A medium-size catering business became a victim of multiple cyber security attacks that lead to crippling of business operations and ultimately to significant financial losses and reputational damages. The Board decided to hire an outsourced Chief Information Security Officer (CISO) to tackle the cyber and data protection issues systemtically and maintain uninterrupted operation of the business on IT and IT security side.