Brightway Consultancy is the cybersecurity practice that briefs the chairman in the morning and audits the SOC in the afternoon. We operate in mandates — not tickets — across the regulated industries of the Gulf.
The operating posture every engagement inherits from day one.
Every engagement is a named mandate with a partner accountable in writing, phased deliverables, and outputs that land at the steering committee — not buried in an IT queue.
Every consultant on a file runs the engagements they teach. We don't staff projects with slide-deck repeaters; the room has to answer the regulator's next question without checking a script.
If the auditor can't follow the report, the report doesn't ship. Outputs are written in the register your regulator already reads — and survive a hostile read line by line.
Examples come from the rules your regulator actually reads. Cadence runs on the calendar your boards actually keep. Defaults assume Gulf business culture, not transplanted templates.
Brightway Consultancy is a cybersecurity advisory and training practice for the regulated industries of the Gulf. We work with boards and security leaders on the decisions behind an audit, a certification, or a regulator's review — and we run PECB-authorized training for the teams who take that work forward.
The firm was built around a straightforward way of working: a senior consultant accountable on every mandate, reports written to be read as easily by the regulator as by the board, and engagements phased so clients stay in control at each step.
Sami Chamam
Twenty years in cybersecurity across the finance and telecom sectors, in roles spanning CISO, governance and risk, architecture, audit, and training. He founded a France-based cybersecurity firm in 2016 and stays active in cybersecurity professional bodies. He now leads Brightway Consultancy across the GCC and into Africa.
LinkedIn profileWe don't claim a flag on every market we name. References are earned one mandate at a time — where the work calls, we travel; where the work persists, we deepen.
A partner reviews every enquiry and replies within one GCC business day. Bring the question; leave with a working hypothesis.