# CISO Program Assessment with Jim Nittterauer

> If your company runs on data, processes payments, stores customer information, or uses AI in any part of your business - you have security risk. The question isn't whether you need a security program. It's whether the one you have (or don't have) is built for what you're actually facing. The CISO Program Assessment is where we start. In a structured engagement, I'll evaluate your current security posture against the threats and compliance obligations relevant to your industry, identify the gaps that carry real business risk, and give you a prioritized roadmap - the kind a board can understand and a team can execute. No jargon. No scare tactics. Just an honest picture of where you stand and what it takes to get where you need to be. Book the assessment. Your competitors, your insurers, and your regulators are all paying attention to this. You should be too.

- Host: Jim Nittterauer
- Duration: 30, 60, 90 min
- Location: Zoom Video
- Host time zone: America/Chicago
- Confirmation: Bookings are confirmed instantly.
- Booking page: https://cal.com/getaciso/program-assessment
- Event type id: 5008991

## Check availability

```http
GET https://api.cal.com/v2/slots?eventTypeId=5008991&start=YYYY-MM-DD&end=YYYY-MM-DD&timeZone=<IANA time zone>
cal-api-version: 2024-09-04
```

The response is `{"data":{"YYYY-MM-DD":[{"start":"<ISO 8601 with offset>"}]}}`; no API key is needed.

## Book

```http
POST https://api.cal.com/v2/bookings
cal-api-version: 2026-02-25
Content-Type: application/json

{
  "eventTypeId": 5008991,
  "start": "<UTC ISO 8601 start from the slots response>",
  "lengthInMinutes": 60,
  "attendee": {
    "name": "…",
    "email": "…",
    "timeZone": "<IANA time zone>"
  },
  "guests": [
    "guest@example.com"
  ],
  "bookingFieldsResponses": {
    "notes": "…"
  }
}
```

- Required fields: `name` (Your name), `email` (Email address)
- Optional fields: `notes` (Additional notes), `guests` (Add guests)
- `name` and `email` go in `attendee` and `guests` is a list of emails; every other field goes in `bookingFieldsResponses` under its name.
- `lengthInMinutes` picks one of 30, 60, 90; pass the same value to the slots request as `duration`.