Who this is for
- Organisations that need external security leadership and delivery oversight.
- Teams with multiple projects, stakeholders, or customer assurance needs.
- Leadership teams that need board-ready security reporting and metrics.
Advanced plan
Security leadership and delivery support for organisations operating at scale.
Advanced provides the broadest monthly retainer, combining vCISO-style advisory, delivery oversight, strategy, reporting, and same-day support.
Monthly allocation
64 hours / month consultant time
£6,000 / month, excluding VAT
Everything in Growth
vCISO-style leadership
Weekly advisory call
Same-day support
A higher-capacity support model for organisations that need ongoing leadership, delivery coordination, and security improvement at pace.
Who this is not for
- Small teams needing basic hygiene support only.
- Organisations looking for a one-off assessment rather than ongoing support.
- Teams that need a fully outsourced 24x7 SOC within the plan.
First 90 days
A phased start that keeps expectations clear.
The first month focuses heavily on onboarding and understanding your environment. Work is then planned around priorities and the monthly time allocation.
Month 1
Leadership onboarding and operating model
- ✓Understand business priorities, governance, risks, and security ownership.
- ✓Map active security work, delivery blockers, and reporting needs.
- ✓Agree cadence, metrics, and leadership reporting expectations.
Month 2
Strategy and delivery oversight
- ✓Create or refine the security roadmap.
- ✓Support project and remediation delivery governance.
- ✓Review awareness, reporting, and stakeholder communication needs.
Month 3
Board-ready reporting and continuous improvement
- ✓Produce tailored metrics and KPI reporting.
- ✓Run weekly advisory rhythm and leadership reviews.
- ✓Adjust the roadmap and delivery priorities.
Monthly time
How your consultant time is typically used.
Actual allocation varies based on your priorities, access, risk, and the work already completed. The plan defines capacity, not an unlimited list of deliverables.
ActivityTypical hours
Weekly advisory calls4
vCISO-style leadership and strategy14
Delivery oversight and project support18
Security reviews and remediation tracking16
Board reporting, metrics, and follow-up12
Included services
What can be covered inside the monthly allocation.
Services are delivered within the available consultant time and agreed priorities for the month.
Security leadership
- ✓vCISO-style advisory
- ✓Security strategy and roadmap
- ✓Board and leadership reporting
Delivery oversight
- ✓Project support
- ✓Remediation governance
- ✓Security awareness programme support
Metrics and support
- ✓Tailored metrics and KPI reporting
- ✓Weekly advisory call
- ✓Email and phone support same day
Related services
Service areas covered by this plan.
These service pages explain the underlying work that can be delivered inside this plan, depending on monthly priorities and available consultant time.
vCISO & Security Leadership
Security strategy, roadmap ownership, delivery oversight and leadership reporting.
Learn more →
Managed Security Services
Higher-capacity recurring support for broader delivery and governance needs.
Learn more →
GRC & Compliance Support
Governance, risk, compliance readiness, controls, evidence and leadership reporting.
Learn more →
Security Awareness & Human Risk Support
Structured awareness programme support connected to real organisational risk.
Learn more →
Deliverables
- ✓Weekly 60 minute advisory call
- ✓Security strategy and roadmap support
- ✓Board / leadership reporting
- ✓Tailored metrics and KPI reporting
Customer responsibilities
- ✓Provide access to leadership stakeholders, technical owners, and relevant data.
- ✓Confirm decision ownership for roadmap, risk, and delivery priorities.
- ✓Support regular governance meetings and reporting cycles.
Response time
Email and phone support same day.
Not included
- ✓Fully outsourced 24x7 SOC
- ✓Unlimited delivery capacity
- ✓Emergency incident response unless separately agreed
- ✓Legal, insurance, or regulatory advice
Commercial terms
Clear terms for every service plan.
Review the commitment, onboarding, billing, capacity, tools, and plan-change terms before you proceed.
Is there a minimum commitment?+
Yes. Service plans have an initial three-month minimum term and continue monthly after that. During the first 15 days, you may end the agreement in writing; time already used and any approved third-party costs will be deducted before the remaining first payment is refunded.
How does cancellation work after the minimum term?+
Give at least 30 days’ written notice before your next billing date. The plan will end on the billing date that follows the full 30-day notice period. For example, if your billing date is the 1st, notice given on 10 March ends the plan on 1 May.
Do unused hours roll over?+
No. Monthly hours are reserved delivery capacity and do not roll over. Wherever practical, we proactively use available capacity against the priorities agreed with you.
What happens if we need more time?+
Additional work is £150 per hour, excluding VAT, billed in 30-minute increments and only undertaken with prior written approval. Emergency or out-of-hours work is scoped separately. Regular overuse normally indicates that a larger plan would be more suitable.
Are tools and software licences included?+
Hacker Academy’s standard internal delivery and assessment tools, such as the tools used to perform vulnerability assessment and reporting, are included. Licences deployed into or retained in your environment, including Microsoft Defender, EDR, SIEM, cloud, or other third-party products, are charged separately with prior approval.
Can we change plan?+
Upgrades can begin immediately on a pro-rata basis or from the next billing period. Downgrades begin from the next billing period and are subject to the initial minimum term.
Is onboarding charged separately?+
No. Onboarding is included within the first month’s service capacity and covers the initial review, information and access gathering, priority setting, and first action plan. If the work required exceeds the available capacity, we agree the scope, timeline, or additional cost before proceeding.
How does the Growth penetration testing allowance work?+
The allowance is available after six continuous months or provided pro rata according to the subscription term. Testing scope and scheduling are agreed in advance, and unused allowance is not converted into cash or additional monthly hours.
Want to confirm whether Advanced fits?
We can review your environment, priorities, and constraints and confirm whether this is the right starting point.