I help organizations implement and operate their cybersecurity programs. I offer organizations a holistic service of CISO and assistance with specific isolated activities. I have a master's degree in Cybersecurity, as well as multiple cybersecurity-related certifications, including CISSP, CISM, CISA, GDSA, CDPSE, LA 27001.HOW CAN I HELP YOU WITH SPECIFIC ACTIVITIES?Here are some examples of specific activities which I can help you with:* Risk Assessments - Performing risk assessments from an operational security perspective and risk assessments for isolated systems and projects. * Vulnerability Assessments - Using automated tools and manual work to look for external and internal IT infrastructure vulnerabilities. * Penetration Testing: A cyberattack simulation on an organization's IT environment to evaluate its security.* Policies, Processes, and Procedures: Establishing, formalizing, and documenting organizational policies, processes and procedures. * Auditing IT and Operational Processes: Performing IT auditing and auditing processes, procedures, and policies to support Information Security Management Systems (ISMSs). * Security Assessments of Specific Products: Performing a mixture of a vulnerability assessment and a penetration test on a specific product, e.g., a mobile application or a web service. * Data Protection Officer (DPO): Performing GDPR compliance-related work.HOW CAN I HELP YOU WITH CISO AS A SERVICE?I have assisted dozens of organizations in implementing and maintaining their ISMSs based on ISO/IEC 27001. I also offer assistance with complying with various regulations and standards, including the General Data Protection Regulation (GDPR), ISO/IEC 27001, The Payment Card Industry Data Security Standard (PCI-DSS), and The Payment Application Data Security Standard, and The Financial Supervisory Authorities requirements.HOW CAN I HELP YOU WITH COMPLIANCE-RELATED TASKS?- IMPLEMENT AND OPERATE ISO/IEC 27001- IMPLEMENT AND OPERATE THE REQUIREMENTS OF THE FINANCIAL SUPERVISORY AUTHORITY REGARDING IT-RELATED RISKS OF REGULATED PARTIES- IMPLEMENT AND OPERATE PCI-DSS- IMPLEMENT AND OPERATE PA-DSS- IMPLEMENT AND OPERATE GDPR- PERFORM IT AUDITS TO SUPPORT YOUR INFORMATION SECURITY PROGRAM- PERFORM IT AUDITS OF THIRD PARTIES ON YOUR BEHALFSPEAKING ENGAGEMENTSDon't hesitate to contact me by email at speaking@security.is for any potential speaking engagements.