Remotely, through video calls, email, and the Kertos platform. The fixed elements are the monthly session with your internal contact, the annual risk assessment and management review, and planning the internal audit program. Beyond that, your external CISO is available as things come up: incidents, changes, and questions from outside parties. The service requires your ISMS to be run in the Kertos platform with the ISO 27001 module.