Fractional cyber leadership
Board reporting, cyber strategy, supervisory engagement and investment challenge, with clear executive accountability.
Managed Cyber Leadership
Senior cyber leadership for smaller regulated institutions.
Smaller regulated institutions still face the same cyber and resilience expectations as much larger organisations. Poro combines experienced cyber leadership, proportionate security controls and the evidence boards and supervisors need — in one managed capability.
Leadership, controls and evidence — as one capability
Governance & resilience
Essential services, critical dependencies, incident decision-making and evidence for boards and supervisors.
Proportionate security controls
Monitoring, detection and response arrangements aligned to material risks, with evidence of effectiveness and clear escalation to leadership.
Flexible service levels
The service is available at different levels, allowing each institution to select a model that reflects its size, risk profile, regulatory expectations, internal capability and budget.
Foundation
Designed for smaller regulated financial institutions that need proportionate cyber capability, clear accountability and access to senior support.
This could include:
- Initial cyber risk and maturity assessment
- Core governance and policy framework
- Managed endpoint detection and response
- Vulnerability and external exposure monitoring
- Incident response access
- Quarterly cyber leadership reviews
- Annual board briefing or tabletop exercise
- Prioritised annual improvement roadmap
Managed Cyber Leadership
Designed for institutions that require ongoing cyber oversight but do not need a full-time internal CISO.
Everything in Foundation, together with:
- Named fractional CISO or senior cyber adviser
- Monthly executive risk and control reviews
- Regular board reporting
- Cyber strategy and budget planning
- Cyber risk register oversight
- Third-party and supplier risk support
- Regulatory and supervisory engagement
- Incident leadership and escalation
- Oversight of security providers and internal IT delivery
Managed Cyber Function
Designed for institutions that require a more comprehensive outsourced or co-managed cyber capability.
Everything in Managed Cyber Leadership, together with:
- More frequent leadership and governance support
- Broader managed security monitoring
- Extended vulnerability and exposure management
- Identity, email and cloud-security support
- Security testing and assurance programme
- Architecture and change-review support
- Third-party assurance
- On-site support and exercises
- Enhanced incident escalation and response arrangements
- Support for regulatory remediation and major transformation programmes
Modular support
Smaller regulated financial institutions can add specific support to the agreed leadership and resilience programme. Technical work is scoped around identified risks and overseen through the same governance arrangements:
- Board and executive training
- Incident simulations
- Cyber strategy development
- Regulatory remediation
- Third-party risk reviews
- Security architecture assessments
- Penetration testing
- Digital forensics
- Crisis communications
- Temporary leadership during recruitment or major change
The intention is to provide a scalable service rather than a fixed package. Institutions can begin with a focused baseline and increase the level of support as their risk, regulatory requirements or internal capability develop.