Fractional CISO | Cyber Security, Risk & AI Governance

The work I do

CyberKarl provides practical Fractional CISO leadership, cyber risk management, security governance, regulatory assurance and AI security oversight to help organisations become more secure, resilient and compliant.

Problems I solve

• We need experienced cyber security leadership but cannot justify employing a full-time CISO.
• We lack a clear understanding of our cyber security risks, priorities and accountability.
• We need to meet cyber security and regulatory requirements, including ISO 27001, without unnecessary complexity or cost.
• We are introducing AI tools and agents but are concerned about security, governance and compliance.
• We are not confident our organisation is adequately prepared to prevent, respond to or recover from a cyber incident.

Who I work with

UK SMEs, mid-sized businesses, charities, public-sector bodies and regulated organisations that need experienced cyber security leadership, stronger governance, risk management and assurance without employing a full-time CISO.

What I bring

• Cyber security strategy and leadership, Senior cyber security leadership across public-sector, broadcasting, healthcare supply chain and commercial organisations, helping align security strategy with business objectives and risk priorities.
• ISO 27001 certification and security assurance, Supported more than 30 organisations with ISO 27001 certification activities, including leading an ISO 27001:2022 transition and certification at BFBS with zero non-conformities.
• AI security and governance, Implemented an ISO 42001-aligned AI management system and advised on practical AI governance, Microsoft Copilot security, risk assessments and deployment controls.
• Security operations and incident readiness, Led security operations improvements using Microsoft Sentinel, Defender XDR and security automation, strengthening detection, response capabilities and management oversight.
• Governance, risk management and executive assurance, Established security governance, risk management processes, assurance reporting and practical improvement programmes, helping senior leaders understand risks and make informed decisions.

Commercial