Bureau RM · risk management

We manage risk before it turns into loss

Corporate, economic, personnel and information security for companies — and a separate private practice for individual clients and families. We help you see risk earlier, verify facts and make decisions you can defend.

Discuss your situation What we do

Almaty, Kazakhstan · more than a decade of practice

When companies call us

Usually at the point where the numbers formally add up, but there is nothing solid to base a decision on: no verified facts.

Internal fraud
Suspected abuse in procurement, warehousing, sales or settlements: the loss is visible, the source is not.
Shareholder conflict
A dispute between partners or shareholders where each side operates on its own version of events.
Information leaks
Data, documents or a client base have left the perimeter — the channel has to be identified and closed.
Unreliable counterparties
A deal, tender or large shipment where the cost of being wrong exceeds the cost of checking.
Personnel risk
Hiring into a role with access to money, data or goods; doubts about what a CV actually says.
Cyber risk
No clear picture of where the company is exposed, who owns information security, and what to do in the first 24 hours.
Crisis situations
The event has already happened and decisions must be made fast without destroying the evidence.
Family and personal assets
Personal and family security, vetting of the immediate circle, risk assessment for a private transaction.

How we work

Five steps, the same for corporate and private engagements. No step is skipped to save time.

First contact
A short conversation about the situation, with no sensitive detail: what happened, what you want to achieve, by when.
Applicability review
We say plainly whether the task can be solved by lawful means and whether you need us at all. If not, you hear it here.
Scope agreement
Scope, lawful boundaries, timelines, fees and the format of the deliverable are put in writing. An NDA where required.
Execution
Work stays inside the agreed boundaries. Interim conclusions are kept separate from facts and labelled as hypotheses.
Documented outcome
A report that separates “established” from “not confirmed” and “not verifiable”, with conclusions and recommendations you can act on.

We do not promise a particular investigative outcome, recovery of funds, punishment of third parties or prevention of every incident. What we answer for is method, lawfulness and the quality of fact-checking.

Practice, not promises

There are no invented case studies, testimonials or “clearance rate” figures on this site. There is method, there are boundaries, and there are competencies you can verify.

Personal accountability
The “RM” in the name is the owner's initials. Quality is his personal responsibility, not an anonymous brand's.
Verifiable facts
A report shows what is documented, what remains a hypothesis and what cannot be verified at all.
Lawful boundaries
We work within the law of the Republic of Kazakhstan and decline tasks that require stepping outside it.
Independent judgement
Conclusions are not shaped to match expectations. An inconvenient result is reported exactly like a convenient one.

Two equal routes

Corporate and private matters are run differently — in scope and in what confidentiality requires.

For business

For owners, CEOs, CFOs, boards, heads of security and HR — wherever risk is measured in money, continuity and reputation.

Internal investigations and forensics
Counterparty due diligence and deal support
Personnel security and candidate screening
Information security assessment and cyber risk

Corporate practice

For private clients

For individuals and families: lawful risk assessment, personal and family security, a resolution without publicity.

Risk assessment for a private transaction
Vetting of household staff and immediate circle
Personal and family security
Information hygiene and the Mental Shield project

Private practice

Ecosystem and professional environment

Resources connected with the owner's practice. The links are here so you can check them for yourself; they do not assert joint delivery of services, membership or exclusive partnership.

QALQAN
Qalqan Security Experts — a professional association of the security industry.
QALQAN (opens in a new tab)
Qalqan Media
An expert media outlet on security in the physical and digital world.
Qalqan Media (opens in a new tab)
JOI Consulting Group
International consulting; the Central Asia practice.
JOI Consulting Group (opens in a new tab)
Mental Shield
The owner's own project: protecting judgement and information hygiene.
Mental Shield (opens in a new tab)