They take the role of the information security manager to manage the information management system (ISMS), keep it up to date, operate the process and procedures of the ISMS and take care of any certifications. Their role is to guide and advice the business on it's business operations in relation to information security. The role can be tailored to your specific demands. Some clients also have the VSO act as them in external facing audits with clients and audit bodies.