Cyber Security
Security Architecture & Risk Assessment
Gap analysis against NIST CSF or ISO/IEC 27001 controls, a prioritised risk register and a security roadmap leadership can fund.
Overview
We assess where your security stands today against a recognised framework and give you a prioritised, costed plan to close the gaps.
What you get
- Control gap analysis against the chosen framework
- Risk register with likelihood and impact ratings
- Architecture review of critical systems
- 12-month prioritised security roadmap
How we work
- 01Scope, stakeholders and framework selection
- 02Interviews, document and configuration review
- 03Risk analysis and prioritisation
- 04Leadership readout and roadmap
More Cyber Security services
- Server & Infrastructure HardeningLinux and Windows servers hardened to CIS Benchmarks: least-privilege access, SSH and TLS configuration, firewalling, logging and patch baselines.
- Cloud Security Posture ManagementIAM least-privilege review, misconfiguration remediation and continuous posture monitoring across AWS, Azure and GCP against CIS cloud benchmarks.
- Managed Detection & ResponseSIEM/XDR monitoring with 24/7 alert triage, threat hunting and guided response, built on Wazuh or Elastic and mapped to MITRE ATT&CK.
- Incident Response & Digital ForensicsRapid containment, eradication and recovery after a security incident, with forensic root-cause analysis and evidence handled for legal and regulatory needs.
- Vulnerability Management ProgrammeContinuous authenticated scanning, prioritisation by CVSS and EPSS exploitability, and patch SLAs tracked to closure across your estate.
- Compliance ReadinessReadiness support for ISO/IEC 27001, SOC 2, PCI DSS and the Kenya Data Protection Act: gap analysis, policies, technical controls and audit preparation.
Have a project to scope?
Tell us your objectives and constraints. We reply within one business day.