Not every organisation needs a full-time security executive. Three questions help to choose between the two models.

How much leadership time do you need?

If security leadership fills a few days a month, a retained vCISO is usually the better fit. If it fills every week, plan for a full-time role.

Who is asking?

Customers and investors generally want to see clear ownership. Some regulators require an in-house appointment, so check what applies to you first.

What happens next year?

A vCISO can build the programme and help to hire a successor. Agree the handover at the start, not at the end.

Draft note: sample article to show the layout. The full text, author and date are to be supplied.