Boris Pustilnik, founder of Art of Cyber, is a senior CISO adviser with more than 12 years of IT and information security leadership experience. He supports Israeli small and mid-sized companies that need CISO as a Service, privacy, compliance, and risk management without hiring a full-time CISO. Boris was named Israel Outstanding CIO in 2022, became DPO certified in 2025, and consults to the Israeli Ministry of Defence on cybersecurity.

CISO as a Service pricing depends on company size, risk, regulatory duties, and the scope of work, so Art of Cyber provides a proposal after a short scoping call rather than publishing one fixed price. Companies can begin with a focused project or ongoing support and size the engagement to the actual need.

Amendment 13 strengthens organizational duties and enforcement powers around personal information in Israel. Preparation starts by mapping databases and processing activities, checking legal bases and privacy notices, assigning responsibility, reviewing vendors and security controls, and documenting gaps and a remediation plan.

A small business needs security leadership when it holds sensitive data, serves enterprise customers, faces regulation, needs ISO 27001 or SOC 2, or relies on critical systems. CISO as a Service provides that leadership at a suitable scope without a full-time hire.

Start with an ISO 27001 gap assessment, define the ISMS scope, perform a risk assessment, and build a work plan covering policies, controls, owners, and evidence. Art of Cyber supports the process from the initial gap assessment through audit readiness.

CISO as a Service provides ongoing leadership: priorities, a security program, management reporting, risk and vendor oversight, and follow-through. A security consultant may provide only a specific assessment or recommendation.

Yes. AI security services include secure AI strategy, AI risk assessment, AI governance, vendor and model review, and security testing for AI systems, including data leakage and prompt injection.

DPO as a Service helps an organization run privacy work over time: data mapping, privacy policies and notices, data-subject rights, vendor review, risk assessments, training, and coordination with management and legal advisers. The service is matched to the law and the organization's activity.