I help boards and executive teams make sound decisions on cyber risk, India's DPDP Act, CMMC and GovRAMP. Twenty-two years in enterprise IT and security, CISSP, based in Pune and working with organisations in India, the US, the UK and the EU.
| What it is | Typical form | |
|---|---|---|
| Board roles | Independent or advisory board seat with a cyber, privacy or AI governance remit | Board or committee membership |
| Advisory | Board briefings, readiness reviews, and oversight of a programme someone else is delivering | Fixed-scope review or a monthly advisory retainer |
| Delivery | Hands-on work: gap assessments, policies and procedures, remediation plans, evidence for assessors | Fixed-scope project |
I do not take paid advisory or delivery work at a company where I sit on the board, and I do not join the board of a company I am currently being paid to advise. Directors are meant to challenge management's work, and that is hard to do if some of that work is your own.
A 30-minute call to understand the question and whether I am the right person for it. If I am not, I will say so. If I am, you get a written scope and fixed fee before any work starts.
Message me on LinkedIn ↗ me@sarfarazchougule.com