A technology risk advisory firm that also runs infrastructure

Why the firm is set up this way

Advice on technology risk is easy to give and hard to act on. Firms that only advise leave you with a report. Firms that only sell services recommend what they sell.

We do both, in a fixed order. First we measure where the business stands and say plainly what matters and what can wait. Then, if you want us to, we carry out the work and stay accountable for the result.

Who we work with

Owners, managing directors, and finance and operations leads of growing businesses in East Africa, particularly those answering to a regulator, an auditor or large clients on how they handle data and downtime. Most of our work so far has been in four sectors.

• Transport, logistics and supply chain

  When the booking, dispatch or ordering system stops, revenue stops with it. We have built the operating systems for a passenger transport SACCO and a supply chain business, and concentrate on uptime, payment reconciliation and an audit trail behind every payout.

  Check my business readiness

• Travel and tourism

  Agencies handle passports, payments in several currencies and supplier commissions, often across tools that do not talk to each other. We have built booking, ticketing and finance systems for travel businesses and secure the client data they hold.

  Get my security score

• Professional and compliance services

  Law, audit, consulting and compliance firms hold client information that would be damaging if leaked, and their own clients ask them to prove how it is protected. We secure email and document access and prepare firms for those questionnaires.

  Get my security score

• Churches and membership organisations

  Member records, giving and payroll are personal and financial data that members expect to be handled with care. We have built membership, giving and accounting systems and set up the data protection practices around them.

  Start the scorecard

Standards we work to

• Kenya Data Protection Act 2019 and its regulations
• Central Bank of Kenya guidance on cybersecurity and outsourcing
• ISO/IEC 27001
• PCI-DSS
• Communications Authority of Kenya requirements

Denis Murila, founder

Denis leads CloudGrid Africa's engagements. His background covers infrastructure engineering, cloud architecture, cybersecurity, business continuity, enterprise technology and data. He builds production systems and runs offensive security assessments against them, and brings both views to advisory work.