expertise in strategic and tactical roles

As noted, a CISO-as-a-Service can serve both a strategic and tactical role. In most cases, businesses want to leverage both. They must have expertise in both areas. Here are the differences:
Strategic CISO-as-a-Service roles assist leadership teams with cybersecurity strategies that align with business objectives. This strategy includes one-, two-, and three-year roadmaps. You’ll receive guidance and recommendations on cybersecurity best practices to prevent incidents and breaches.
Tactical CISO-as-a-Service roles actually execute on the tasks within the strategy. The CISO-as-a-Service acts as a project manager to offer oversight on these activities.
Typically, CISO-as-a-Service isn’t one individual. Rather, it’s a team of experts that have knowledge in multiple areas. That’s certainly the model you want to find because it means you have access to a group of experts. But what helps is having one point of contact to discuss tasks and deliverables. A dedicated project manager helps keep things organized and streamlined so you’re always up to date.

What kind of reporting do they offer?

Reporting is key to cybersecurity. From regular reporting, you learn about vulnerabilities, threats, user behaviors, and more. At a minimum, you should receive monthly reports on these concerns and what the CISO-as-a-Service has deployed.

More Info: a+ certification jobs