Terms of use

These terms govern your use of techrisk.co.ke, operated by Rosewood Technology Risk & Consulting Group. By using the site you accept them. They do not govern any engagement between us — that is set out in a separate engagement letter, which prevails over anything on this website.

This website describes our services and publishes general commentary on technology risk, assurance and governance. It is information, not advice. Nothing published here creates a professional relationship, and no engagement begins until we have both signed an engagement letter.

Regulatory positions change. Articles carry a publication date and are not updated as the law moves. Do not rely on a briefing published here as a current statement of your obligations without checking it against your own circumstances.

Please do not send confidential information, security findings, credentials or personal data belonging to third parties through the enquiry form. If you need to send something sensitive, call us on +254 721 687846 and we will agree a secure channel first.

We aim to respond to enquiries within two working days. We are not obliged to accept any engagement, and we may decline where a conflict of interest exists.

The content, design, diagrams and code of this site belong to Rosewood Technology Risk & Consulting Group unless stated otherwise. You may read, quote and link to it with attribution. You may not republish it in substance, or reuse it commercially, without our written permission.

Third-party standards named on this site — ISO/IEC 27001, ISO 22301, PCI DSS, COBIT, ITIL, SOC 2 and others — remain the property of their respective owners. Naming a framework describes work we perform against it; it does not imply endorsement by, or accreditation from, its owner.

We take care to keep this site accurate and available, but we do not warrant that it is error-free or uninterrupted. To the extent permitted by law, we are not liable for loss arising from reliance on general information published here. Nothing in these terms limits liability that cannot lawfully be limited.

Where we link to another organisation’s site we do so because it is useful. We do not control those sites and are not responsible for their content or their handling of your data.

These terms are governed by the laws of Kenya, and the courts of Kenya have exclusive jurisdiction over any dispute arising from them.

Questions about these terms: taarifa@techrisk.co.ke, or Woodland Business Park, First Floor, Suite Three, Nairobi, Kenya.