— Industries
Cybersecurity built for the world's regulated industries.
Sector-specific expertise across financial services, government, healthcare, energy, telecommunications, critical infrastructure, shipping, iGaming, retail and global enterprise — aligned to DORA, NIS2, PCI DSS, IMO 2021 and IEC 62443.
SEC.IND / 01 — Banks · EMIs · PSPs · Forex · Crypto
Sector 01 / 10
Financial Services
DORA, payments fraud, third-party risk and continuous regulatory pressure across banks, EMIs, PSPs and forex brokers.
Threat Landscape
- Account takeover, APP fraud and authorised push-payment scams
- Ransomware against core banking and treasury systems
- Third-party and ICT supply-chain compromise (DORA Art. 28)
- Crypto wallet drainers and exchange API abuse
Regulatory Scope
DORAPSD2 / PSD3PCI DSS 4.0EBA ICT GuidelinesMiCAGDPR
Our Services
- DORA gap assessment and operational resilience program
- 24/7 SOC, MDR and XDR with payments-fraud telemetry
- Threat-led penetration testing (TIBER-EU aligned)
- Third-party risk monitoring with Mastercard RiskRecon
Outcomes
- DORA Art. 5–14 evidence pack ready for regulator review
- Mean time to detect < 5 minutes on payment-fraud signals
SEC.IND / 02 — Ministries · Agencies · Defence · Municipalities
Sector 02 / 10
Government
Nation-state threats, citizen data protection and NIS2-aligned resilience for public sector entities.
Threat Landscape
- Nation-state espionage and FIMI (foreign information manipulation)
- Ransomware against municipalities and registries
- Insider threat and privilege abuse on classified systems
- Election and identity infrastructure targeting
Regulatory Scope
NIS2GDPReIDAS 2.0ISO/IEC 27001ENISA Cybersecurity Act
Our Services
- Sovereign SOC with classified-handling protocols
- Zero Trust architecture for citizen-facing services
- Red team / purple team adversary emulation
- Crisis-management tabletop exercises for executive teams
Outcomes
- NIS2 essential-entity registration and incident-reporting workflow live
- National critical service uptime ≥ 99.99%
SEC.IND / 03 — Hospitals · Clinics · MedTech · Pharma
Sector 03 / 10
Healthcare
Patient data confidentiality, medical device security and ransomware resilience.
Threat Landscape
- Ransomware on EHR, PACS and laboratory systems
- Connected medical device (IoMT) exploitation
- PHI exfiltration and double-extortion leaks
- Telehealth platform and patient portal abuse
Regulatory Scope
GDPRNIS2 (health sector)MDR 2017/745HIPAA (US-facing)ISO 27799
Our Services
- Medical device security assessment and segmentation
- 24/7 MDR tuned for clinical workflows and uptime
- Backup immutability and ransomware recovery drills
- Privacy-by-design review for telehealth and data lakes
Outcomes
- Ransomware recovery RTO < 4 hours for clinical systems
- Audited DPIA coverage across all patient-data products
SEC.IND / 04 — Generation · Transmission · Distribution · Renewables
Sector 04 / 10
Energy
OT/IT convergence, grid resilience and protection of critical national infrastructure.
Threat Landscape
- ICS/SCADA targeting (BlackEnergy, Industroyer, Pipedream)
- Insider sabotage at substations and control centres
- Renewables IoT and inverter botnets
- Supply-chain attacks on OEM firmware
Regulatory Scope
NIS2IEC 62443NERC CIP (US-facing)ENTSO-E NCCSISO 27019
Our Services
- OT/ICS network architecture review and Purdue segmentation
- Passive OT monitoring with anomaly detection
- Engineering-workstation hardening and patch orchestration
- Grid-scale incident response retainers
Outcomes
- Zero unplanned OT downtime from cyber incidents
- IEC 62443-3-3 SL-2 baseline achieved across operational zones
SEC.IND / 05 — MNOs · ISPs · MVNOs · Cable · Satellite
Sector 05 / 10
Telecommunications
Subscriber data protection, supply chain integrity and high-availability service delivery.
Threat Landscape
- SS7 / Diameter signalling abuse and SIM-swap fraud
- 5G core and RAN supply-chain compromise
- Volumetric DDoS against backbone and DNS
- BGP hijacking and route leaks
Regulatory Scope
NIS2EECCGDPRENISA 5G ToolboxGSMA NESAS
Our Services
- Carrier-grade SOC and DDoS scrubbing
- 5G core security assessment (NESAS / SCAS)
- CPE and subscriber-side managed protection (One Shield)
- Roaming and signalling firewall deployment
Outcomes
- DDoS mitigation < 30 seconds time-to-mitigate at edge
- GSMA NESAS evidence pack maintained continuously
SEC.IND / 06 — Water · Waste · Transport · District Heating
Sector 06 / 10
Critical Infrastructure
NIS2 obligations, OT security and cross-sector incident response readiness.
Threat Landscape
- Sector-blurring attacks (water + power + logistics)
- Legacy PLC and HMI exploitation
- Ransomware causing physical safety incidents
- Hacktivist and state-aligned wiper campaigns
Regulatory Scope
NIS2CER DirectiveIEC 62443ISO 22301Local CI regulations
Our Services
- NIS2 essential / important entity classification and gap analysis
- OT asset discovery and CMDB build
- Cross-sector incident-response playbooks and exercises
- Board-level resilience reporting on continuous controls
Outcomes
- NIS2 Art. 21 measures fully evidenced
- Cross-sector IR coordination tested twice per year
SEC.IND / 07 — Shipowners · Operators · Ports · Logistics
Sector 07 / 10
Shipping
IMO 2021 compliance, OT onboard, port operations and supply chain cyber exposure.
Threat Landscape
- ECDIS, AIS and GPS spoofing or jamming
- Onboard OT (engine, ballast, cargo) exploitation
- Port crane and terminal operating-system compromise
- BEC and invoice fraud across shipping agents
Regulatory Scope
IMO 2021 (Res. MSC.428(98))BIMCO guidelinesISPS CodeNIS2 (transport)
Our Services
- Fleet-wide cyber risk assessment and SMS integration
- Onboard OT segmentation and remote-access hardening
- Port and terminal SOC with maritime threat intel
- Crew awareness and bridge-team tabletop drills
Outcomes
- IMO 2021 evidence accepted in port-state inspections
- Zero cyber-related navigational safety incidents
SEC.IND / 08 — Operators · Platforms · Affiliates · Studios
Sector 08 / 10
iGaming
Licensing, fraud prevention, DDoS resilience and player data protection.
Threat Landscape
- Account takeover, bonus abuse and multi-accounting
- Layer-7 DDoS during peak sporting events
- Payment-cashout fraud and money-laundering rings
- Insider collusion and game-server tampering
Regulatory Scope
MGAUKGCGDPRAML/CFT (5AMLD/6AMLD)PCI DSS
Our Services
- License-readiness security audit (MGA / UKGC / Curaçao)
- Always-on DDoS and bot-management
- Fraud-analytics integration with KYC and AML stacks
- Penetration testing for RGS, platform and mobile
Outcomes
- License renewals with zero security findings
- Fraud chargeback rate reduced by ≥ 40%
SEC.IND / 09 — E-commerce · Omnichannel · Marketplaces · POS
Sector 09 / 10
Retail
PCI DSS, e-commerce fraud, payment integrity and customer data protection.
Threat Landscape
- Magecart / web-skimming and JS supply-chain attacks
- Loyalty-program credential stuffing
- POS malware and PIN-pad tampering
- Gift-card and refund fraud at scale
Regulatory Scope
PCI DSS 4.0GDPRPSD2 SCAePrivacyConsumer protection laws
Our Services
- PCI DSS 4.0 readiness, scoping and QSA liaison
- Client-side script monitoring and CSP hardening
- E-commerce fraud analytics and bot defence
- POS estate hardening and segmentation
Outcomes
- PCI DSS 4.0 attestation achieved on first cycle
- Cart-fraud rate reduced while approval rates rise
SEC.IND / 10 — Multi-region · Group · Board-level programs
Sector 10 / 10
Enterprise
Multi-region risk programs, board reporting and continuous control assurance.
Threat Landscape
- Multi-cloud misconfiguration and identity sprawl
- Insider risk across M&A and divestitures
- Geopolitical and sanctions-driven targeting
- AI / data leakage through GenAI adoption
Regulatory Scope
ISO/IEC 27001NIST CSF 2.0SOC 2EU AI ActRegional NIS2 / DORA scopes
Our Services
- Group-wide cyber program design and vCISO leadership
- Continuous control monitoring across cloud, identity and endpoint
- Quantified cyber risk reporting for board and audit committee
- M&A cyber due diligence and post-merger integration
Outcomes
- Single risk register across all entities and regions
- Quarterly board cyber scorecard with quantified exposure (€)
SEC.ENGAGE
Not seeing your sector?
We operate cross-sector cyber programs aligned to DORA, NIS2, ISO/IEC 27001 and NIST CSF 2.0. Talk to a senior advisor about your specific regulatory and threat profile.