An Interim CISO operational within 72 hours
Sudden departure of your CISO, cyber crisis or NIS2, DORA or ISO 27001 compliance: Delville Management presents a selection of profiles within 72 hours, for a start within 5 days.
The responsibilities of an Interim CISO
The European NIS2 directive extends cybersecurity obligations to 18 sectors of activity, from energy to healthcare, including industry, transport and digital. In the companies concerned, as in all those whose business depends on their information system, a vacant CISO position becomes a matter for senior management. The Interim CISO takes responsibility for information systems security for a defined period: they decide, execute and are accountable for results, then hand the function over to a successor.
Information system security assessment
From the first weeks, the Interim CISO establishes the real state of the information system: access, backups, service providers, known vulnerabilities. This assessment gives the management committee a prioritised list of risks.
Continuity after the CISO's departure
When the Chief Information Security Officer leaves without notice, the company enters an emergency management situation, and the incumbent often takes with them the memory of incidents and contracts. The Interim CISO takes over open files without interruption: relations with the SOC, vulnerability tracking, responses to auditors.
Managing a cyber crisis
After a ransomware attack or a data leak, the Interim CISO leads the incident response. They coordinate the technical teams, service providers and management, prepare mandatory notifications and lead remediation once operations have been restored.
NIS2, DORA and ISO 27001 compliance
The Interim CISO turns the texts into a dated action plan: gap analysis, measures to deploy, evidence to document. They prepare the company for the requirements of the NIS2 directive, the DORA regulation for the financial sector and ISO 27001 certification.
Security governance and policy
They draft or update the information systems security policy (PSSI), set the rules for access and incident management, and put in place reporting that the management committee can read. Teams know who decides, and on what criteria.
Once you have expressed your need, you receive a selection of Interim CISOs within 72 hours. Each profile has already held the position of Chief Information Security Officer.
We present CISOs who know the frameworks that apply to your sector: ISO 27001, the NIS2 directive, the DORA regulation for banking and insurance. They can talk about risk to the management committee as well as to technical teams.
The selected Interim CISO takes up the role within 5 days of approval. They take over ongoing files and draw up an initial risk assessment in their first weeks.
Each assignment is followed by a local expert and a Mission Director who is an expert in the sector concerned. The Interim CISO thus has two points of support with your management committee.
At the end of the assignment, the Interim CISO documents their decisions and trains the teams. They help define the profile of the permanent CISO and organise the handover with them.
Our offices in Paris, Lyon, Lille, Nantes, Toulouse and Strasbourg, as well as our presence in Germany, Italy and Spain, allow us to operate where your decisions are made.
The Interim CISO we deploy on assignment is a senior cybersecurity executive who has already held the position of RSSI or CISO, often in a regulated sector. They know the frameworks (ISO 27001, NIS2, DORA) and know how to talk about risk to the management committee as well as to technical teams.
Their value is measured by their ability to decide quickly without disrupting what is in place. Within a few weeks, they make information systems security readable and set priorities. When the assignment covers the whole information system, an Interim CIO can take over.
.svg)
Reaching excellence with Delville Management
