Risk Advisory

Our risk advisory service line includes but not limited to the following:

1. Internal & IT audit
2. Internal control evaluation
3. Information security controls evaluation
4. Risk assessment & management (Business and IT)
5. Service Organization Control (SOC) as per SSAE 16
6. Cyber Security Assessment (Vulnerability Assessment, Penetration Testing, Mobile & Web application Security, Network Architecture review and IT Assets configuration review)
7. Cyber Security Governance including gap assessment and/or implementation of ISO 27000, NIST, SAMA Cyber Security Framework, CMA Cyber Security Guidelines, NCA Cyber Security Assessments, etc.
8. Business Continuity Management (including Crisis Management and IT Disaster Recovery) assessment and/or implementation in line with ISO 22301 and/or SAMA BCM Framework.