Tailored solutions for vCISOs and external security officers
Serve more clients as a vCISO
without maintaining more spreadsheets.
The Sightadel CISO Workbench is the workspace for vCISOs and external security officers who serve several companies: one login for all clients, one method for every customer and evidence that counts for ISO 27001, NIS2 and GDPR at once. Hosted in Germany, the data stays with the client.
Your day-to-day
What costs a vCISO time with ten clients
One client can be run with spreadsheets. From the third or fourth one, a large part of your time goes into files, templates and coordination.
A different filing system for every customer
Folders, spreadsheets and mailboxes look different at every customer. Before you can start working, you look for the current status.
Every client on its own template
One customer’s risk method does not match another customer’s Statement of Applicability. You build every improvement ten times.
Reports and audits by hand
A new presentation for every management meeting, a folder of records by email for every audit. Expired evidence is often first noticed by the auditor.
Your workspace as a vCISO
All customer accounts with one login
You sign in once and switch between the customer accounts you have been invited to. Each customer only sees their own data.
- Consultant (external) role in every customer account
- The activity log records the access from outside
- No second login per customer
Client at a glance
Each customer’s status at a glance
In the customer’s account you see right away where they stand: compliance progress per framework, the Security Score of the monitored domains and the most important open issues.
- Progress per framework
- Security Score with trend
- Open issues by severity
One method for every client
Assessments, control by control
Each requirement is phrased as a question with an explanation. Answer, rationale and evidence sit at the same control. That way you work the same way at every customer, and the customer’s staff can contribute without knowing the standard.
- Evidence linked directly to the control
- AI templates provide drafts for policies
- Custom frameworks for individual customer requirements
Evidence that counts for several frameworks
One piece of evidence, several requirements
A piece of evidence is stored once and linked to every requirement it supports, for example for ISO 27001, NIS2 and the GDPR at once. Each piece of evidence has an expiry date, and Sightadel reminds you in good time.
- Version, status and validity for each piece of evidence
- Expired evidence shows up before the audit
- Import from Excel and Word
Action plans
Measures with owners and due dates
Gaps from assessments, internal audits and findings become measures with an owner and a due date. The customer’s staff work on their part as Contributors, and you see the status without chasing anyone by email.
- Linked to controls, evidence and vulnerabilities
- Overdue measures visible to you and to management
- Annual cycles for internal audit and management review
Risk register
Assess risks with a fixed method
Risks are assessed with the same method at every customer, given a treatment and owners, and linked to measures. The same inputs lead to comparable results. Management confirms accepted residual risks.
- Rating, treatment and owner for each risk
- Linked to measures
- Residual risks confirmed by management
Management sees the status itself
Viewer role for management
Under section 38 BSIG, management must monitor the implementation of the measures. With the Viewer role it sees the dashboard, progress, open issues and action plans without changing anything. You as the vCISO add the context.
- Read access to everything, without accidental changes
- No separate report for every meeting
- Six roles: Admin, Consultant internal, Contributor, Viewer, Consultant external, Auditor
Audits without sending files
The auditor checks in the system
The auditor gets their own access without the right to delete. They see requirements, answers, evidence and the log in context, comment at the control and create entries once you approve. Nobody sends folders by email any more.
- Own Auditor role, never deletes
- Every action with time and person in the log
- The Trust Center answers questions from your client’s customers
How it works
How to start as a vCISO with your first client
Becoming a partner is free and without obligation. Your customer takes out the licence themselves.
- Become a partnerYou sign up via the partner form. We get in touch personally and arrange your onboarding.
- OnboardingIn about 90 minutes by video, we show you the structure, roles and evidence management from the perspective of your role.
- Your customer invites youYour customer takes out the licence directly with Sightadel and invites you to their account with the Consultant (external) role.
- Import what existsThe Statement of Applicability, risks and vendors come in via Excel import, policies via Word import. Integrations, for example with Jira or Microsoft Azure, add assets and tasks.
Trust
As a vCISO, your clients stay yours
Sightadel is your tool. It does not change the relationship between you and your customers.
No allocation of clients
Customers choose consultants in the partner network themselves. We do not allocate clients and do not favour anyone. You sign your contract directly with the customer.
No commission for audits
No money flows between Sightadel and auditors for audits, in either direction. Whoever advises a company does not audit it.
The data stays with the customer
You work in the customer’s account. When the engagement ends, they revoke your access, and all data stays with them.
Hosted in Germany
Sightadel is developed and operated in Germany. We conclude a data processing agreement under Art. 28 GDPR with every customer.
Security at SightadelPricing
What your customer pays
Your customer takes out the licence directly with Sightadel. It applies per framework, runs for at least one year and is paid monthly or annually. An example: your client runs an ISMS under ISO 27001. The licence for ISO 27001: from €750 per month. If NIS2 is added, there is a permanent discount on it because ISO 27001 is already included.
You agree your fee with the customer as before. Sightadel is not a party to your consulting contract. Editions and a cost calculator are on the pricing page. If a customer needs more than the standard, for example a connection to another system, custom adaptations are possible.
Questions and answers
Questions from vCISOs and external security officers
More in our FAQ or directly via our contact form.
As a vCISO, do I need a separate account for every customer?
No. Each customer has their own account and invites you with the Consultant (external) role. With one login you switch between all customer accounts you have been invited to. Each customer only sees their own data, and your clients do not see each other.
Who owns the data?
The client. You work as an invited user in their account, not in a copy. Sightadel concludes the data processing agreement under Art. 28 GDPR with the customer.
What happens when an engagement ends?
The customer revokes your access. The data stays with them, including all evidence, action plans and the activity log. Your login remains in place for your other clients.
Can the customer continue internally later?
Yes. The account belongs to the customer, and what you built there stays there. If an internal security officer takes over, they continue with the same status, including risks, evidence with expiry dates and the annual cycles.
Is there a dashboard across all clients?
You switch between customer accounts with one login. Each account has its own dashboard with progress per framework, open issues and overdue measures. There is no combined overview of all clients in a single view.
Does neonotu compete with me?
No. neonotu is a sister company of Sightadel and offers the service of a vCISO. Sightadel is the platform for vCISOs. These are fundamentally different offerings, and neonotu does not poach customers from Sightadel partners.
Can I take over my customers’ existing documents?
Yes. The Statement of Applicability, risk lists and vendor spreadsheets can be imported from Excel, policies from Word. You then map the documents to the requirements.
What does it cost me as a vCISO or external security officer?
Joining the partner network is free of charge and without obligation, with no term and no sales target. Your customer takes out the licence directly with Sightadel.
Start with your first client.
Signing up as a partner is free and without obligation. We get in touch personally and arrange your onboarding.