# [What Happens in the First 90 Days with a Virtual CISO](/content/thessoblog/what-happens-first-90-days-virtual-ciso/index.html)

Most V-CISO engagements end with a binder. Ours end with a program that's actually running. Here's what the first 90 days actually look like, week by week. No marketing version. The real version.

# [Does Your Business Actually Need a Virtual CISO? An Honest Answer.](/content/thessoblog/does-your-business-need-a-virtual-ciso/index.html)

Not every business needs a Virtual CISO. But if your security strategy lives in someone's head instead of in a documented program, the gap is bigger than you think. Here's an honest framework for figuring out where you actually stand.