Four ways to take control of cyber risk.

Take one service or combine them. Every engagement starts with a free conversation about what you run and what worries you.

Risk assessment

Most companies know they have cyber risk. Few can say where it sits, how likely it is, or what it would cost. That is what an assessment answers.

What you get

An inventory of the systems, data and accounts that matter most
A risk register, each item rated by likelihood and business impact
A short list of the fixes that remove the most risk first
A management summary without jargon

Good for

Companies that have grown fast, changed systems, or are being asked hard questions by clients or insurers.

Third-party risk

Your IT provider, your payroll software, the agency with access to your website. Every supplier with access is a door you did not build yourself.

What you get

A map of which suppliers can reach which systems and data
A review of contracts and access against what each supplier actually needs
A tiering of suppliers by risk, with questions to ask each tier
A simple process for onboarding and offboarding suppliers

Good for

Businesses that rely on outsourced IT, cloud software or contractors with remote access.

Compliance readiness

A client sends a security questionnaire. A tender asks for ISO/IEC 27001. A regulator mentions the PDPL. We get you ready, step by step, without drowning you in paperwork.

What you get

A gap analysis against the framework you need
Policies and procedures written for how your company actually works
Help answering client security questionnaires
Preparation for external audit, when you are ready for one

Good for

Companies selling to government, banks or large enterprises, and anyone handling personal data in the UAE.

We prepare you for certification and audits. Certification itself is issued by an accredited certification body.

Incident readiness

Ransomware, a hacked email account, a lost laptop. When it happens, the first hour decides most of the damage. Teams that have practised make fewer, smaller mistakes.

What you get

An incident response plan with clear roles and contacts
Playbooks for the incidents most likely to hit your business
A tabletop exercise with your management team
A check of backups and recovery, tested rather than assumed

Good for

Every business that depends on email, cloud services or customer data. Which is every business.

Questions, answered

Do you work outside Dubai?

Our licence covers the Emirate of Dubai, so we take on clients based in Dubai.

How long does an assessment take?

It depends on the size of your business. For a small or mid-sized company, a few weeks from first interview to final report is typical. You get a timeline before we start.

What does it cost?

Each engagement is scoped and priced up front, based on the number of systems, sites and suppliers involved. No surprises.

Do you need access to our systems?

Only as much as the work requires, agreed in writing beforehand. Much of an assessment is interviews and reviewing configurations with your team.

Can you certify us for ISO/IEC 27001?

No consultancy can. We prepare you for the audit; certification is issued by an accredited certification body.

Start with a conversation

info@viahanden.ae

Book a risk review