Where it was done
IT security audits and testing for local clients and for clients of a major audit firm.
Why us
Why organisations choose Rootbridge
The same people who test the systems write the report and help close the findings. Tatenda has done that work at a major audit firm and for local clients.
The certificates
CISSP, CISA, CISM, CRISC, CGEIT, CPENT, PNPT, CHFI and OSCP are held by the consultants on the engagement.
The local rules
Zimbabwe's Cyber and Data Protection Act sits next to ISO 27001, NIST, PCI DSS and GDPR in the same scope when you need both.
Scoped to the job
We fit the engagement to your systems, your auditor and your deadlines. We do not bring a template and rename it.
0Engagements delivered
0Remediation time cut
0Professional certifications
0Sectors served
Credentials
Certifications on the team
CISA, CISM, CRISC, CGEIT, CISSP, PNPT, C|PENT, C|HFI, OSCP, plus PCI QSA, ISO, PECB and PMI.
CISA
Certified Information Systems Auditor
ISACA
Guiding principles
How we conduct every engagement
Report what we found
Including the finding that is awkward for the sponsor.
Write it twice
One version an auditor can file, and one an engineer can act on.
Keep it in the room
Data and reports stay with the engagement.
Put a name on it
Each serious finding has an owner and a date, then a retest.
Tell us what you need tested.
We will say which engagement fits, and what it will not cover.
Start the conversation →