Each service maps to a specific part of the DFSA's General Module (GEN) or Prudential Module (PIB). Firms take the whole set or only the pieces their own teams do not cover.
Gap assessment and IT audit
Each requirement scored as met, partial or missing against the evidence you can actually produce, then turned into a prioritised plan of work.
Supports GEN 5.5.2 and GEN 5.5.5
Policies and governance documentation
Your Cyber Risk Management Framework, Operational Risk policy and Cyber Incident Response Plan, written for Governing Body approval and annual review.
Supports GEN 5.5.2, GEN 5.5.17 and PIB 6.2
Microsoft 365 security
Access control, multi-factor authentication, encryption and data protection configured in your tenant, with Microsoft Purview for classification and loss prevention.
Supports GEN 5.5.8, 5.5.9 and 5.5.12
24/7 security monitoring
Penta Sentinel, our SIEM, watched by a Security Operations Centre around the clock, so a material incident is detected and escalated in time to notify the DFSA within 72 hours.
Supports GEN 5.5.7, 5.5.16 and 5.5.19
Penetration testing
Regular vulnerability assessment and penetration testing, with findings tracked through to remediation and kept on file for review.
Supports GEN 5.5.15
Cyber security awareness training
Tailored programmes for staff and senior management, run at least annually, with completion records kept by role.
Supports GEN 5.5.14
Backup and disaster recovery
Managed backup and tested recovery, to your chosen cloud or to Penta's data centres in the UAE and Switzerland.
Supports PIB 6.6 and GEN 5.5.17
Managed infrastructure
Private, hybrid or Azure environments patched, change-controlled and monitored by Penta, with an asset inventory kept current.
Supports GEN 5.5.5, 5.5.10, 5.5.11 and PIB 6.6
