Skip to content

Hong Kong · IT consultancy for regulated firms

Your IT, secured and audit-ready.

KRP works with banks, insurers, fund managers and fast-growing companies on information security, compliance and infrastructure: we assess, we fix with our own hands, and we leave you the evidence.

KRP Workspace for iPhone and iPadScan with your iPhone or iPad
  • 12+ yearsin IT operations, security and compliance
  • Proximus · IBMservice delivery for enterprise clients
  • Banking · Insurance · Fundsregulated clients
  • ISO 27001 · DORA · NIS2 · SOC 2 · SWIFT CSPframeworks delivered in production

Photo: Benh LIEU SONG, CC BY-SA 4.0

01Expertise

Senior advice, hands-on delivery.

One accountable consultant, from the first gap analysis to day-to-day operations. Fixed-price missions or day rate, remote or on site in Hong Kong, in English, French or Chinese.

  1. 01

    Security & compliance

    Get audit-ready, and stay there. We turn regulatory requirements into controls that work and evidence auditors accept.

    • ISO 27001 / 27005 readiness, risk assessments, policies
    • DORA, NIS2, SOC 2, SWIFT CSP and GDPR programmes
    • CIS hardening and vulnerability management (Rapid7, Qualys)
    • MFA, privileged access (CyberArk), least privilege
    • SOC coordination, incident and crisis management
  2. 02

    Infrastructure & cloud

    Reliable foundations, on premises or in the cloud, designed, built and documented by the people who run them.

    • Microsoft 365, Entra ID, Intune, workstation fleets
    • Windows Server, Linux, Active Directory
    • Virtualization: VMware vSphere, Proxmox, KVM
    • Azure migrations, hybrid identity, networks and firewalls
    • Backups, disaster recovery plans, failover tests
  3. 03

    IT service management

    IT that runs to agreed service levels, with the reporting management and regulators expect.

    • Service delivery management, SLA and KPI reporting
    • ITIL change management, CAB, ServiceNow
    • Dashboards with Power BI, SQL and Microsoft Graph
    • Team leadership and vendor coordination
    • Pre-production validation, UAT, release processes

02Live threat watch

The flaws we track for our clients, live.

KRP monitors newly published critical vulnerabilities and those known to be exploited, and checks them against each client’s systems. Below, live: CVSS 10 flaws at enterprise vendors and every vulnerability CISA lists as exploited, refreshed every 15 minutes.

Vulnerability watch…

Loading the latest vulnerabilities…

Sources: CIRCL Luxembourg (Vulnerability-Lookup), MITRE CVE, CISA KEV · refreshed every 15 minutes

03Founder

Maxime Bourdis

Service Delivery Manager · Information Security Officer

Twelve years running IT for regulated clients in Luxembourg and Europe before founding KRP in Hong Kong. Results, not slides: CIS hardening from 10% to 91% on a full server fleet, a vulnerability backlog cut from 60,000+ findings to under 100, MFA and CyberArk rolled out, 600+ workstations moved to Azure.

Download CV (PDF) LinkedIn
Maxime-Bourdis-CV.pdf
  1. Today
    KRP · Hong KongFounder, IT consulting and products
  2. 6 yrs
    Proximus LuxembourgService Delivery Manager, Compliance & Security: banking, insurance, funds
  3. 4.5 yrs
    IBM Global ServicesService Delivery Leader, 24-person technical team, DR plan
  4. 2 yrs
    NCS · EconocomSystems administrator, VMware, Linux, Windows, 750+ servers
  • ISO 27001 / 27005
  • DORA
  • NIS2
  • SOC 2
  • SWIFT CSP
  • GDPR
  • CyberArk
  • Entra ID
  • Rapid7 · Qualys
  • VMware · Linux
  • ITIL · ServiceNow

04What we build

We also ship our own software.

Built, hosted and monitored on our own infrastructure, with the controls we recommend to clients.

WardAIIT management appliance with agentsIT management and security appliance that runs in your own infrastructure: agents for Windows, Linux and macOS, patching, inventory, monitoring, private AI assistants.wardai.eu ↗LetzCheckNFC check-in for service providersNFC check-in for on-site service providers: arrival and departure times recorded on site, verifiable, no app to install. Hosted in Europe.letzcheck.lu ↗KRewardLoyalty cards in Apple and Google WalletLoyalty cards in Apple Wallet and Google Wallet: one scan at the counter, no app, no plastic, with a scanning app for merchants.kreward.net ↗

KRP Labs

  • AI assistantThe one on this page: our knowledge base, European models, human follow-up.
  • Client portalTickets, quotes, invoices, messages, meetings and calendar.
  • Encrypted callsEnd-to-end encrypted video, screen sharing, single-use guest links.

05Contact

An audit coming up? A project to secure?

Write, call or book a slot. Answer within one business day, in English, French or Chinese.

Meeting

KRP · Hong Kong · BR No. 41625695 · Sole proprietorship

Send us a message

Contact

Let's talk.

A project, a question, a partnership? Write to us, we answer in English, French or Chinese.