Asia-Pacific · Cebu HQ · PHT (UTC+8)
An APJ analyst hub on your time zone.
Cebu-based analysts on PHT (UTC+8) — same business day as Singapore, Tokyo, Manila, and most of Australia. When your endpoint flags at 11am SGT, the analyst triaging it is on hour three of their shift, not winding down a graveyard rotation in another hemisphere.
- Cebu SOC — same-day APJ coverage
- Singapore MAS TRMG & cyber hygiene baseline
- Australia Essential Eight + ISM controls
- Japan APPI + ISMS-AP (ISO 27001) evidence
APJ regulatory landscape
Different country, different control catalog.
Asia-Pacific isn't one regulatory regime. We map our SOC and managed services to each country's framework so your evidence file is exam-ready in the language your regulator speaks.
Australia
Essential Eight + ISM
ACSC Essential Eight maturity levels. ISM controls for IRAP-assessed providers. SOCI Act for critical infrastructure.
Singapore
MAS TRMG · CSA CCoP
Monetary Authority Technology Risk Management Guidelines. CSA Cybersecurity Code of Practice for CII. PDPA controls.
Japan
APPI · ISMS-AP
Act on Protection of Personal Information amendments. ISMS-AP (Japanese ISO 27001 scheme). PrivacyMark.
Philippines
DPA · BSP MORB
Data Privacy Act. Bangko Sentral Manual of Regulations for Banks IT risk circulars. NPC enforcement.
Other markets (Korea, Indonesia, Malaysia, Thailand, Vietnam): talk to us — we map to local frameworks on a customer-by-customer basis.
What's different about us
A Cebu hub, not an offshored helpdesk.
Plenty of MSSPs put their nightshift in the Philippines and call it "follow-the-sun." Ours is the regional headquarters for APJ customers — the analysts you talk to are the analysts who own your environment.
-
01
Same business day
PHT covers SGT, HKT, JST, AEST overlap. Your morning is our morning. Calls happen at human hours.
-
02
APJ-native frameworks
Essential Eight, MAS TRMG, APPI, PDPA — these are the controls our APJ analysts work in every day, not English translations of NIST.
-
03
Same global stack
Same SOC platform, same threat intel, same playbooks as our Honolulu and Lisbon teams. Regional context, not regional cookie-cutter.
Talk to us
A 30-minute call beats six months of RFPs.
Tell us where you operate, which APJ regulators you answer to, and what's keeping your CISO up. We'll tell you whether we're the right fit — on the call.