Security and IT.
Know who has access to what, close the gaps, and have a plan for the day something goes wrong.
Who it is for. Regulated and payment-handling businesses, such as brokers, iGaming operators and fintechs, that have outgrown ad-hoc IT, or have just had a scare.
Security and compliance audits passed as CTO of a licensed operator
Cyber security and IT consultant in Malta.
Most security problems in growing companies are not exotic attacks. They are old accounts that were never closed, shared passwords, admin rights nobody reviewed and payments one person can approve alone. I fix those first, then put the tools and routines in place so they stay fixed. I am vendor-neutral: I do not resell software, so the recommendation is the one that fits you.
What you get out of it.
Every account, laptop and admin key accounted for in one register
Two-step approvals on payouts and anything that moves money
SSO, password management and device management that people actually use
Joiner and leaver checklists so access ends on the last day
A path towards ISO 27001 when a licence or a partner asks for it
What happens after you say yes.
Contain.
If something has happened, we stop the bleeding first: rotate keys, reset sessions, enforce 2FA, freeze risky permissions.
Inventory.
A full access register of people, tools, admin rights and devices. Most companies find accounts nobody remembers paying for.
Harden.
Choose and roll out the tools that fit your size and budget, with the costs agreed up front.
What keeps going.
- Monthly access review and licence clean-up
- Onboarding and offboarding run by checklist
- Tool and vendor decisions with costs attached
- On call for incidents, with a written playbook
Security and IT, answered.
We think we have been hacked. Can you help right away?
Yes. The first step is containment: rotate keys, reset sessions, enforce two-factor authentication and freeze risky permissions. Then we find out what happened and close the gap. Book a call or email and mark it urgent.
Do you sell security software?
No. I have no reseller agreements, so I recommend what fits your size and budget, and you buy it directly from the vendor.
Can you help us get ready for ISO 27001 or a regulator audit?
Yes. I have been responsible for system and security audits under the UKGC and MGA. I start with the controls that matter most, then build the evidence an auditor will ask for.
Tell me what is going on.
A few questions so I can come prepared. Everything stays confidential. I reply within one working day with next steps, or a straight no if I am not the right fit.
Or book directly: 30-minute call · [email protected]