Contact
Let's Talk Cybersecurity.
Whether you need a cybersecurity health check, regulatory readiness assessment, risk assessment or ongoing vCISO support, let's discuss your requirements.
Enquiry form
FAQ
Frequently Asked Questions
What does a cybersecurity health check include?
A health check is a focused assessment, typically completed in 5–7 working days. It provides a cybersecurity maturity snapshot, a review of key risks and governance, the most significant control gaps, an executive risk dashboard and a 90-day improvement roadmap.
How long does a cybersecurity risk assessment take?
A structured GRC and risk assessment typically takes 2–4 weeks, depending on the size of the organisation, the number of environments in scope and the availability of stakeholders and evidence.
Can Cyphrna support ISO 27001 readiness?
Yes. We provide ISO 27001 advisory — scoping, gap assessment, risk assessment, policy and control guidance, and readiness support ahead of certification audits. Certification itself is issued by an accredited certification body; Cyphrna does not issue certificates.
Does Cyphrna support Saudi NCA requirements?
We provide advisory support for organisations working towards applicable NCA requirements, such as the Essential Cybersecurity Controls (ECC) and, where relevant, DCC, OTCC, Cloud or Critical Systems controls. Applicability depends on the organisation's sector, regulatory status and scope. Cyphrna is not a regulatory authority and does not represent the NCA.
Can Cyphrna provide vCISO services?
Yes. Our vCISO / GRC-as-a-Service engagement provides ongoing cybersecurity leadership — strategy, risk governance, executive reporting, steering committees, audit and regulatory readiness, and incident advisory — on a flexible basis.