VCISO experiences?

After a breach, management decided to contract one of those VCISO companies. My question is, are they always this…(Trying to say this without sounding too jaded)… holographic??
I’m sure they exist because I’ve been responding to emails and passing on information whenever they ask. But it’s been over a year and there’s been no policy changes, we had a few more vulnerability scans, but those were planned anyway. I was on board with the idea because there’s definitely a gap …

breach companies contract cybersecurity emails experiences information management policy question vciso