An independent security assurance practice. We establish whether controls are operating, and we publish the documentation to build them.
What we are
RootGuard Security Limited is registered in Jamaica and serves organizations across the Caribbean and beyond. We assess security controls against evidence, deploy and maintain governance documentation, train client staff, and verify that agreed actions are completed.
We do not implement technical changes, provide monitoring, or offer out-of-hours incident response. Those are real services and you may well need them, but they are not ours, and keeping that boundary is what makes our findings worth something.
Engagements are delivered by the principals. Nothing is passed to junior staff, and the person who assesses your controls is the person in the room at the briefing.
We maintain our own assessment instrument covering 242 controls under NIST CSF 2.0, with crosswalks built for the standards our clients are judged against, and a documentation library that is production ready rather than a starting point.
How we work
Agreed in writing before work starts. Nothing is billed hourly and the scope does not move without your written agreement.
If we find something that needs attention now, you hear about it the same day. We do not hold serious findings for the report.
We correct facts on evidence and reconsider ratings. Where we still disagree, your position is recorded alongside the finding rather than replacing it.
Company
| Legal name | RootGuard Security Limited |
| Trading as | RootGuard |
| Registered | Jamaica, company number [number] |
| Registered office | [registered address] |
| Contact | contact@rootguardsecurity.com |
| Insurance | Professional indemnity and cyber cover. Details on request. |
Talk to us
Tell us what prompted you to look and which framework matters. We will point you at the right pack or service with the reasoning rather than a recommendation.