Managed security foundation
XDR/EDR, continuous monitoring, vulnerability management and response escalation.
Managed Cyber Leadership
A practical cyber leadership and security capability for smaller regulated institutions.
Many smaller institutions cannot recruit, retain or afford mature cyber leadership — yet supervisors increasingly expect evidence of it. Poro combines senior judgement, proportionate operational controls and the evidence boards and regulators need.
Leadership, controls and evidence — as one capability
Fractional cyber leadership
Board reporting, cyber strategy, regulatory engagement and investment challenge.
Governance & resilience
Risk register, policies, incident plan, third-party oversight and exercises.
Flexible service levels
The service is available at different levels, allowing each institution to select a model that reflects its size, risk profile, regulatory expectations, internal capability and budget.
Foundation
Designed for smaller institutions that need a credible minimum cyber capability and access to senior support.
This could include:
- Initial cyber risk and maturity assessment
- Core governance and policy framework
- Managed endpoint detection and response
- Vulnerability and external exposure monitoring
- Incident response access
- Quarterly cyber leadership reviews
- Annual board briefing or tabletop exercise
- Prioritised annual improvement roadmap
Managed Cyber Leadership
Designed for institutions that require ongoing cyber oversight but do not need a full-time internal CISO.
Everything in Foundation, together with:
- Named fractional CISO or senior cyber adviser
- Monthly executive risk and control reviews
- Regular board reporting
- Cyber strategy and budget planning
- Cyber risk register oversight
- Third-party and supplier risk support
- Regulatory and supervisory engagement
- Incident leadership and escalation
- Oversight of security providers and internal IT delivery
Managed Cyber Function
Designed for institutions that require a more comprehensive outsourced or co-managed cyber capability.
Everything in Managed Cyber Leadership, together with:
- More frequent leadership and governance support
- Broader managed security monitoring
- Extended vulnerability and exposure management
- Identity, email and cloud-security support
- Security testing and assurance programme
- Architecture and change-review support
- Third-party assurance
- On-site support and exercises
- Enhanced incident escalation and response arrangements
- Support for regulatory remediation and major transformation programmes
Modular support
Institutions can also add specific services where needed:
- Board and executive training
- Incident simulations
- Cyber strategy development
- Regulatory remediation
- Third-party risk reviews
- Security architecture assessments
- Penetration testing
- Digital forensics
- Crisis communications
- Temporary leadership during recruitment or major change
The intention is to provide a scalable service rather than a fixed package. Institutions can begin with a focused baseline and increase the level of support as their risk, regulatory requirements or internal capability develop.