Industries
Financial services
Security and recovery arrangements for organisations that handle other people's money.
Financial organisations are targeted because money and identity data are valuable. Customers and regulators expect you to protect both and to show how.
We help you control who can reach what, keep records that stand up to review, and recover quickly if a system or a site is lost.
For banks, SACCOs, insurers, lenders and payment businesses: strong access control, records of every change and recovery plans that have been tested.
Risks we see most often
Account takeover
Stolen staff or customer credentials let an attacker move money or change details.
Payment and invoice fraud
Fake instructions that appear to come from a manager or a supplier.
Insider misuse
Staff with more access than their job needs can cause harm, deliberately or by accident.
Long outages
If core systems are unavailable, customers cannot be served and trust suffers quickly.
Weak records
Without logs of sign-ins and changes, an investigation or a review has little to work with.
What we put in place
Strict access control
A second sign-in step for all staff, permissions limited to each role, and regular reviews of who has what.
Logging and alerts
Records of sign-ins and changes kept safely, with alerts for unusual activity.
Protected devices and network
Encrypted laptops, a managed firewall and separated networks for sensitive systems.
Tested recovery
Recovery plans for core systems, tested on a schedule and updated after each test.
Security awareness
Regular short training on fraud, phishing and handling customer data.
Services that apply
- Cyber security and threat responseFind the weak points before someone else does, and know what to do when something goes wrong.
- Cloud security and complianceUse the cloud with the right settings, the right access and a record of both.
- Business continuity and disaster recoveryKnow how long you could be down, and how to be up sooner.
- Network securityControl what comes in, what goes out and who can reach what.
Data protection and sector rules
Financial organisations in Kenya handle personal data and are usually also subject to rules from their sector regulator. The Data Protection Act, 2019 is one part of that picture. We help with the technical controls and the records. Your regulator and your lawyer decide what applies to you, so check the current requirements.
This is general information, not legal advice.
Questions we are often asked
Talk to us about Financial services
Tell us how your organisation works and what worries you. We will tell you honestly where we would start.