Who we are
Who we are
A specialist firm, built for regulated work.
The Risk Labs operates at the intersection of cyber audit, AI governance, and technical assurance. We work with organizations that cannot afford a weak audit opinion.
What we do differently
We don’t scale by hiring juniors.
Every engagement is run by a certified lead. If you are paying for a QSA, a lead auditor, or a vCISO, that is who shows up — not a trainee shadowing them.
We publish evidence, not opinions.
Every finding we report is traceable to a control, a test, or a document. Our reports have been accepted by regulators, acquirers, and central banks across the GCC.
We work in the standards your regulator reads.
PCI DSS. ISO 27001. ISO 42001. SWIFT CSP. NESA. SAMA. We don’t translate a US framework into local relevance after the fact.
Credentials across the team
- CISA — Certified Information Systems Auditor
- CISSP — Certified Information Systems Security Professional
- PCI QSA — Qualified Security Assessor
- ISO 27001 Lead Auditor
- SWIFT CSP Assessor
- PCI SSLCA — Secure Software Lifecycle Assessor
- CEH — Certified Ethical Hacker
- ISO 42001 Lead Implementer
Where we work
Abu Dhabi (head office) · Dubai · Riyadh · Doha. Delivery across the GCC and selected US engagements through our affiliate network.
Established 2020.
