What We Do
Our Mission
Providing Businesses with Virtual CISOs
Our mission is simple - not all businesses can afford a full-time cyber security executive on staff, someone who is technically fluent and business savvy, effective at communication from technician to CEO, and can guide the organization in reducing risks to information assets. Integration Link was formed to address that gap with part-time virtual Chief Information Security Officer executive leadership services. We serve Small to large enterprises in all verticals, with a focus on healthcare payers, pharmacies, hospitals, physician offices, lawyers, medical practices firms, and startups.
Adding Business Value
At an average annual compensation of over $270,000, the cost of adding a full-time Chief Information Security Officer (CISO) can far exceed the budgets of many businesses . However, many businesses don't require a full-time security leadership position; part-time experienced guidance is all that is needed. That's where a virtual CISO (Integration Link) adds value.
Our passion is to help organizations gain a fighting chance in an increasingly hostile cyber security threat environment by providing executive part-time Integration Link services. It is our name; it is our core. We exist to serve.
Whether PCI gap analysis, GDPR data mapping, information security risk assessments, audit remediation, strategic planning, interim CISO services, or anything else information security related, Integration Link Services, LLC can help with our virtual CISO as a Service (CaaS) offerings.
FAQS
Frequently Asked Questions
What is a Virtual CISO?
A Virtual CISO is a service designed to make top-tier security experts available to organizations who need security expertise and guidance. Our team of experts have decades of experience; building information security programs that work WITH business objectives and show measurable improvement to security posture.
Should I hire a CISO or a Virtual CISO?
A full-time Chief Information Security Officer (CISO) is salaried at $180k-$200k. Add on benefits, bonuses, stock programs, etc, the total compensation is $250k-$300k. A virtual CISO can cost a fraction of that amount.
So, why doesn’t everyone outsource their CISO?
Virtual CISO services can cost as little as $35k per year and as much as $250k per year. Our typical virtual CISO engagements decrease in cost over time as our client’s security programs go into “maintenance mode,” where the constant building effort is no longer a factor.
Why Healthcare Covered Entities and Business Associates need a CISO?
$84 Million HIPAA Settlement: HIPAA Compliance in 2019
A leading health insurer signed a $10 million HIPAA settlement with the AG of 30 states - result of a 2014 data breach that exposed PHI on more than 10.4 million individuals nationwide. The settlement related to a 2014 breach disclosed in 2015.
The health insurer's cybersecurity vulnerabilities gave a hacker unrestricted access to PHI for nearly a year.
The $10 million payment to the states is in addition to a proposed $74 million class action lawsuit settlement. Under the settlement, the health insurer must address the following CAP tasks:
- Ensure its data security program protects PHI as required by law
- Regularly assess & update its security measures
- Provide data security reports, completed by a 3rd-party security expert approved by the multistate coalition, to the Washington state AG
- Hire CISO experienced in data security & HIPAA compliance
- Hold regular meetings between the CISO and executive management
- CISO must meet with CEO every 2 months
Inform the CEO of any unauthorized intrusion into the network within 48 hours of discovery.
What does a Virtual CISO include?
Our virtual CISO offering is meant to be flexible in order to meet the needs of each of our clients. Engagements typically follow a cycle of assess, plan and remediate.
Whether you need high level guidance on a monthly or quarterly basis or need hands-on help several days per week, our virtual CISO’s will be able to build a solution for you.
Typical objectives of a virtual CISO engagements include:
- Information security leadership and guidance
- Steering committee leadership or participation
- Security compliance management
- Security policy, process, and procedure development
- Incident response planning
- Security training and awareness
- Security assessment
- Internal audit
- Penetration testing
- Social engineering
- Vulnerability assessments
- Risk assessment
- And much, much more.
Learn More
info@integrationlinkinc.com or contact us at phone number: 847.242.1978