A consulting, training, and solutions firm built for the MENA region.
IT Security C&T is a cybersecurity consulting and training firm operating across the Middle East and North Africa, providing consultation, training, and solutions focused exclusively on information and cyber security.
Built for a gap in the region.
IT Security C&T was incorporated to be the leading information security and technology risk management resource centre in the Middle East and North African region.
The specialism is high-end information security and technology risk management work that is otherwise hard to find within the region at the same cost. The team is formed of specialists in their fields, with track records of 10 to 20 years serving at key locations across MENA and around the world.
That accumulated experience, knowledge and skill exists to do one thing: develop highly trained bilingual consultants and trainers who can deliver world-class services to clients inside the region, rather than flying expertise in for each engagement.
To provide our customers with the highest quality consultation services, training, and solutions, based on international standards, best practices, and the latest trends. We are committed to proper knowledge transfer and ease of implementation, so that people and organizations reach the optimum level of information security protection through consulting combined with best-in-class training and security solutions.
To be the leading information security consulting and training resource center in the Middle East and North African region, providing comprehensive information and cyber security consultation, training services, and solutions.
Management Team

Muntaser Bdair
CEO & Founder

Muhannad Zarour
Chief Operating Officer

Rami Al Farhan
Consulting Services & Solutions Director

Nidaa Abdel-Aziz
Training Academy & Marketing Manager

Four lines of work, one focus.
Consulting Services
Strategic advisory covering business continuity, compliance, data protection, and third party risk, alongside technical assessment across infrastructure, applications, and security operations.
Solutions
Packaged technology deployments including NDR, SIEM, data classification, vulnerability management, and the ExceedGRC platform, customized to each environment.
Managed Security Services
Ongoing coverage rather than one-time reports: 24/7 monitoring, threat hunting, incident response retainers, and compromise assessments.
Training Academy
Certification training delivered with (ISC)², EC-Council, BSI, CompTIA, and ISACA, running in the MENA region since 2011.
Audited against the standard we advise on.
IT Security C&T holds ISO 27001 certification for its own Information Security Management System.
The certification covers corporate and client data, and the information technology systems, services and equipment behind them. It is the same standard our Information Security Management engagements take clients through, which means the process we run for you is the process we run on ourselves.
Our consultants are certified
CISSP
SSCP
CISA
CISM
CEH
C)PTE
C)IHE
ISO 27001
COBIT 5
ITIL
PMP
Three ventures alongside the practice.
Cyberfort 365
Incorporated to be the leading information security and technology risk management resource centre in the UAE, delivering the high-end services that are otherwise hard to source in the region at the same cost.
Security Matterz
A specialist IT security organization headquartered in London, with branch offices across the Middle East and its premier office in Riyadh. It partners best-in-class products and services to identify and resolve client security threats.
Security Fist
Founded to address the weakest link. It develops, implements and measures security awareness programmes sized to the organization and its industry, for companies of every scale.
Common questions.
Where are you based?
Headquartered in Jordan, serving clients across the EMEA region.
Which sectors do you work with?
Government, financial, and academic institutions among others, with the Academy also delivering into the military and banking sectors across the MENA region.
Is the company itself certified?
Yes. Our own information security management system is ISO 27001 certified, and our consultants and trainers hold certifications across (ISC)², EC-Council, ISACA, and CompTIA.
Do you only advise, or do you implement as well?
Both. Consulting covers advisory and assessment, Solutions deploys and configures technology in your environment, and Managed Security Services runs the operational side day to day.