PISF and ISO/IEC 27001 readiness assessments: book a scoping call →
Nigehban Info Systems

Services

Compliance, monitoring, equipment and testing, scoped to what you need to protect or prove.

Compliance audits

Independent gap assessments and audits against PISF, ISO/IEC 27001, NIST CSF, PCI DSS and sector rules, with a prioritised remediation roadmap.

  • Scoping and asset review
  • Control testing and evidence review
  • Audit report with risk-ranked findings
  • Re-test to confirm closure

Managed SOC

24/7 monitoring, detection engineering, incident response and SOAR playbooks, delivered on your premises or from ours.

  • Log collection, correlation and UEBA
  • Triage, escalation and response runbooks
  • Monthly executive and technical reporting
  • Local-only and air-gapped operation options

Security equipment and licences

We scope, supply, install and integrate the tools your programme needs, then train your team to run them.

  • SIEM and SOAR
  • Threat intelligence and credential monitoring
  • Web and API vulnerability scanning
  • Virtualisation, backup and private cloud

Penetration testing and red teaming

Web, API, network, cloud and AI/LLM application testing with clear remediation guidance and retesting.

  • Authorised, rules-of-engagement based testing
  • Manual testing beyond automated scans
  • Evidence-backed reporting
  • Remediation verification

Advisory and training

Policy writing, security architecture reviews, awareness programmes, and administrator and analyst training.

  • ISMS design and policy sets
  • Incident response exercises
  • Hands-on tool training
  • Documentation and handover

Physical and cyber security convergence

One monitored estate: cameras, access control, sensors and the network behind them, designed and secured together.

  • IP surveillance and CCTV design with central command-centre monitoring
  • Access control with biometric, RFID card, boom barrier and turnstile integration to video
  • Sensor and IoT networks brought under SIEM monitoring and compliance
  • Drone-based inspection and surveillance programmes with operator training

Telecom and critical infrastructure security

Secure design, operation and resilience for communications backbones and national-scale infrastructure.

  • Long-haul fibre (DWDM, SDH), microwave, radio and VSAT network security and operations
  • NOC and O&M processes covering preventive maintenance and fault response
  • Datacentre and command-centre architecture and resilience
  • Vendor evaluation, solution scoping and technical acceptance testing

Virtual CISO and board advisory

Senior security leadership on call: strategy, policy and reporting that boards and regulators can act on.

  • Cybersecurity strategy and policy development
  • Executive and board risk reporting
  • Crisis simulation and incident readiness exercises
  • Digital sovereignty, data residency and secure communications roadmaps
Independent audits. Where we audit an organisation, we do not also design or run its security controls. We will tell you at the start which services we can provide together and which must be separated.