BCyber
Tier 3 · Assurance & Accountability — fixed price, never hourly

A security leader on your side.
Delivered, not promised.

Three fixed-price vCISO retainers built on the GRACE platform. Each bundles auto-generated assessments, policies, tabletop exercises and board packs — so you get a working security function, not a stack of invoices.

A full-time CISO costs $250,000–$500,000 all in. BCyber gives you the outcomes for a fraction of that.

vCISO Essential

Fractional security leadership for Australian SMEs getting compliant

$2,500/ month

or $25,000 per year, billed annually

Replaces an expensive fractional hire — and costs a fraction of a A$250k+ full-time CISO.
  • Named virtual CISO as your point of accountability
  • Verified findings & resolved-risk milestones included — never a per-finding bill
  • Annual Essential Eight maturity assessment (auto-generated)
  • Core policy set mapped to the Privacy Act & Essential Eight
  • One guided tabletop exercise each year
  • Quarterly cyber posture report you can hand to clients
  • Email & knowledge-base support
Most Popular
vCISO Assurance

Multi-framework, audit-ready, board-visible cyber governance

$5,500/ month

or $55,000 per year, billed annually

Replaces compliance software (Vanta/Drata ~A$25k+) PLUS a separate auditor (~A$40k+) — in one accountable retainer.
  • Everything in Essential, plus:
  • Verified findings & resolved-risk milestones included — never a per-finding bill
  • ISO 27001 & SOCI alignment tracking
  • Quarterly assessments (not just annual)
  • Full policy & process library, kept current
  • Two tabletop exercises each year
  • Quarterly board pack with maturity index
  • Incident response plan, ready to invoke
vCISO Board-Ready

Regulator-grade assurance for boards that answer to APRA & shareholders

$9,500/ month

or $95,000 per year, billed annually

Delivers a board-accountable security function for a fraction of a A$250k–A$500k full-time CISO, evidence included.
  • Everything in Assurance, plus:
  • Verified findings & resolved-risk milestones included — never a per-finding bill
  • APRA CPS 234 alignment & attestation support
  • Monthly board-grade reporting
  • Quarterly board packs with evidence artefacts
  • Dedicated vCISO advisory hours each month
  • Unlimited tabletop exercises
  • Audit & regulator liaison

Incident response is billed separately at our published hourly rate — everything else in your programme is fixed and predictable.

Every retainer includes verified findings and resolved-risk milestones — retainer clients are never billed per finding. Not ready for a retainer? Start with the free Exposure Check or see outcome pricing.

Why a productised vCISO beats the alternatives

vs a full-time CISO

No $250,000+ salary, no recruitment, no single point of failure. You get a named vCISO backed by the whole BCyber platform and team.

vs software plus an auditor

Compliance software tells you what is wrong; a separate auditor charges again to check it. BCyber does both — the assessment, the fix and the evidence — in one accountable retainer.

vs hourly consulting

Hourly rates punish you for asking questions. Fixed tiers mean predictable budgets and a vCISO whose incentive is your outcome, not the clock.

Not sure which tier fits?

Start with a free 3-minute Cyber Health Check, or talk to us. We will map your obligations to the right tier — no pressure, no jargon.