Managed security foundation
XDR/EDR, continuous monitoring, vulnerability management and response escalation.
Managed Cyber Leadership
Senior cyber leadership without the cost of building a full in-house function.
Smaller regulated institutions still face the same cyber and resilience expectations as much larger organisations. Poro combines experienced cyber leadership, proportionate security controls and the evidence boards and supervisors need — in one managed capability.
Leadership, controls and evidence — as one capability
Fractional cyber leadership
Board reporting, cyber strategy, regulatory engagement and investment challenge.
Governance & resilience
Risk register, policies, incident plan, third-party oversight and exercises.
Flexible service levels
The service is available at different levels, allowing each institution to select a model that reflects its size, risk profile, regulatory expectations, internal capability and budget.
Foundation
Designed for smaller institutions that need a credible minimum cyber capability and access to senior support.
This could include:
- Initial cyber risk and maturity assessment
- Core governance and policy framework
- Managed endpoint detection and response
- Vulnerability and external exposure monitoring
- Incident response access
- Quarterly cyber leadership reviews
- Annual board briefing or tabletop exercise
- Prioritised annual improvement roadmap
Managed Cyber Leadership
Designed for institutions that require ongoing cyber oversight but do not need a full-time internal CISO.
Everything in Foundation, together with:
- Named fractional CISO or senior cyber adviser
- Monthly executive risk and control reviews
- Regular board reporting
- Cyber strategy and budget planning
- Cyber risk register oversight
- Third-party and supplier risk support
- Regulatory and supervisory engagement
- Incident leadership and escalation
- Oversight of security providers and internal IT delivery
Managed Cyber Function
Designed for institutions that require a more comprehensive outsourced or co-managed cyber capability.
Everything in Managed Cyber Leadership, together with:
- More frequent leadership and governance support
- Broader managed security monitoring
- Extended vulnerability and exposure management
- Identity, email and cloud-security support
- Security testing and assurance programme
- Architecture and change-review support
- Third-party assurance
- On-site support and exercises
- Enhanced incident escalation and response arrangements
- Support for regulatory remediation and major transformation programmes
Modular support
Institutions can also add specific services where needed:
- Board and executive training
- Incident simulations
- Cyber strategy development
- Regulatory remediation
- Third-party risk reviews
- Security architecture assessments
- Penetration testing
- Digital forensics
- Crisis communications
- Temporary leadership during recruitment or major change
The intention is to provide a scalable service rather than a fixed package. Institutions can begin with a focused baseline and increase the level of support as their risk, regulatory requirements or internal capability develop.