Active incident or hacked WordPress? Network / ransomware Hacked WordPress 423-888-0252 · 828-484-1257

Fractional CIO (vCIO) · Fractional CISO (vCISO)

A senior seat at the table. Not a full-time hire, not a ticket mill.

vCIO and vCISO are the industry names. The job is simpler: someone who has actually run the stack sits with ownership every month on budget, vendors, security, and the plan — and does not replace the admin you already trust.

Avery Parker · principal Support since the early 1990s Networks & security since the late 1990s Linux since ~2000 Johnson City office · you talk to the same person

Talk fractional CIO Talk fractional CISO Book 20 minutes

Two jobs. One principal. Pick the seat you are missing.

A full-time CIO or CISO is the right hire at a certain size. Before that, most Tri-Cities and Asheville companies have an owner making IT decisions after hours, or an admin with no one senior to escalate to. That is the gap.

Fractional CIO — vCIO

From $1,500 / month

Technology leadership: the roadmap, the budget, the vendor pile, and the projects that stall when everyone is drowning in tickets. Same person every month.

  • Monthly strategy session
  • Written 12-month plan and cost
  • Vendor review and negotiation
  • Sits next to your admin or MSP — does not replace them
Fractional CIO details & tiers →

Fractional CISO — vCISO

From $1,500 / month

Security leadership: posture, policy, staff training, insurance questions, and a continuity plan you can hand to an auditor or attorney. Tickets stay with IT.

  • Monthly security review
  • Policies and incident-response plan
  • BCP / DR as a separate scoped document
  • HIPAA / GLBA / ABA language where it applies
Fractional CISO details & tiers →

What this is not

It is not a helpdesk. It is not a SOC in another time zone. It is not a product we are paid to push. Month-to-month. Vendor-neutral. If you are mid-ransomware, this is the wrong first call — start at incident response.

How coverage works (one principal, not a fake bench)

This is Avery Parker’s practice. Scheduled work is booked. Incident response jumps the queue. If he is already on a site, you hear that on the first call — not after you have waited. Partner MSPs get a scoped window in writing. We do not invent a second-shift team we do not have.

A month in the work

Week one is intake: what you have, who has admin, what the owner is tired of paying for, what the insurer or the board asked last quarter. Then a recurring call — 60 or 90 minutes, same day each month — with a written note after. Between calls you get email or phone at the tier you picked.

The admin (or the MSP) stays on the tickets. Avery is the person who says “stop buying that,” “this backup has never been restored,” or “do not sign that cyber app until we fix MFA.” That is the product.

Executive tiers add onsite in the Tri-Cities (within about 30 miles of Johnson City; farther by arrangement). Remote advisory runs nationwide.

Who this is for

  • Owners who became the CIO by accident
  • In-house admins who need a senior backstop, not a replacement
  • Out-of-town MSPs whose client wants a named security or technology lead locally — how partner work is written
  • Clinics, law, and accounting offices that need a program, not another vendor — healthcare & professional
  • Defense subcontractors after a SPRS score, not instead of one — CMMC
Fractional CIO and CISO conversation in a business office

vCIO vs vCISO vs managed IT — in one paragraph each

Managed IT patches, monitors, backs up, and answers the “printer / 365 / the Wi-Fi” call. Published packages start at $175 per user per month. Managed IT & MSSP.

Fractional CIO / vCIO decides what the next year of technology should cost and who is allowed to sell you something. From $1,500/month. Tiers.

Fractional CISO / vCISO decides whether you can look an insurer, a hospital partner, or a contracting officer in the eye. From $1,500/month, plus a one-time BCP if you do not have one. Tiers.

You can buy the helpdesk without the leadership seat. You should not buy the leadership seat and expect the helpdesk to come free.

Who does the work

Fractional leadership only works if the person on the call has actually run the stack. Avery Parker has.

Experience you can date

  • Early 1990s — computer support and repair
  • Late 1990s — networking and security
  • Around 2000 — Linux server administration
  • Web, hosting, and search alongside the infrastructure work ever since

Local and accountable

Office at 4100 North Roan Street, Suite 208, Johnson City, TN 37604. Onsite across the Tri-Cities and Western North Carolina. You talk to Avery, not a tier-1 queue. Retainers are month-to-month. We do not sell you a stack we are paid to push — vendor-neutral advice.

How coverage works (one principal, not a fake bench)

This is Avery Parker’s practice. Scheduled work is booked. Incident response jumps the queue. If he is already on a site, you hear that on the first call — not after you have waited. Partner MSPs get a scoped window in writing. We do not invent a second-shift team we do not have.

Fractional CIO / CISO — questions we get

What is a fractional CIO or vCIO?

A fractional CIO (also called a vCIO, virtual CIO) is senior technology leadership on a monthly retainer instead of a $180k–$250k full-time hire. Avery owns budget, vendors, the 12-month roadmap, and the hard calls — and sits next to the admin or MSP you already have.

What is a fractional CISO or vCISO?

A fractional CISO (vCISO) is the security equivalent: posture, policy, staff training, cyber-insurance questions, and a written continuity plan. Tickets stay with your IT. The CISO work is the program, not the helpdesk.

Do we need both?

Many shops start with one. vCIO if technology spend and vendors are the mess. vCISO if insurers, boards, HIPAA/GLBA, or a recent scare are the mess. Some clients run both at a combined scope after discovery.

Is this instead of managed IT?

No. Managed IT keeps the lights on. Fractional leadership decides what gets bought, what gets dropped, and what the next ninety days are for. You can buy either, or both.

Are we too small?

Essential tiers are built for 10–75 person companies and for smaller professional practices that need a named senior, not a slide deck. A five-person shop that only needs tickets should start on remote support or managed IT.

Book twenty minutes. We will say which seat you are actually missing.

Johnson City office. Remote nationwide.