A locally established advisory and technology firm helping Omani boards, regulators-facing institutions and government-linked entities create value, protect trust and deliver Vision 2040 — grounded in Omani law, Omani regulators and Omani priorities.
Registered in the Sultanate of Oma
Serving institutions nationwide
Senior specialists, local presence
Diversification, trust and resilience
Advisory that shapes governance, risk and resilience should be delivered by a firm that is established where the institution operates, understands its regulators first-hand, and can be held to account locally. Falconry LLC is that firm in the Sultanate.
A locally registered entity based in Muscat — engaged for the long term, present between projects, and accountable under Omani jurisdiction, not a team that arrives for a workshop and leaves.
Senior specialists who have built, run and audited these functions inside regulated and government-linked institutions — present in the Sultanate and backed by the depth of a wider GCC advisory and technology firm.
Our work is framed around Oman Vision 2040 — economic diversification, a trusted financial sector, digital government and resilient critical services — not a generic regional template.
Corporate and portfolio strategy, operating-model design, digital and AI enablement, and transformation assurance for consequential change.
In Oman: Supporting diversification, government-linked entity transformation and OIA-portfolio value agendas under Vision 2040.
Board and committee design, ERM, compliance, internal audit and ICFR working as one operating model.
In Oman: Aligned to FSA expectations for listed, insurance and licensed entities, and CBO expectations for banks.
Cyber GRC, privacy operating models, technology risk, business continuity and operational resilience.
In Oman: PDPL-ready privacy operations under MTCIT, cyber resilience for critical services, and continuity that is tested — not documented.
Workforce and leadership capability, Omanisation-aligned talent development, ESG governance and sustainability reporting.
In Oman: Building national capability and long-term value in step with Vision 2040 and Omanisation objectives.
Each stage delivers a usable outcome and prepares the next. We shape the answer, embed it as a working system, sustain it as a managed service, and transfer ownership to your people so capability stays in the institution.
Diagnose the priority and design the target operating model — grounded in the Rulebook modules that apply to your licence category.
Turn frameworks into live workflows, evidence, dashboards and automation through the platform and FalconryX.
Run the capability with you capacity, cadence and virtual leadership that keep governance, risk and resilience live.
Transfer knowledge to your teams building national capability in step with Bahrainisation, not dependency.
Omani institutions face a maturing, increasingly enforced regulatory environment — horizontal data protection obligations alongside sector-specific supervision. Our propositions are designed to help you meet those expectations with evidence, not just intent.
Established by Royal Decree 20/2024, the FSA replaced the Capital Market Authority (CMA) and carries a broader mandate — capital and commodity markets, insurance, credit-rating agencies, and now oversight of the accounting and auditing profession.
Governance, disclosure readiness, ICFR, internal audit quality and assurance aligned to FSA expectations for listed, insurance and licensed entities.
The CBO supervises Oman's banking sector, setting expectations around risk management, outsourcing controls, encryption and incident reporting for banks and licensed financial institutions.
Enterprise and operational risk, third-party and outsourcing risk, cyber governance and board-level risk reporting aligned to CBO expectations.
Issued under Royal Decree 6/2022, Oman's PDPL became fully enforceable on 5 February 2026, with the Ministry of Transport, Communications and Information Technology (MTCIT) as the supervising regulator — bringing obligations around consent, DPO appointment, cross-border transfers and breach notification.
Privacy operating models, RoPA, DPIAs, DPO-as-a-service, breach response and evidence of PDPL compliance for institutions processing data in Oman.
Oman's cyber-defence mandate protects national digital infrastructure and critical services. Regulated and critical-service institutions are expected to demonstrate cyber resilience, continuity and the ability to withstand and recover from disruption.
Cyber GRC, operational resilience, business continuity, crisis readiness and exercising for critical-service and government-linked entities.
Our regulatory content is being mapped specifically to Omani frameworks. Where a proposition references FSA, CBO or PDPL alignment, it denotes capability designed to meet those expectations — not certification or endorsement by any Omani authority.
Every seat gets a flagship engagement — delivered as consulting and sustained through managed services and automation — mapped to the regulator and the mandate that leader answers to in Oman.
Governance effectiveness, assurance mapping and board reporting aligned to FSA expectations.
A live board-reporting pack and assurance dashboard, refreshed each cycle.
Strategy & enterprise-risk operating model; transformation assurance for Vision 2040 programmes.
Live strategy-to-risk dashboard with automated performance and risk signals.
ICFR, controls and internal-audit quality aligned to FSA audit & accounting oversight.
Managed IA support and ICFR office; automated control testing and evidence health.
ERM, appetite and regulatory readiness aligned to CBO and FSA expectations.
Managed GRC Office; automated obligation-to-control mapping and regulatory change.
Cyber GRC cockpit and PDPL-ready privacy operating model under MTCIT.
Managed Cyber GRC with vCISO/vDPO; automated evidence, breach workflows and control health.
Operational resilience, BCM and crisis readiness for critical-service institutions.
Managed resilience: BIA refresh, plan maintenance and exercise cadence.
Vision 2040 calls for a diversified economy, a trusted and independent financial sector, capable national talent and resilient institutions. Our model is built to leave capability behind — transferring ownership to Omani teams rather than creating dependency on outside advisors.
Governance and risk foundations for non-oil growth and investment.
Assurance and controls aligned to FSA and CBO expectations.
Omanisation-aligned talent development and knowledge transfer.
Cyber, continuity and operational resilience for critical services.
Ministries, government-linked companies and Oman Investment Authority portfolio entities delivering national transformation.
Banks, insurers and licensed institutions under CBO and FSA supervision, strengthening risk, compliance and digital trust.
Critical-service organisations managing cyber, resilience, continuity and regulatory exposure across national infrastructure.
Listed companies and diversified groups strengthening governance, controls, assurance and long-term value.
Falconry LLC — a registered Omani entity in Muscat, accountable under Omani jurisdiction and present for the long term.
Propositions designed around FSA, CBO, PDPL and national resilience expectations — not a generic GRC pitch.
Advice that becomes live workflows, evidence and decision intelligence — and can be run for you as a managed service.
Knowledge transfer to Omani teams in step with Vision 2040 — we build ownership, not dependency.
PDPL readiness, FSA or CBO expectations, resilience for critical services, or a Vision 2040 transformation — we start focused, deliver locally, and build capability that lasts.
© 2026 Falconry Solutions. All Rights Reserved.
