Advisory & vCISO
A senior security lead on retainer. We set strategy, own the risk register, write policy and report to your board.
- Security strategy
- Risk management
- Policy suite
Dubai · Vilnius
Security advisory for the Gulf and the European Union.
Stark Link helps organisations build, prove and run a security programme that holds up to regulators on both sides. We work as your vCISO, prepare you for incidents, and take you through NIS2, DORA, GDPR, ISO 27001 and UAE frameworks.
Dubai
--:--
Vilnius
--:--
Two offices, 2–3 hours apart: one team covering the working day from the Gulf to the EU.
Regions UAE · GCC · EU · Baltics
Frameworks NIS2 · DORA · GDPR · ISO/IEC 27001 · UAE IA
Languages English · Arabic · Lithuanian
Services
From strategy to day-to-day controls
Engage us for a single assessment or as a standing security function. Every engagement ends with deliverables your board, auditors and engineers can use.
Incident readiness & response
Response plans, playbooks and tabletop exercises before an incident, and hands-on coordination during one.
- IR plans
- Tabletops
- Breach notification
Compliance & certification
Gap analysis, remediation roadmaps and audit support for EU and UAE regulation and ISO certification.
- NIS2
- DORA
- GDPR
- ISO 27001
Managed security controls
We operate the controls that fail most often when nobody owns them, and report on them monthly.
- Identity
- Endpoint
- Cloud
- Backup
- Vulnerabilities
Security architecture review
Independent review of networks, cloud tenants and critical systems against current threats and your risk appetite.
- Cloud posture
- Network design
- Zero trust
Third-party risk
Supplier assessment and contract clauses that meet NIS2 supply-chain and DORA ICT third-party requirements.
- Vendor due diligence
- Register of information
Compliance coverage
One programme, mapped to both jurisdictions
Many of our clients operate in both regions. We build one control set and map it to each regulator, so you document a control once and use it in every audit.
European Union · from Vilnius
- NIS2
- Directive (EU) 2022/2555. Risk management, incident reporting and management accountability for essential and important entities.
Official source · eur-lex.europa.eu ↗ - DORA
- Regulation (EU) 2022/2554. ICT risk, resilience testing and third-party oversight for financial entities.
Official source · eur-lex.europa.eu ↗ - GDPR
- Regulation (EU) 2016/679. Security of processing, DPIAs and 72-hour breach notification.
Official source · eur-lex.europa.eu ↗
UAE & GCC · from Dubai
- UAE IA
- UAE Information Assurance Standards for government entities and critical sectors.
Official source · u.ae ↗ - PDPL
- UAE Federal Decree-Law No. 45 of 2021 on personal data protection.
Official source · u.ae ↗ - ISO/IEC 27001
- The international ISMS standard, recognised in both regions and our usual foundation.
Official source · iso.org ↗
How we work
Four stages, each with a clear output
You can stop after any stage and keep the work. Most clients start with an assessment and continue into a retainer.
01
Assess
Interviews, document review and technical checks to establish your current posture.
→ Risk & gap report
02
Plan
A prioritised roadmap with owners, cost ranges and the regulatory deadlines that apply to you.
→ Security roadmap
03
Implement
Policies, controls and evidence put in place alongside your team and suppliers.
→ Audit-ready evidence
04
Operate
vCISO and managed controls keep the programme running, measured and reported.
→ Monthly board report
Offices
Dubai and Vilnius
Clients work with the office in their own time zone and regulatory region, backed by one shared team.
Dubai, UAE
Middle East & GCC headquarters
20th Floor, Burj Gate TowerDowntown Dubai
United Arab Emirates
GST · UTC+4
Vilnius, Lithuania
European Union office
VilniusLithuania
European Union
EET UTC+2 · EEST UTC+3
Contact
Talk to a consultant
Tell us what you need to protect or prove. We reply within one business day from the office nearest you.
Emailinfo@stark-link.com
HoursMonday–Friday, 09:00–18:00 local time