Managed program
What your leadership gets, and when.
Reports come from current program data, and your cyber expert reviews each one before it reaches your leadership. How often you meet is agreed and written down, not left to chance.
Quarterly board summary
Example- 1Where we stand against our frameworks
- 2What changed since the last report
- 3Top risks, with owners
- 4Vendors needing attention
- 5Decisions we need from leadership
Draft by VectraIQ. Reviewed by your cyber expert.
How you stay informed
Four ways to see where you stand.
Dashboards in the platform
Executive dashboards built from the same current risk, vendor and control data your expert team works from, so leadership and the team work from the same numbers.
Your expert team in chat
Message your cyber expert and team in Slack, Microsoft Teams or the app. Ask VectraIQ in the same place where you stand or what to fix first.
Reports on a set cadence
VectraIQ drafts the report from current data. Your cyber expert reviews it and finalizes it with you before it goes to your leadership.
Meetings on a set cadence
How often you meet, and who attends from your side, is agreed with your cyber expert and written down.
The dashboards and report builder are covered under reporting and dashboards, and the assistant under VectraIQ.
Cadence
Agreed at kickoff, written down, changeable.
We do not set one meeting rhythm for everyone. Reporting and meeting cadence is agreed with you at kickoff, and you can change it later.
What gets agreed
- Who receives reports, and who only needs the dashboard.
- How often reports are produced, and how often you meet.
- Who attends from your side, and who can make decisions in the room.
- Where a concern goes if the service is not working: your cyber expert.
A review meeting could cover
Example- 1What changed since the last meeting
- 2The two or three findings that need a decision
- 3Vendors that moved up or down
- 4What your team has closed
- 5What is coming before the next audit
An agenda to show the shape. Yours is set with your cyber expert.
When you need more
Three kinds of extra support, and what each is not.
All three are quoted separately and set out in their own terms.
- Advanced remediation support
Cybersecurity Engineers
Our Cybersecurity Engineers, for hands-on changes in your tools.
Make a change directly in your tool where you have granted access, instead of handing you a ticket.
How it starts. Agreed per tool, quoted separately.
Not this. Not advice. See the remediation page.
- Analyst capacity
VectraPro Analysts
Our analyst service: extra hands on top of your program.
On-demand or embedded analyst support: preparing materials, running risk assessments and doing hands-on configuration work inside the platform, plus limited work outside it in direct support.
How it starts. Requests come from a named contact on your side. The analyst confirms your target date, or proposes another, before starting.
Not this. Not consulting, compliance testing or audit preparation.
- Consulting and training
Vectra Advisory
Our consulting and training service, for work beyond day-to-day program management.
Consulting, specialist help and training. It can relate to a framework, an audit or a certification, or to a platform or subject unrelated to either, and can run without the platform.
How it starts. Scoped as its own engagement.
Not this. Not day-to-day program management, and no guaranteed audit result.
What is not included
- ×Responsibility for decisions. The terms are explicit: you remain responsible for your program and for decisions made using our work.
- ×Reports or meetings beyond the agreed cadence and scope. Those are agreed with you first.
Read the VectraPro Analysts terms, the Vectra Advisory terms and your agreement. Hands-on fixes are covered on the remediation page.
Worked example
What the draft does, and what your cyber expert adds.
Illustrative. A draft is quick and accurate about what happened. It cannot know what your leadership needs to decide.
Where we stand
VectraIQ draftsScores against each framework, pulled from current control status.
Your cyber expert addsSays which of those numbers matter for the audit you have coming.
What changed
VectraIQ draftsNew and closed findings since the last report, listed.
Your cyber expert addsExplains the one change that is not obvious from the list.
Top risks
VectraIQ draftsThe highest-scored risks with their owners.
Your cyber expert addsChecks each owner agrees, and removes risks already accepted.
Decisions needed
VectraIQ draftsBlank. A draft cannot know what leadership has to decide.
Your cyber expert addsWrites it, with options and what each costs in risk.
Questions, answered.
Can we change the reporting and meeting cadence later?
Yes, as agreed with us. Cadence is whatever you agree with us, and anything beyond the agreed scope is agreed with you before it starts.
What if we are unhappy with the service?
Raise it with your cyber expert. Your named lead is the route for any service concern.
Is a VectraPro analyst the same as my lead expert?
No. Your cyber expert is named, accountable and part of the managed program. A VectraPro analyst is extra capacity you request for specific work, through a named contact on your side, and it does not cover consulting or audit preparation.
Who owns the reports and documents your team creates?
What the team creates inside the platform is your own output, as if your own user had made it. A standalone document delivered outside the platform comes with a perpetual license to use it for your business, unless it is agreed as a deliverable. The full wording is in the terms.
Next in the program
Keep going through the program.
Add capacity when the program needs it.
Tell us what your leadership expects to see, and where you need extra hands, and a lead expert will scope it with you.