Cyber Security for the Private Sector
Independent, senior security leadership for ASX-listed, pre-IPO and $25M+ private companies — protecting the business and unlocking growth.
Established and high-growth businesses face enterprise-grade threats, rising compliance expectations from their own customers, and boards that increasingly demand assurance — often without a dedicated security executive. A Virtual CISO gives you that leadership: strategy, risk, compliance and governance, scaled to your stage.
Winning enterprise deals
Passing security questionnaires, ISO 27001 / SOC 2 readiness, and customer due diligence.
Board & investor assurance
Clear reporting on cyber risk and posture.
Securing growth & AI features
Building security into scaling platforms and new AI capabilities.
Compliance
APRA CPS 234, Privacy Act obligations, industry requirements.
Incident readiness
So an incident is a managed event, not a crisis.
We lead and assess; we don't resell security products. For a board or an investor, that independence is exactly what makes our assurance credible. Led by a founder with 27 years across security, SaaS, fintech and payments.
Security here isn't compliance theatre — it's a growth lever. Done well, it removes sales friction, satisfies investors and customers, and protects enterprise value. We connect every recommendation to a business outcome.
We have an IT team — why a vCISO?
IT keeps systems running; a CISO owns security strategy, risk and governance. A vCISO gives you that senior, independent layer without a full-time hire.
Can you help us pass customer security reviews?
Yes — that’s a common starting point: questionnaires, ISO 27001 / SOC 2 readiness, and a credible security story for enterprise buyers.
Do you support security for AI features?
Yes — securing AI/ML capabilities and meeting emerging governance and transparency expectations.
CISO Advisory is led by Ken Armitt — more than 30 years in hardware, software engineering and security, and over 27 years running companies that worked directly with government. He has designed and built IT environments for councils and government from top to bottom: switching, firewalls, server design and builds, connectivity and cabling, long-range Wi-Fi and satellite links, and systems serving thousands of users.
Behind Ken is a team of the same calibre — professionals drawn from military and government backgrounds, and cyber security specialists across every sector. Between them they cover every type of audit and advisory engagement, with the depth to put the right expert on the right problem. It is experience you cannot buy off a shelf, only earn.
When you engage us you are not buying a checklist. You are buying decades of hands-on experience across every layer — from the cabling to the boardroom — delivered by a team of senior practitioners with the same depth and standing.
Wherever you sit, the engagement starts the same way: an independent, senior assessment of where you really stand.
ASX-Listed Companies
Independent cyber assurance for boards, audit committees and risk committees.
Preparing to List (Pre-IPO)
Cyber due diligence that protects valuation and clears investor scrutiny.
Private Companies
Objective risk assessments for owners, executives and investors.
Cyber & IT Audits
Independent audits with clear, prioritised, jargon-free findings.
Penetration Testing
On-site, remote and application penetration testing for corporate and government.
How an engagement works
Discovery call
We learn your environment, obligations and goals — no pitch.
Scope & agree
Fixed scope, rules of engagement and timing, in writing.
Assess & test
Senior-led, hands-on work — manual testing plus targeted tooling.
Report
Board-ready summary, full technical detail and prioritised fixes.
Remediate & retest
We re-test fixed items and issue an attestation you can show.
Protect the business and unblock growth.
Start with a confidential, senior assessment of where you really stand. No obligation.