Security leadership without the full-time CISO.
Orcannus provides Fractional CISO and cybersecurity consulting for organizations that need senior security judgment, a working program, and clear answers for auditors, customers, and the board.
Two ways to work together
Ongoing executive leadership or focused project work. Both are led directly by the founder.
Fractional CISO
A seasoned security executive embedded part-time in your leadership team.
- Security strategy and a multi-year roadmap
- Ownership of policies, controls, and the risk register
- Board and executive reporting in business terms
- Vendor and third-party risk oversight
- Incident response planning and tabletop exercises
Cybersecurity consulting
Project-based work when you need a specific answer or deliverable.
- Risk and security posture assessments
- Readiness for SOC 2, HIPAA, NIST CSF, ISO 27001, and CMMC
- Security architecture and cloud configuration review
- Policy and incident response plan development
- Customer due-diligence and security questionnaire support
How an engagement runs
Every engagement follows the same four stages, scaled to your size and risk.
Assess
Inventory systems, data, vendors, and existing controls against the frameworks that apply to you.
Prioritize
Rank risks by business impact so budget and effort go where they reduce exposure most.
Build
Write the policies, implement the controls, and rehearse incident response with your team.
Report
Give leadership, customers, and auditors clear metrics and a roadmap they can act on.
Industries we serve
Experience across regulated and security-sensitive sectors.
Start with a conversation.
Book a discovery meeting to talk through your environment, your obligations, and the outcome you need.