A vCISO (virtual CISO) is a senior CISO shared across multiple organisations, typically 1 to 5 days per month. Relevant for SMEs and mid-caps that don’t justify a full-time CISO but need to drive a cyber roadmap, prepare an audit, or back a credible governance posture.