Cyber governance that stands up to review
Regulators now review how banks, insurers and fintechs govern cyber risk. We assess where you stand against the rules that apply to you, close the gaps and prepare you for ISO/IEC 27001 certification.
What the service covers
Problems it solves
Regulatory review on the horizon
Central banks, including the Reserve Bank of India and the Bank of Ghana, review how banks govern cyber risk. A gap assessment shows what to fix first.
Certification without a plan
ISO/IEC 27001 needs evidence, not just policies. We put in place the controls and records an auditor will ask for.
Cyber risk the board cannot see
Directors get a clear, regular view of cyber risk and of progress on remediation.
How an engagement runs
Every engagement follows the same three steps, so the first commitment is small and the result is measured.
Discover
We map the decision, the data and the KPI, then agree one narrow pilot. We quote after discovery, not before.
Pilot
We build the smallest version that proves value, in your environment, measured against the number we agreed.
Expand
If the pilot works, we scale it across teams, products or markets, and train your people to own it.
Industries we apply it in
The same method, shaped to how each sector runs.
Common questions
Short answers to the questions we hear most. For anything else, start a conversation.
Do you issue ISO/IEC 27001 certificates?
No. Certificates are issued by accredited certification bodies after an audit. We prepare you for that audit.
Who is this for?
Banks, savings and loans companies, microfinance institutions, insurers, fintechs and other organisations that hold regulated data.
Is cyber security work licensed?
In some markets, yes. In Ghana, cyber security services are licensed by the Cyber Security Authority, and accredited work there is delivered with SIIMT University College, which holds Cyber Security Authority Tier 2 accreditation.
How is this different from your cyber security service?
Cyber security covers the security of the systems we build and run. Cyber governance covers policy, risk, regulation and certification across the organisation.
See also
Tell us what you are trying to fix.
Tell us the decision you need to make better. We reply with questions and a pilot scope, not a brochure.