Consultancy · Cybersecurity & KYC/AML · Belgium
Cybersecurity, systems engineering and KYC/AML compliance for banks, credit and regulated companies. Two consultants, on assignment in your organisation.
Currently on assignment · next availability on request On assignment · availability on request
Brussels & all of Belgium. On site or remote.
Protect your access, keep production running, prove your compliance.
01 · Expertise
The security of your access, the reliability of your systems and the compliance of your clients: three neighbouring crafts, practised in the same banking environment.
01 Cyber
Security is not a list of tools, it is risk management. We start from your actual activities to protect what matters first: privileged accounts, identities, and the workstations and servers exposed to vulnerabilities.
02 Systems
Reliable production rests on steady routines: patches applied within planned maintenance windows, tested backups, monitoring that alerts before users notice, documentation that matches reality. As system engineers, we run and evolve your Windows servers, Active Directory, virtualisation and virtual desktops without interrupting the business.
03 KYC
Anti-money laundering compliance is decided file by file: identity, beneficial owners, activity, screening. We reinforce your KYC teams for onboarding and enhanced due diligence, with the rigour quality control expects.
02 · Situations
You don’t need to know the jargon. You recognise the situation, we know what to do, on the security side as well as on compliance.
The situation
Shared administrator accounts, and nobody really knows who uses them.
What we do
We put sensitive accounts in a vault: every access becomes personal, traced and time-limited.
What you get Privileged access under control
For IT teams, banks and lenders
The situation
Internal audit found incomplete or outdated client files.
What we do
We rework the files in order of risk: identity, beneficial owners, screening, supporting documents.
What you get Complete files, ready for review
For Banks, lenders, entities subject to anti-money laundering law
The situation
External contractors keep their access long after their assignment ends.
What we do
We map third-party access, set rules for duration and approval, and close what lingers.
What you get No more forgotten access
For Companies working with IT subcontractors
The situation
Complex ownership structures, and beneficial owners that are hard to establish.
What we do
We read the structures, identify who really controls the client and document every step.
What you get A traceable rationale
For Banks, lenders, fintechs
The situation
A client sends you a security questionnaire before signing.
What we do
We prepare accurate answers, backed by evidence, and fix the gaps that would block the deal.
What you get A signed contract, not a stalled one
For Suppliers to large accounts, software vendors, IT providers
The situation
The board asks “are we protected?” and nobody can answer simply.
What we do
We translate security into risks, priorities and budget, on one page a leadership team can read.
What you get An informed decision
For CEOs and boards
03 · Work
Security, infrastructure and KYC/AML compliance assignments in banking and credit.
See our work
Technical Team Lead Production Security · 2023 – today
Privileged access centralised, traced and revocable.
Infrastructure Engineer · 2021 – 2023
A documented, reproducible and monitored environment.
KYC / AML Consultant · 2023 · 2025 – today
Complete, documented client files, ready for quality control.
04 · Approach
No tools to understand, no jargon: a clear question, an honest reading of the risk, and priorities your leadership can decide on.
Book 30 minFinance Director · Industrial SME
Our largest client is asking whether we will be NIS2 compliant by year end. Honestly, I don’t even know whether it applies to us.
Nayb Consulting
Here is the note for your leadership and the answer for your client. Shall we go through it together on Thursday?
Head of Compliance · Credit institution
A regulatory review has been announced and part of our client files is not up to date. Where do we start?
Nayb Consulting
The high-risk files are complete, the rest follows a dated plan. Here is the note for your compliance committee.
Managing Director · Services group
After the attack at a competitor, our board wants to know whether we are protected. I have to answer within a month.
Nayb Consulting
Here is the page for your board: where you stand, what matters, what it costs. We can present it with you.
Clear decisions, not an 80-page report.
Toolbox
Tools we have administered in production, in regulated environments. Not a wall of logos.
05 · Working together
We work freelance, through the company: directly or through your usual partner.
Full-time or part-time, embedded in your teams, for a set period.
Audit, expert opinion, preparing for an inspection: scope and deliverable fixed in advance.
We work with you directly, or through your usual consultancy or platform.
On site anywhere in Belgium or remote. Invoiced by Nayb Consulting SRL.
06 · Commitments
A firm of two consultants cannot afford to be approximate. These four principles are written into every proposal.
You work with the consultant who scoped the assignment, not with a team placed behind them.
No vendor partnerships, no licence resale. Recommendations serve your interest only.
We do not just deliver recommendations: we implement them and we measure them.
Timelines, costs and risks are announced at scoping and followed openly during the engagement.
07 · The firm
Nayb Consulting SRL · Brussels & all of Belgium
Nayb Consulting brings together two independent consultants working for the financial sector: one in cybersecurity and production infrastructure, the other in KYC/AML compliance. Same clients, same standard: systems and files that stand up to an auditor.
Discover the firmNotes
What we repeat most often on engagements, written down once. No theory, just checklists.
All notes
A dozen settings included in the licence prevent most common mailbox compromises. Here they are, in the order we apply them, from most blocking to most comfortable.
Who is in scope, what to do first and in which order: ten points to go from “we should look into it” to a dated plan that fits Belgian law and the CCB framework.
Three copies, two media, one off site: the basics. What really saves a company after ransomware are the next two numbers: one offline copy and zero restore errors.
Get started
Describe the context in a few lines: expertise, duration, pace, start date. We reply within 48 business hours with our availability.
Write to us
Prefer a call?
Book 30 minReply within 48 business hours