Virtual CISO · Engagement documents

vCISO Engagement Documents

The three documents behind every RETACH Virtual CISO engagement, published so you can read our terms before we talk. There's no sign-up and no email gate.

How they fit together

The Framework sets the relationship. The NDA protects both sides from the first conversation. Each piece of work then runs under its own SOW, with a fixed scope and a fixed fee.

01 Framework→02 Mutual NDA→03 SOW per engagement
01

Master Engagement Framework

The umbrella agreement for a vCISO relationship: governance, roles and RACI, the operating model and cadence, escalation, reporting, and the commercial and legal terms every engagement sits under.

PDF7 pages137 KBVersion 1.0
SHA-256 checksum2f725abb99849e95bed0aea60049842bc8ac5ddb33fa3852737328a4bc29f739
02

Mutual Non-Disclosure Agreement

Mutual confidentiality before any information changes hands, including security-specific clauses on credentials, findings and vulnerability handling, and data-processing terms under Kenya’s Data Protection Act, 2019.

PDF7 pages104 KBVersion 1.0
SHA-256 checksum4428cef61654aae7ae6c0a2991bc6e7da2ca6a930f8d32d476936caab22e5cf5
03

Scope of Services / SOW Template

The per-engagement statement of work for a fixed-scope vCISO engagement: modules selected, deliverables, timeline, fixed fee, rules of engagement, acceptance and change control.

PDF15 pages256 KBVersion 1.0
SHA-256 checksum1020b741581d93af000370e61ec806ffa5102cfac497daf108ab76cfaaf17c95

Fixed-scope modules in the SOW

Choose one or more. Each module has its own deliverables, duration and fee, all delivered through the S.I.N.S. Framework™.

M1Security Audit (Digital Resilience Assessment)
M2ISO/IEC 27001:2022 Readiness
M3Security Policy Build
M4Board Security Roadmap
M5Post-Incident Review
Templates for reference. These are RETACH's standard templates, version 1.0. Final terms are agreed, completed and signed for each client, and nothing here is binding until both parties sign. They aren't legal advice, so please review them with your own adviser. Questions? Email info@retach.tech.

Ready to scope an engagement?

Pick your modules and request a fixed-fee quote.

View vCISO services & request a quote →