№ 05
NIST CSF benchmark — global gaming
A NIST CSF maturity benchmark across five function areas, with a strategic cyber roadmap for the executive team.
Global · Technology · NIST CSF
Practice·Cybersecurity & CISO Advisory
Cybersecurity & CISO Advisory
Governance, identity, infrastructure, and incident response — supporting CISOs end-to-end across NIST CSF, ISO 27001, and the Saudi NCA ECC.
NIST CSFISO 27001ISO 27002NCA ECCPCI-DSSFFIEC
Capabilities
What the practice does.
Cyber strategy & governanceMaturity baseline, multi-year roadmap, and the operating cadence that turns a CISO function into a programme.
Identity & accessFrom IAM to PAM — a coherent identity architecture across cloud, on-prem, and SAP estates.
Infrastructure & networkSegmentation, hardening, monitoring, and detection — built for the threats this enterprise actually faces.
Incident responsePlaybooks, tabletop exercises, and a tested escalation model — not a binder that lives on a shelf.
Framework alignmentNIST CSF scoring, ISO 27001 readiness, and NCA ECC alignment for KSA-regulated entities.
Board reportingA reporting model the board reads and acts on — not a heat map that scrolls past.
Selected work
Stories from the practice.
№ 09
SAP Security deep dive — KSA financial services
A six-month SAP security advisory for a KSA government financial-services entity — 50 security findings reviewed and remediated.
KSA · Public · FS · 6 months
№ 14
FFIEC cybersecurity policy review
A USA financial entity reviewed against FFIEC — multi-domain maturity scoring and a sequenced remediation plan.
USA · Banking · FFIEC
The conversation
Start with a baseline conversation.
No commercials. No proposal pressure. Just a partner reading the situation honestly.
Begin a conversation