Step 1
Assess
Understand your current state, risks and priorities.
Technology that advances your organization
Security that protects what matters
Built for banks, regulators, governments and growing organizations. Connecting CIO and CISO leadership with technology strategy, cybersecurity expertise and digital transformation.
Three practices, one goal.
Technology your organization can trust.
Virtual CIO / CISO
You need proven technology and security leadership at the table, without the full-time cost. As your virtual CIO or CISO, we set strategy, report to your board and direct your teams and vendors on a flexible basis.
Security leadership
- Security strategy, policies and program leadership
- Cyber risk reporting to the board and regulators
- Incident readiness: breach response plans, playbooks and simulation exercises
Technology leadership
- Technology strategy, roadmap and budget
- IT operating model, vendor and procurement management
- Cloud, data and AI decisions guided by evidence and best practice
Board & executive advisory
Independent, board-level counsel on technology investment, cyber risk appetite and organizational resilience.
Technology strategy & roadmaps
Enterprise technology, cloud and AI strategies aligned to business goals and translated into costed, multi-year roadmaps.
Technology procurement advisory
Make informed technology purchases through clear requirements, well-structured tenders and independent vendor evaluation and selection.
Cybersecurity assessments & audits
Independent maturity, risk and compliance assessments benchmarked against ISO 27001, NIST CSF 2.0 and regulatory requirements.
Security program development
Design and implementation of enterprise security programs based on ISO 27001 and NIST CSF 2.0, through to certification readiness.
Penetration testing & ethical hacking
Managed testing through vetted partners, or independent oversight of your provider, with findings prioritized into a remediation plan.
Digital strategy & transformation
Align technology investment with your priorities through digital strategy and transformation roadmaps, including low-code and no-code approaches where they improve service delivery and automation.
IT operating model & service management
Operating model design and review, ITIL-aligned service management, portfolio governance and vendor performance management.
Cloud, data & AI governance
Cloud strategy and FinOps, enterprise architecture, data governance and responsible AI frameworks.
Who we serve
Built for organizations people depend on. Where trust matters.
We advise public and private organizations in Kenya, throughout East Africa and internationally, with an established record of leadership in regulated sectors.
Banks, insurers & SACCOs
Cyber risk oversight and regulatory readiness to protect customers and strengthen financial service resilience.
Regulators & central banks
Security governance and ISO 27001 readiness to safeguard sensitive information and critical institutional operations.
Government & state agencies
Digital strategy, data protection and vendor oversight for dependable, accountable public services.
Healthcare & health data
Secure modernization to protect sensitive health information and support continuity in care and health reporting.
Enterprises, NGOs & donors
Technology strategy and cyber readiness that support growth, program delivery and audit preparedness.
How we work
From understanding to ownership.
Step 2
Strategize
Agree a clear, prioritized roadmap.
Step 3
Enable
Guide delivery, governance and vendors.
Step 4
Sustain
Build lasting capability in your team.
Start small. Stay as long as you need us.
Assessment
Assess your current maturity, identify gaps and define a clear path to your target state.
Strategy engagement
Develop a multi-year IT and cybersecurity strategy, with a roadmap to deliver its outcomes.
Virtual executive retainer
Dedicated CIO or CISO leadership for a set number of days each month.
Workshops & executive briefings
Focused sessions for leadership and technical teams.
Meet our founder
30+ years in technology and cybersecurity
CISMCISACDPSECertified Pen Testing ExpertITIL
Frameworks: ISO 27001 · NIST CSF 2.0
Hassan Gesso
Founder & Principal Advisor
He leads Strativa’s advisory work, drawing on a trusted network of specialist partners where an engagement requires it.
His career spans more than 30 years in technology and cybersecurity, starting as a network and security engineer and rising through increasingly senior roles, including Head of Enterprise Technology and Chief Information Security Officer, in public and private sector organizations.
He has advised organizations and boards on technology and cyber risk, led organizations to ISO 27001 certification, delivered large-scale cloud migrations and launched enterprise AI strategies. Strativa brings that experience to institutions across East Africa and internationally.
Explore Hassan’s career
- Systems, Network & Security Engineering · Established deep expertise across systems, networks and security, rising into leadership of the teams and infrastructure that keep critical institutions running.
- Information Security Leadership · Led enterprise security strategy through ISO 27001 certification, advising boards and senior leaders on cyber risk and building security programs that stand up to scrutiny.
- Director, Infrastructure & Technology Services · Brought strategic vision to complex technology environments, leading cloud transformation and building resilient operations designed to stand the test of time.
- Head of Enterprise Technology & CISO · United technology and cybersecurity leadership, advising boards on investment, risk and resilience while shaping the strategy and governance behind responsible innovation.
- Founder & Principal Advisor, Strativa Advisory · Brings the judgement of a technology executive, the perspective of a CISO and the depth of an engineer to institutions across East Africa and internationally. Independent counsel grounded in the responsibility of leading.
Our vision
To be East Africa’s most trusted partner for secure, resilient, technology-driven organizations.
Our mission
To help organizations turn technology and cybersecurity into strategic advantage through independent advice, practical strategy and proven governance.
Independent judgement. Vendor neutrality. Your interests come first.
International standards, applied locally.
We build your capability, not dependency.
Measurable outcomes, not reports on shelves.
Your data and confidentiality come first.
Insights
Practical thinking for leaders.
Analysis of the technology decisions, security challenges and governance priorities facing organizations today.
Why an ISMS Matters More Than Your Firewall
Security tools are controls, not a strategy. An ISMS gives your organization the governance and accountability to manage cyber risk.
Read analysisSIM-Swap Fraud: Protecting Customers in a Mobile-First Economy
Why SMS verification alone leaves customers exposed, and what banks, SACCOs and digital service providers can do about it.
Read analysisDigital Strategy: Competitive Edge or Hidden Cost?
How a coherent digital strategy turns technology spending into advantage, and what happens without one.
Read analysisContact
Let's talk.
A complimentary, confidential 30-minute conversation. We’ll listen to your priorities and explore the right next steps together.
Headquartered in Nairobi, Kenya
Advising across East Africa and internationally
Nairobi
London
New York