrangements. Business decisions and risk acceptance remain with client leadership.
Small Business Assessment
The focused pilot package.
$1,500
Fixed pilot fee, subject to confirming scope and fit.
Proposed payment: $750 at kickoff and $750 upon delivery. Larger or more complex environments receive a separate proposal.
Request a consultationDesigned for one business
- One Microsoft 365 or Google Workspace environment with up to 25 active accounts.
- Two interviews of up to 45 minutes each and up to two hours of supervised read-only walkthroughs.
- Up to five device-status records, one backup summary, and one data-sharing workflow.
- Written findings, recommended owners, and a prioritized action plan.
- A 45-minute results meeting with you and your IT provider.
Target delivery is within 10 business days after required evidence and walkthroughs are complete. Unverified areas are clearly identified. Scanning, penetration testing, remediation, recovery testing, and compliance certification are outside the pilot scope.
The process
From questions to priorities.
Confirm the fit
A complimentary 20-minute conversation identifies your concerns, environment, stakeholders, and the right assessment scope.
Review the evidence
Agree on deliverables, pricing, and authorization, then work with your team to review approved information and configurations.
Make a practical plan
Walk through the findings together and give your team clear priorities for improvement.
Your advisor
Todd Bethune
CISSP · CISM · CISA · CRISC
Cybersecurity and cloud security experience, explained in business terms.
Todd helps owners understand security concerns, evaluate available evidence, and identify practical improvements. The assessment can include your existing IT provider, so findings connect to the people responsible for implementation.
For businesses exploring AI, a separate engagement can review a proposed use case, its data handling, and the safeguards needed before implementation.
Common questions
Before you begin.
How does a vCISO engagement work?
We agree on your priorities, a monthly allocation of advisory time, scheduled meetings, and specific deliverables. The engagement can begin with a baseline review and roadmap, followed by ongoing risk oversight and leadership reporting. Pricing is customized to that scope.
We already have an IT provider. Is this useful?
It may be, if you want a focused review or have a concern that has not been addressed. The initial conversation helps identify whether there is a useful gap to review.
Will you make changes to our systems?
The pilot reviews evidence and settings through authorized read-only walkthroughs. Changes and remediation require a separate scope and approval.
Does the assessment guarantee security?
No. It is a point-in-time review of agreed systems and available evidence. It identifies supported findings and limitations; it does not guarantee prevention of incidents or certify compliance.
Can you assess a larger business or an AI project?
Yes. Growing companies, enterprises, and AI projects receive custom proposals based on agreed systems, review depth, stakeholders, and deliverables. The $1,500 fee applies only to the defined small-business pilot.
Start a conversation
What would you like to understand about your security?
A short consultation will establish your business concern, who handles IT, and whether an assessment or ongoing vCISO engagement is the right fit.
Email Todd to discuss your needs ↗
Contact: todd@neterka.net