Contractor
“You ask, we deliver”
- Who defines the question
- You, alone
- Who comes up with the solution
- You
- Who stays in charge
- You
- What it delivers
- What was asked for, even if the question was wrong
// service
Strategic partnership
You don't need extra hands that carry out whatever you ask, nor an expert who tells you from the outside how it should be done. You need someone who joins you at the table, asks the question behind the question and works out the solution together with your team. You stay in charge.
From €750 a month, scope agreed together · View pricing
When is this for you?
- You don't have your own architect or security lead, but the questions keep coming
- You want to weigh choices about cloud, security and AI together, not just have them carried out
- You want a roadmap that is actually kept up to date
- You don't want a separate quote for every question
What changes?
Now
- Questions that wait until someone has time
- Advice that ends up in a drawer
- A separate quote for every question
After this service
- A regular partner who knows your environment and your team
- Solutions you work out together and own yourselves
- Fixed time and a fixed monthly price
// not a contractor, not an expert
At the table together, not a supplier at a distance
The difference lies in who defines the question, who comes up with the solution and who stays in charge.
Expert
“I'll tell you how it's done”
- Who defines the question
- The expert
- Who comes up with the solution
- The expert
- Who stays in charge
- The expert
- What it delivers
- Good advice that often ends up in a drawer
Strategic partner
“We work it out together”
- Who defines the question
- Together, at the table
- Who comes up with the solution
- Together, with knowledge from both sides
- Who stays in charge
- You, with me as a regular sparring partner
- What it delivers
- Solutions that fit and that your team owns
// strategy and governance
Strategy and governance
Sometimes the question isn't how to set something up, but what to do first and who decides. That's what I think through with you: setting up a SOC or Cloud Center of Excellence, designs and roadmaps, the Dutch Cybersecurity Act (NIS2) and using AI responsibly.
Remote security lead (vCISO)
A regular part-time security role: keeping an eye on priorities together, discussing policy and risks, meeting with the board and suppliers, and a point of contact during incidents.
Together we create: a monthly report, a risk register and an annual security plan
Discuss this topicSecurity posture and roadmap
A baseline against Zero Trust, Secure Score and CIS, conversations with IT and management, and deciding together what comes first.
Together we create: a 12 to 18-month roadmap with quick wins, an owner and an estimate per step
Discuss this topicSetting up or choosing a SOC
Choosing between your own SOC, an MDR service or a mix; setting up Microsoft Sentinel and Defender XDR; use cases, playbooks and escalation.
Together we create: a target picture, a decision document, the first use cases and playbooks, and who does what (RACI)
Discuss this topicCloud Center of Excellence
Setting up a team and ground rules for cloud use based on the Cloud Adoption Framework: roles, governance, landing zone and cost management.
Together we create: a CCoE charter, roles and RACI, governance agreements and a backlog for the first quarter
Discuss this topicArchitecture and designs
High and Low Level Designs, a decision log (ADR) and reviews of other people's designs, including for an AI Landing Zone.
Together we create: HLD, LLD, ADRs or a review report
Discuss this topicCybersecurity Act (NIS2)
Determining whether the law applies to you, a gap analysis on the duty of care, and a plan for the reporting obligation and the board's responsibility.
Together we create: a gap analysis, a plan of measures and a training for the board
Discuss this topicAI governance and Copilot readiness
Preparing your data for Copilot (permissions, labels, clean-up), AI policy, roles and oversight of use.
Together we create: an AI policy, a readiness report, a roll-out plan and user instructions
Discuss this topicAvailable separately or within a strategic partnership. I don't run a 24/7 SOC myself and don't carry the formal final responsibility of a CISO: you remain the owner of the decisions and the risks.
My approach
Coming to the table
An exploratory conversation and a joint session in which goals, concerns and plans are put on the table: strategy, risks and current projects.
A regular rhythm
Meetings at the table at a fixed frequency, for example every two weeks, and a quarterly session with the board or management.
One shared list
Together we keep one list of issues. You choose the priorities; we work out the options together.
Delivering where needed
The agreed time can go to any service, from security and architecture to your website, support portal and email and domain.
Looking back together
Every quarter we look at what it delivered, what could be better and what the next step is.
What you get
- Regular meetings at the table, for example every two weeks
- One shared list of issues and priorities
- Strategy, security and architecture in coherence
- Time for delivery too: website, portal, email and domain
- Your own account in the support portal for questions in between
- Unused time carries over for one month
- Minimum 3 months, then cancellable monthly
// my experience
My experience
I have worked as a trusted advisor for years: roadmaps, designs, workshops for management and training for administrators, so teams can manage their environment themselves.
Frequently asked questions
Good to know
How is this different from a regular consultant?
A consultant usually gets an assignment and delivers it. As a partner I sit at the table with you: together we decide what the question is and work out the solution. You stay in charge.
What can I use the time for?
For any service on this site: strategy and governance, security, architecture, but also your website, the support portal or email and domain. So delivery is possible too, although it's never the goal in itself. If you only want something carried out, a separate project with its own proposal makes more sense.
How much time is included and what does it cost?
There are no fixed levels. Together we agree on the scope that suits you; it starts from €750 a month, excluding VAT. More time only with your approval.
What happens to time we don't use?
It carries over for one month. After that it expires.
Are you available at night as well?
No. During a major incident I think along during office hours. For monitoring around the clock, I help you choose a suitable provider.
// contact
Shall we talk?
Would you like a website, or help with your cloud environment? Request a half-hour introduction and I'll suggest a time. Or send me a message directly.