This document describes security officer services that provide affordable security solutions for small to medium companies facing pressure to meet regulatory requirements. It offers part-time chief information security officer services, shared security expertise, and tailored security programs using open source solutions. Specific services include security assessments, program implementation, policy development, and ongoing operations support to help companies implement controls and hire security personnel over three phases at assessed project pricing or monthly retainer fees.