Browse categories
Explore
Fiverr Pro
English
$
USD
I will be your cybersecurity consultant on retainer
CMMC, HIPAA and NIST compliance advisor, CISM, CMMC RPA
I'm Sam Durso, founder of The Cyber Friend LLC. I help small and medium businesses get ready for CMMC, meet the HIPAA Security Rule, assess risk against NIST CSF 2.0, and write the policies and plans ...
Vetted by Fiverr Pro
Sam was selected by the Fiverr Pro team for their expertise.
Vetted for
Cybersecurity
About this Gig
Vetted Pro
Your insurer asked who handles your security. So did your biggest client. You do not have a good answer, and you are not big enough to hire one.
This puts a credentialed advisor on record for you, at a price a solo operator or a small practice can actually carry.
Every tier includes:
- Priority email consulting with a one-business-day response
- A monthly 30-minute check-in call with me
- Phishing consultation whenever something looks wrong
- A monthly security newsletter written for your team
- Sam Durso, CISM, listed as your Retained Cybersecurity Advisor on record
Solo Operator covers one contact. Small Team covers three and adds same-business-day priority. Growing Business covers five and adds a quarterly threat briefing for your sector.
Being able to name your security advisor carries more weight than people expect on an insurance application or a client security questionnaire.
What this is not: incident response, compliance assessments, regulatory representation, on-site work, or policy writing. Those are scoped separately. This is retained advisory access, not a full CISO engagement.
Message me with who asked, and I will tell you which tier fits.
Expertise:
Awareness
•
Data protection
•
Threat intelligence
Technology:
Cloud - IaaS
•
Mail Services
•
Mobile
•
Physical
•
Saas
Regulation:
Other
Other Cybersecurity Services I Offer
FAQ
How is this different from your vCISO retainer?
This is advisory access. The vCISO retainer is ownership. There, I direct your security program, run board reporting, and take responsibility for your posture. Here, I am a credentialed advisor you can reach, and a name you can put on record.
What does advisor on record actually mean?
When an insurer, client, or auditor asks who handles your security, you name me. Sam, CISM. That is a real answer instead of a shrug, and it is often the difference on an application or a questionnaire.
How fast do you respond?
One business day on Solo Operator. Same business day on Small Team and Growing Business. If something is actively on fire, that is incident response, and it is scoped separately.
What is not included?
Incident response, compliance assessments, regulatory representation, on-site work, and policy writing. All available, all scoped separately. This retainer is advisory access and is not a full CISO engagement.
Is there a contract?
No long-term contract. Cancel with 30 days' written notice.
What if we outgrow this?
Then we talk about the vCISO retainer, where I take ownership rather than advising. Plenty of clients start here.
