Remote services · Guyana

Cybersecurity training, AI and software services in Guyana

Syxel Technologies offers businesses in Guyana security awareness training, phishing simulations, vulnerability scanning, cybersecurity gap analysis, AI consulting and custom software development. Our team works remotely from Spanish Town, Jamaica, and can travel to Georgetown or elsewhere in Guyana by arrangement. Guyana's clock runs one hour ahead of Jamaica's, so scheduling calls is straightforward.

See our services

A team gathered around a table in a workshop

Guyana's growing economy and the businesses behind it

Guyana's economy has changed at remarkable speed since oil production began at the ExxonMobil-operated Stabroek Block in December 2019. Crude oil is now the country's leading export, while gold, bauxite, rice and sugar remain important. Around the offshore projects, a broad network of Guyanese suppliers has formed: shore-base and logistics services, construction, catering, accommodation, security, engineering, IT and professional services.

The Local Content Act, 2021 requires oil and gas operators and their contractors to source a range of goods and services from Guyanese companies, and the Local Content Secretariat keeps a register of qualifying firms. Many of these suppliers grew quickly and now handle contracts, staff records and payments for international clients. That makes them attractive targets for invoice fraud, business email compromise and ransomware, and it means they can expect questions from those clients about how they protect data and systems.

Regulators and national cybersecurity bodies

The Bank of Guyana supervises licensed financial institutions and, under the Insurance Act 2016, the insurance industry. In January 2024 it issued Supervision Guideline No. 15 on Technology Risk Management for licensed financial institutions. The Cybercrime Act, 2018 creates offences such as illegal access to computer systems, unlawful interception and data interference.

Guyana's national incident response team is CIRT.GY, the Guyana National Computer Incident Response Team, which operates under the National Data Management Authority (NDMA). For private businesses, the takeaway is that the legal and regulatory framework is filling in quickly, and the organizations that build sound security habits now will have less catching up to do when new rules take effect.

Services for Guyana businesses

Security awareness training and phishing simulations in Guyana

Fast growth brings new staff, new suppliers and new payment flows, and attackers follow the money. A Georgetown supplier that has just won work with an offshore operator may suddenly receive invoices, purchase orders and bank-change requests from dozens of unfamiliar senders. Our security awareness training in Guyana teaches employees to pause and verify before acting. We hold live online sessions each quarter, each built around one practical topic such as invoice fraud, password managers, or safe use of WhatsApp and personal phones for work.

Phishing simulations put that training to the test. With management approval, we send realistic practice emails, perhaps a fake shipping update, a payroll query or a request from a supposedly new contractor, and track who clicks, who enters details and who reports the message. Staff who fall for one get immediate, friendly guidance. Leaders receive a quarterly scorecard they can share with directors or with clients who ask about staff training.

See our security awareness training service, or try the free Spot the Phish challenge.

Quarterly live sessions by video, with recordings for rotational and remote staff
Practice emails themed on invoices, shipping, payroll and contractor requests
Quarterly scorecard showing clicks, entered details and reported messages
Friendly on-the-spot guidance for anyone who falls for a test
Sessions pitched for new hires, supervisors and directors alike

More about security awareness training →

Vulnerability scanning for organizations in Guyana

Young companies in Guyana often set up IT in a hurry: a website, a cloud email account, remote desktop access for the accountant, a few cameras reachable from the internet. Vulnerability scanning checks that rapid growth has not left doors open. Our external scans test what anyone on the internet can see, including your public IP addresses, web applications, mail servers and VPN gateways.

Internal scanning covers the laptops, servers, printers and switches behind your firewall. We either courier a compact scanning appliance to your office or provide a lightweight agent for one of your machines; your staff connect it, and we handle the rest remotely. Nothing is scanned until you sign a written authorization that defines the scope, the testing dates and the contacts on both sides.

Findings arrive in a ranked report with fix instructions and a short summary for management. Once your team or IT provider has applied the fixes, we rescan to confirm them. For deeper, hands-on testing, see penetration testing or our wider cybersecurity services.

External scanning of public IPs, web apps, mail servers and VPN gateways
Internal scanning through a couriered appliance or a lightweight agent
Signed authorization with scope, dates and contacts before any scan
Ranked findings, fix instructions and a management summary
Verification rescan once fixes are in place

More about vulnerability scanning →

Cybersecurity gap analysis and security policies for Guyana companies

Many Guyanese businesses have grown from a handful of people to a sizable operation in a few years, and their security documentation has not kept pace. A cybersecurity gap analysis measures where you stand against NIST CSF, ISO 27001 or CIS Controls and gives you an ordered list of improvements. For licensed financial institutions, we can review the Bank of Guyana's Technology Risk Management guideline alongside the framework you choose.

We gather evidence remotely. Expect a series of video interviews with management, IT and key department heads, and a secure upload of documents such as policies, network diagrams, user lists and backup logs. The deliverable is a scored report with a practical roadmap sized to your budget and team.

Policy writing follows naturally. We draft acceptable use, password, incident response and data protection policies in plain language your staff will actually read, written with Guyana's Data Protection Act, 2023 in mind and ready for review by your legal adviser. Download our free incident response plan template or book a gap analysis.

Gap analysis against NIST CSF, ISO 27001 or CIS Controls
Optional review against the Bank of Guyana technology risk guideline
Video interviews and secure document upload, no travel required
Scored findings with a roadmap matched to your resources
Plain-language policies drafted for your legal adviser to review

More about gap analysis and policies →

AI consulting, training and AI policy for Guyana businesses

When a business grows quickly, AI can help a small team keep up with reports, correspondence and paperwork. Our AI consulting in Guyana helps you use it safely and in the places where it genuinely pays off, rather than chasing every new tool.

An AI readiness assessment looks at your processes, data and risks and recommends a short list of use cases. We train staff in live online workshops on writing good prompts, checking outputs and keeping confidential information out of public tools. We also write an AI usage policy and governance framework that names approved tools, sets data rules and states who signs off on AI-assisted work.

When you are ready to build, we implement and support practical tools: help drafting bid documents and local content reports, extracting data from invoices and delivery notes, or a chatbot that answers routine staff or customer questions. Start with the free AI usage policy template or our AI readiness quiz.

Readiness assessment covering processes, data and risk
Prompting and safe-use workshops for staff, delivered online
AI usage policy naming approved tools and data rules
Document drafting, data extraction and chatbot implementation
Testing and ongoing support after launch

Custom software development for companies in Guyana

Syxel Core designs and builds custom software for companies in Guyana: web applications, mobile apps and automation that replace manual work. A growing business often finds that its spreadsheets can no longer track staff, equipment, contracts or customers reliably. We design for the way your team actually works, whether that is in a Georgetown office, at a shore base or out in the field.

Examples of what we build include crew and equipment scheduling for service contractors, supplier and document portals, inventory and procurement systems, mobile apps for field teams in areas with weak signal that store data and sync once connected, and dashboards that pull figures from several systems into one view. We also connect your existing tools through APIs, so information is entered once instead of three times.

Projects run remotely with video workshops, a written scope you approve, regular demos and a test period before launch, and support is available afterwards. Describe your idea in our free software project brief template or read about Syxel Core software development.

Web applications, supplier portals and internal systems
Android and iOS apps that keep working without a signal
Scheduling, inventory and procurement tools
API integrations and dashboards that combine your data
Approved written scope, regular demos and post-launch support

More about software development →

Guyana's Data Protection Act, 2023

Guyana passed the Data Protection Act, 2023 (Act No. 18 of 2023), which received presidential assent in August 2023. The Act gives individuals rights over their personal data, including access, correction and erasure, requires organizations to keep the data they process secure, and includes provisions on notifying the Data Protection Commissioner and affected people about personal data breaches.

The Act comes into force on a date the responsible minister sets by order, and different parts can start on different days. A Data Protection Commissioner was appointed in early 2026, but according to the latest public reporting we found, the commencement order bringing the Act into force had not been issued and the Data Protection Office was still being set up. Check the current position before relying on it.

Preparing now, by mapping the personal data you hold, tightening access and training staff, means less disruption once the law is activated. Confirm your specific obligations with legal counsel in Guyana. We provide technical and organizational security support, not legal advice.

Working with Guyana remotely from Jamaica

Guyana keeps Guyana Time (UTC-4) throughout the year, with no daylight saving changes. Because Jamaica stays on UTC-5, Georgetown is one hour ahead of Spanish Town in every season: our 9am start is 10am in Guyana, and our 5pm finish is 6pm there.

Everything on this page can be delivered online. Workshops and interviews take place by video call, files move through an encrypted shared workspace, and internal scans run through an agent or a small device sent to your site. If your project benefits from time on the ground in Georgetown, Linden or New Amsterdam, we can plan a visit by agreement. Syxel's only office is in Spanish Town, Jamaica.

Questions from Guyana businesses

Can a Jamaican company provide these services to us in Guyana?

Yes. Syxel delivers all five services remotely from Spanish Town, Jamaica, using video sessions, secure file sharing and remote scanning tools. We can visit Guyana in person by arrangement. We don't have an office or staff based in Guyana.

Is the Data Protection Act, 2023 in force yet?

The Act has been passed and a Data Protection Commissioner has been appointed, but according to public reporting the commencement order needed to bring it into force had not been issued at the time of writing. Because that can change, check the Official Gazette or ask your attorney for the current position. We can help you prepare in the meantime.

Who handles national cyber incidents in Guyana?

The national team is CIRT.GY, the Guyana National Computer Incident Response Team, which operates under the National Data Management Authority. Cyber offences are covered by the Cybercrime Act, 2018. We help organizations write incident response plans that set out who to contact, both inside and outside the business.

Do you work with oil and gas suppliers registered under the Local Content Act?

We can. Training, scanning, policy writing and software development all suit companies supplying the oil and gas sector, whatever their size. We don't advise on local content registration or compliance itself; our focus is security, AI and software.

What's the time difference between Guyana and Jamaica?

Guyana is one hour ahead of Jamaica all year, since neither country uses daylight saving time. A session we start at 2pm Jamaica time begins at 3pm in Georgetown. We schedule training and meetings around your working hours.

How do phishing simulations work for staff in Guyana?

Before anything is sent, we agree with your management which staff are included, which scenarios are used and over what period. Practice emails arrive like ordinary messages, and anyone who clicks is shown a brief explanation of what they missed. Results go only to your nominated contacts and guide the topics for the next training session.

Talk to us about your Guyana organization

Tell us what you need help with. We'll reply by email within one business day with next steps.

Try our free tools