A strategy fully aligned with your organisational goals: vision, mission and initiatives prioritised with a balanced-scorecard approach, plus an operating model to deliver it. Typically three years, adjusted to your needs.
Policy & procedure development
Cybersecurity policies and procedures tailored to your organisation.
Incident response, disaster recovery and business continuity plans.
Risk assessment & management
Identify, assess and prioritise cybersecurity risks.
Risk management frameworks and policies.
Continuous risk monitoring and mitigation.
Third-party risk management
Third-party risk frameworks and toolkits.
Due diligence on vendors and partners.
Mitigating risk from third-party services and cloud providers.
Compliance management
Achieve and maintain compliance by mapping controls to regulations in a Unified Control Framework, and prepare for certification audits such as ISO 27001, PCI-DSS and HIPAA.
Internal & external audits
Internal audits of controls and cybersecurity posture.
Facilitating third-party and data-privacy audits.
Risk-based audits focused on your most critical areas.
GRC tools implementation
GRC platforms that automate compliance tracking, risk management and reporting, integrated with your existing enterprise systems.
Full-spectrum testing, from reconnaissance through exploitation to reporting, across web, client-server, infrastructure, mobile, wireless and social engineering.
Black-, grey- or white-box scopes, with commercial tools and custom scripts.
Reports covering each gap, its impact and how to fix it.
Vulnerability assessments
Automated scanning plus manual discovery across software, hardware and systems.
Ongoing management to prioritise, patch and mitigate.
Application security testing
Threat modelling and testing of web and mobile apps, APIs, microservices and back ends for injection, XSS and broken authentication.
OWASP Top 10
STRIDE
DREAD
OpenSAMM
OSSTMM
WASC
Social engineering testing
Phishing, baiting and pretexting campaigns.
Click-rate metrics and targeted follow-up training.
Red team operations
Full-scope adversary simulations that test detection and response.
Defences assessed against advanced persistent threats.
Compliance testing
Testing that verifies compliance with regulations such as NCA and SAMA.
Gap analysis and reporting that demonstrate adherence.
Advanced attacks often go undetected for more than 200 days, and without a practised response plan containment drags on. Our managed CSOC combines skilled analysts, advanced tooling and real-time threat intelligence for continuous monitoring, detection and response.
Round-the-clock watch over network traffic, endpoints and cloud workloads.
Real-time SIEM correlation, analysis and alerting.
Custom threat-hunting processes.
Incident detection & response
Rapid containment of malware, breaches and insider threats.
Root-cause forensics with clear remediation guidance.
Threat intelligence integration
Top-tier feeds fused into your CSOC pipeline.
Threat-driven alerting and proactive investigations.
Security event & log management
Centralised logging across servers, network, apps and cloud.
Continuous auditing, reporting and compliance support.
Automation & orchestration
Automated workflows for common incidents.
Playbooks for IP blocking, malware containment and user isolation.
Digital forensics & incident analysis
Proven forensic methods, from evidence collection and chain of custody to analysis and courtroom presentation, with detailed post-incident reports for stakeholders and regulators.
Adopt and run cloud securely: migrate workloads safely and keep data private, protected and compliant. We also help cloud service providers meet standards such as STAR and FedRAMP.
Next-generation firewalls and intrusion prevention for your perimeter.
Continuous signature updates and tuning.
Endpoint protection
Antivirus, anti-malware and EDR/XDR across endpoints, servers and critical infrastructure.
Central policy management and automated response.
Identity & access management
MFA, SSO and privileged access management.
Automated role-based access to sensitive systems and data.
SIEM
Real-time event correlation, alerting and compliance reporting.
Logs integrated from firewalls, endpoints, cloud and applications.
Data loss prevention
Stop unauthorised exfiltration of sensitive data.
Content inspection and policy across email, web and endpoints.
SOAR
Automated alert triage, playbooks and incident workflows.
Integrated with your existing security tools.
Zero Trust architecture
Zero Trust models with least privilege and continuous verification.
Micro-segmentation, network isolation and adaptive access policies.
How our services fit together
Good security is a cycle, not a single project: understand your risks, protect your systems, detect attacks, respond quickly and keep improving. NIST Cybersecurity Framework 2.0 describes it as six functions. The NCA Essential Cybersecurity Controls follow a similar shape through their governance, defence, resilience, third-party and cloud, and industrial control system domains.
Function
What it means
CYBRT service
Govern
Strategy, policies, roles and accountability
GRC Consulting, CISO as a Service
Identify
Know your assets, data and risks
GRC Consulting, Maturity Assessment
Protect
Put strong controls in place
Technology Deployment, Cloud Security, Awareness Training
Detect
Spot attacks early
Managed SOC
Respond
Contain and fix incidents
Managed SOC, incident response
Recover
Restore operations and learn
GRC Consulting (business continuity), Managed SOC
Where to start
An audit is coming up
Start with a GRC gap assessment against the framework you will be measured on.
You just launched a new app or website
Start with a penetration test, ideally before go-live.
Nobody watches your systems at night
Start with Managed SOC.
You are moving to the cloud
Start with a cloud security assessment and a secure landing zone.
Staff keep clicking phishing emails
Start with awareness training and phishing simulations.
You are not sure
Take the free maturity assessment and we will talk you through the result.
Frequently asked questions
Can we buy just one service?
Yes. Many clients start with one service, often a gap assessment or a penetration test, and add others as their programme matures.
Do your services help with NCA and SAMA audits?
Yes. Each service produces documented evidence, such as reports, registers and monitoring records, mapped to the NCA and SAMA controls it supports.
How are services priced?
Projects are priced on scope, for example the number of applications, users, devices or log sources. Managed services use a predictable monthly or annual fee. We quote after a short scoping call.
