The necessary ones make the site work. The others measure which pages help and which ads bring the people who need DM11. Your choice, and you can revisit it from the footer.
Security Office
The security leadership seat, without hiring an executive.
You hire the security leadership function, not a seat on the org chart. The CISO owns security for the entire company and brings the topic to the board in the board's language. The BISO sits inside a business area, product or operations, and translates security into the context where the risk-creating decision is actually made. The person is from DM11, the time commitment is agreed, and they answer as if they were yours.
The work opens with a baseline diagnostic and continues as an ongoing operation: a security plan with defined priorities and owners, periodic reporting to decision makers, and follow-up meetings at the agreed cadence. In the CISO seat, that includes representing the company before clients, auditors, and regulators; in the BISO seat, it includes being the bridge between the business area and corporate security.
On your side, we need the mandate: access to the board, the business areas, and the information the role requires. Security without a seat at the table becomes an ignored recommendation, and that is exactly what this service exists to prevent. What you get is the topic with an owner: plan, priorities, reporting, and someone who answers when a client or auditor asks.
The stages and deliverables below describe the CISO: answers for security across the company modality. The other modalities appear when you request the proposal.
Opening assessment
A snapshot of the starting point: what exists, what is written down and what actually works. Progress will be measured against it at the end of the period, so we record it with method, not from memory.
Continuous operation
Throughout the contract we keep what was built alive: we review it at every relevant change, run what is on the calendar and report at the agreed frequency. It is what separates a delivered document from a practice still worth something a year later.
Usually comes together with
Not a bundle, and it changes nothing you have already chosen. It is what tends to come up next, in the experience of companies that have been through this.