Typically engaged when: Board mandate, audit finding, or post-incident review.
CISO / IT Director
Board mandate, audit finding, or post-incident review
Project engagement