01
Security Assurance Reviews
Independent assessment of control estates against ISO 27001, NIST CSF 2.0 and national critical-infrastructure baselines, delivered as a board-readable position.
Advisory arm · Cyber security
Cyber advisory for sovereign, corporate and vaulting estates
Grey Vault Technology advises governments, private corporations, central banks and critical-infrastructure operators through complex cyber security exposure — from independent assurance to the remediation programmes that actually close findings, plus cyber assurance training for gold vaulting and custody companies.
19
Jurisdictions advised
60+
Remediation programmes closed
1,400+
Critical findings retired
21 days
Median time to first fix
02
Remediation Advisory
Post-incident and post-audit programmes: sequencing findings by exploitability, standing up the workstreams, and holding delivery to a closure date.
03
Sovereign & OT Resilience
Segmentation, monitoring and recovery design for energy, mining, refining and payments infrastructure where downtime is a national event.
04
Regulatory & Third-Party Risk
DORA, NIS2, SAMA CSF and central-bank mandates translated into evidence packs, supplier assurance and attestable operating procedure.
05
Vault Cyber Assurance Training
Certified training for gold vaulting and custody operators: access-control integrity, surveillance and alarm-system hardening, insider-threat drills and audit-ready evidence for insurers and LBMA-aligned reviews.
Engagement model
01
Establish
Two-week diagnostic: asset truth, exposure surface, control coverage and the delta against the mandate you are held to.
02
Remediate
A costed, sequenced remediation plan with named owners — executed alongside your teams, not handed over as a report.
03
Sustain
Assurance cadence, tabletop exercises and metrics that let the board evidence residual risk quarter after quarter.
We do not resell security products or take vendor commission. Advisory revenue comes from the mandate alone — the only structure under which a remediation plan stays honest.
Cyber assurance training
Training for gold vaulting companies
Bullion vaults sit at the join of physical and digital control. We run cyber assurance training for vaulting and custody operators — on site or remote — so the people guarding the metal, the systems recording it and the board accountable for it work to one standard of evidence.
01
Vault operations crew
Hands-on modules for vault managers and security staff on badge and biometric integrity, dual-control discipline, CCTV/alarm tamper detection and safe handling of visitor and audit access.
02
Technology & OT teams
Hardening the systems behind the door — access controllers, vaulting software, weighbridge and assay interfaces, backup and recovery of custody records, and segmentation from corporate IT.
03
Executive & assurance
Board and audit-committee sessions on insider threat, client-holdings confidentiality, incident notification duties, and the evidence insurers and bullion clients expect to see.
Delivered in cohorts · Post-course assurance report · Annual re-certification
Sectors served
Where failure is not survivable
We advise public institutions and private corporations alike — concentrating on estates where cyber exposure carries sovereign, monetary, custodial or physical-market consequence.
- GOVERNMENT & DEFENCE
- PRIVATE CORPORATIONS
- CENTRAL BANKS
- GOLD VAULTING & CUSTODY
- ENERGY & UTILITIES
- MINING & REFINING
- CAPITAL MARKETS
- MULTILATERAL BODIES
Confidential enquiry
Brief the advisory desk
Tell us the mandate, the jurisdiction and the deadline you are working to. A partner responds within one business day under NDA.
info@greyvault.org