Kestrel Bank · Financial services
Cut loan approval time from 9 days to 4 hours.
Software & Product Engineering · Digital Strategy & Transformation · Cybersecurity & Compliance
05Service
Cybersecurity &Compliance
Measurable security and audit-ready compliance, built into how you already work.
01The problem we solve
A regulator, auditor or major customer is asking questions you can’t yet answer with confidence. Your team knows there are gaps but not which ones matter most. Tools have been bought but not tuned. We start with an honest assessment, rank the risks by likelihood and impact, and fix the most important ones first — with evidence you can show the board.
02Capabilities
What we bring.
01
Assessment and testing
External, internal and application testing with clear, ranked findings.
02
Identity
Single sign-on, multi-factor authentication and least-privilege access.
03
Cloud and network hardening
Secure baselines, segmentation and configuration monitoring.
04
Detection and response
Log collection, tuned alerts and a rehearsed incident playbook.
05
Compliance
Gap analysis, policies, controls and evidence for ISO 27001 and PCI DSS.
06
People
Short, regular training and simulations that change behaviour.
03How an engagement works
From first week to handover.
Phase 01 · 2–3 weeks
Assess
Testing, interviews and control review against your framework.
Phase 02 · 1 week
Prioritise
Risk register, remediation plan and quick wins agreed with leadership.
Phase 03 · 2–6 months
Remediate
Controls implemented, tested and documented with your teams.
Phase 04 · Ongoing
Assure
Monitoring, quarterly testing and audit support.
04Technologies we work with
ISO/IEC 27001PCI DSSNIST CSFCIS ControlsMicrosoft Entra IDOktaMicrosoft SentinelWazuhCrowdStrikeBurp SuiteOWASP ASVS
06Questions
Frequently asked.
A two-to-three-week assessment gives you a ranked list of risks and a realistic plan. It is the best value first step.
Next service
Digital Strategy & TransformationStart a conversation