FAQ
Common questions.
Everything you need to know before reaching out. Don't see your question? Ask us directly.
- What does a fractional (virtual) CISO actually do?
- A fractional CISO — also called a virtual CISO or vCISO — gives you senior security leadership without a full-time executive hire. We set your security strategy, own the governance and compliance program, manage risk, and translate technical issues into decisions your leadership and board can act on.
- How is RedOps different from an IT provider or MSP?
- We don't replace your IT team or managed provider — we set the direction they execute against. RedOps owns strategy, governance, risk, and compliance, and holds vendors accountable, while your IT partners handle day-to-day operations.
- Do you work with small businesses, or only enterprises?
- Both. Our plans scale from startups taking their first serious security steps to enterprises that need comprehensive, proactive leadership. We meet you where you are and grow with you.
- Which frameworks and regulations do you cover?
- SOC 2, ISO 27001, NYDFS 23 NYCRR §500, HIPAA, GDPR, and PCI DSS — plus NIST AI RMF and ISO 42001 for AI governance. We map the work to the obligations that actually apply to your business.
- Do you help with AI security?
- Yes. We help any business adopt AI safely — acceptable-use policy, vetting AI tools and vendors, and defending against AI-powered phishing and deepfakes. For regulated firms with deep AI-governance obligations, our specialist practice RedOps AI goes further into model risk, adversarial testing, and board-level AI reporting.
- How much does it cost?
- Our vCISO plans start at $5,000/month and scale with your needs. One-off assessments, readiness reviews, and custom scopes are also available. See our vCISO Plans page for details, or book a consultation for a tailored quote.
- How quickly can we start?
- Most engagements begin within one to two weeks of a scoping conversation. We start with a baseline assessment so our first recommendations are grounded in your actual environment.
- Where are you located, and do you work remotely?
- We are based in New York, NY and Washington, DC, and serve clients remotely across the United States.