April 1, 2026
Cybersecurity company in Amman, Jordan · Since 2011
Strengthen compliance.
Reduce cyber risk.
Keep your business running.
One ISO 27001-certified team to secure your systems, automate compliance and watch for threats 24/7.
Who we are
The cybersecurity team Jordan's regulators trust to deliver.
Since 2011 we have worked only in cybersecurity. The Central Bank of Jordan and the National Cyber Security Center chose us to deliver national training programmes, and organisations in Jordan, Saudi Arabia and Bahrain rely on our specialists to reduce risk and prepare for audits.
ISO 27001-certified ISMS
Our own GRC platform, ExceedGRC
Bilingual Arabic & English consultants and trainers
Projects delivered or awarded in Jordan, KSA & Bahrain
ISO 27001-certified ISMS
ExceedGRC · our own GRC platform
Executive arm · NCSC Nashama Cyber
SOC-CMM official support partner
Andersen Consulting collaboration
On the CREST Pathway
Accredited by EC-Council, ISACA, CompTIA & BSI
PECB & CertNexus courses
Gold Sponsor · C8 Conference 2025
Delivery partner · CBJ Cybersecurity Bootcamp
ISO 27001-certified ISMS
ExceedGRC · our own GRC platform
Executive arm · NCSC Nashama Cyber
SOC-CMM official support partner
Andersen Consulting collaboration
On the CREST Pathway
Accredited by EC-Council, ISACA, CompTIA & BSI
PECB & CertNexus courses
Gold Sponsor · C8 Conference 2025
Delivery partner · CBJ Cybersecurity Bootcamp
By the numbers
Proof, not promises.
Verified figures from our own record, not marketing estimates.
2011
Established in Amman, securing organisations across MENA ever since
3
Countries with projects delivered or awarded in 2025: Jordan, KSA and Bahrain
40
Fintech professionals trained in the CBJ Cybersecurity Bootcamp's first cohort
100%
Pass rate: 14 BSI ISO 27001 Lead Implementer candidates, February 2025
What we do
One cybersecurity partner. Four ways to stay ahead of attackers.
Start where the pressure is highest, then grow: strategy, technology, 24/7 operations and training from one certified team.
Cybersecurity Consulting
Close the gaps auditors and attackers find first.
ISO 27001
SAMA
NCA
CBJ
Cybersecurity Solutions
NDR, SIEM and vulnerability management, plus our own ExceedGRC platform.
NDR
SIEM
ExceedGRC
Managed Security Services
A 24/7 SOC team without the in-house cost.
24/7 SOC
Threat hunting
Incident response
Training Academy
Accredited certification training in Amman and online.
EC-Council
ISACA
CompTIA
BSI
ExceedGRC · Our own GRC platform
Automate compliance.
Quantify risk.
Own it with ExceedGRC.
Built by our consultants, ExceedGRC replaces spreadsheets with automated gap assessments, live risk scoring and audit-ready reports, in the cloud or on-premises.
ISO 27001
SOC 2
NIST
PCI-DSS
CBJ
SAMA
NCA
Our capabilities
From strategy to the SOC console, one accountable team.
Strategic security consulting
Get audit-ready with a programme that lasts.
A security programme built to stand up to audit, from ISO 27001 and compliance to business continuity and third-party risk.
Information Security Management (ISO 27001)
Compliance: SAMA, NCA, CBJ & PCI-DSS
Business Continuity (ISO 22301)
IT Security C&T Academy
Build a team that's certified to defend you.
Accredited EC-Council, ISACA, CompTIA, BSI, PECB and CertNexus courses, customised programmes and red/blue team simulations, chosen for the CBJ fintech bootcamp and NCSC's Nashama Cyber cohorts. Our security awareness solutions, from phishing campaigns to interactive content and dashboards, help raise your staff's cyber awareness.
Next courses
1 Nov
Certified in Risk and Information Systems Control (CRISC)
ISACA · 10 days · Online
8 Nov
Certified Cloud Security Engineer (CCSE)
EC-Council · 5 days · Amman & online
20 Nov
ISO/IEC 42001 AI Management Lead Implementer
PECB · 5 days · Amman & online
29 Nov
EC-Council Certified Incident Handler (ECIH)
EC-Council · 5 days · Online
In the field
Trusted by the institutions that protect Jordan.
C8 Conference 2025
Gold Sponsor at the Dead Sea, with partner Cyber Ranges running a 3-day cyber drill
Strategic partners & collaborations · View all partners
Latest news
Recent wins, programmes and insights.
FAQ
Straight answers before you commit.
Quick answers about our consulting, managed security, ExceedGRC and training services.
What cybersecurity services does IT Security C&T offer?
Strategic and technical cybersecurity consulting (ISO 27001 and compliance programmes, business continuity, third-party risk, penetration testing, red teaming and SOC assessments), cybersecurity solutions (NDR, SIEM, vulnerability management, data classification and our ExceedGRC platform), managed security services (24/7 security monitoring, threat hunting, incident response retainer and compromise assessments) and accredited cybersecurity training.
Where is IT Security C&T based?
IT Security C&T was established in 2011 and is headquartered in Amman, Jordan. We serve organisations across the MENA region and the wider EMEA area, with projects delivered or awarded in Jordan, Saudi Arabia and Bahrain in 2025.
Is IT Security C&T ISO 27001 certified?
Yes. Our Information Security Management System (ISMS) is certified to ISO 27001, and our ISMS policy commits us to protecting our own and our clients' data, systems and services.
Can you help us meet regulatory and compliance requirements?
Yes. Our consultants take you from gap assessment to the certification body's audit for ISO 27001 and ISO 22301, through PCI-DSS compliance and alignment with NIST CSF, SAMA CSF, NCA ECC and the Central Bank of Jordan's cybersecurity framework. ExceedGRC automates the gap assessments and evidence tracking.
Which cybersecurity certifications can I train for?
EC-Council (CEH, CHFI, CND, CPENT, CTIA, ECIH), ISACA (CISM, CISA, CRISC), CompTIA (Security+, Network+, CySA+), BSI and PECB ISO 27001 and ISO 22301 Lead Implementer and Lead Auditor, PECB ISO 42001 (AI) Lead Implementer, and CertNexus courses, plus customised programmes for your team.
Let's talk
Talk to a specialist before the incident, not after it.
An audit deadline, a SOC decision or a team to certify: tell us where you stand and a senior consultant will reply with a clear next step.