Fractional CISO services, board-level security reporting, risk quantification, and program architecture.