ISO/IEC 27001
Implementation and certification readiness for an Information Security Management System recognised by partners and clients worldwide.
Learn moreReduce the risks that come from being on the internet. ISO/IEC 27032 gives practical guidance on internet security, and we use it to review and strengthen your online exposure.
ISO/IEC 27032 provides guidelines for internet security: how organizations can reduce the risks that arise from their presence on, and dependence on, the internet. It addresses threats such as social engineering, malware, account compromise and attacks on internet-facing services.
It is a guidance standard, not a certifiable management system. Organizations use it alongside ISO/IEC 27001 to focus attention on their internet exposure, the controls that matter most there, and coordination with partners when incidents occur.
Every engagement follows the Cyber Shields rhythm: Assess, Protect, Monitor. For this engagement, that translates into the following steps.
Findings are anchored to recognized frameworks so they are defensible and cross-mappable.
The documents behind this page, linked at the publisher. Where a Saudi regulation is published in both languages, the Arabic text is the binding version.
Every engagement is scoped individually. Pricing depends on the size and complexity of your environment, the systems or controls in scope, and the timeline you need to work to. Rather than publish figures that rarely fit a specific situation, we prepare a written proposal with a clear fee and schedule once your scope is understood.
Tell us about your organization and the deadline you are working toward, and we will return a tailored proposal within five business days, following a signed Non-Disclosure Agreement.
No. It is a guidance standard. Organizations align with it, often within an ISO/IEC 27001 management system.
No, it is a structured review. Where useful, we can add targeted testing of your internet-facing services.
Security, IT and the owners of your online services, plus communications for incident coordination.
Yes. Reports, the executive summary, and the readout session are available in both Arabic and English at no additional cost.
Implementation and certification readiness for an Information Security Management System recognised by partners and clients worldwide.
Learn moreProactive, behaviour-led search for adversaries already inside the perimeter.
Learn morePhishing simulations and role-based training in Arabic and English. Behaviour change, not box-ticking.
Learn moreTell us about your online services and we will return a written proposal within five business days. NDA first, always.