For professional enquiries, please email or connect on LinkedIn.
This is not a sales conversation. It is a strategic engagement that begins at board level.
If your organisation is facing regulatory examination, active threat, or governance failure — this is the line.
Effective Date: 1 March 2026
Kieran Upadrasta ("we", "us") operates rlkestates.eu. This policy explains how we collect, use, and protect personal data.
Data Collected: When you submit the contact form, we collect your name, email address, organisation, and message content. We do not collect data through cookies or tracking technologies beyond essential site functionality.
Purpose: Personal data is used solely to respond to your enquiry and, where applicable, to discuss potential engagements. We do not sell, share, or transfer your data to third parties.
Legal Basis: Processing is based on your consent (form submission) and our legitimate interest in responding to business enquiries, in accordance with the General Data Protection Regulation (GDPR).
Data Retention: Contact form submissions are retained for a maximum of 24 months, after which they are securely deleted.
Your Rights: Under GDPR, you have the right to access, rectify, erase, or restrict processing of your personal data. Contact info@rlkestates.eu to exercise these rights.
Security: We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, or destruction.
Contact: For privacy-related enquiries, email info@rlkestates.eu.
Effective Date: 1 March 2026
By accessing rlkestates.eu, you agree to these terms. This website is provided for informational and professional engagement purposes only.
Intellectual Property: All content, frameworks, trademarks (including Board-Survivable Cyber Architecture™, The Evidence Chain Model™, Decision Rights Architecture™, Recoverability Mandate™, Contract Control Matrix™, and AI Accountability Stack™), and materials on this site are the intellectual property of Kieran Upadrasta. Reproduction without written permission is prohibited.
Professional Disclaimer: Content on this website does not constitute legal, regulatory, or financial advice. Engagement terms are governed by separate contractual agreements.
Limitation of Liability: Information is provided on an "as is" basis. We make no warranties regarding accuracy, completeness, or suitability for any particular purpose.
Governing Law: These terms are governed by the laws of Belgium.
Contact: For enquiries, email info@rlkestates.eu.
Effective Date: 1 March 2026 · revised 25 April 2026
rlkestates.eu uses minimal cookies to ensure essential site functionality. No advertising cookies, tracking pixels, or third-party analytics are deployed.
Categories of cookies used:
Strictly necessary. Required for basic operation (session, CSRF security, consent state). These cannot be disabled.
Preferences (where applicable). Store language or display preferences locally.
Third-party cookies: none. This site does not load Google Analytics, Facebook Pixel, advertising networks, or any third-party tracking. System fonts are used; no data is transferred to Google Fonts, Adobe, or equivalent.
Retention: session cookies expire when the browser closes. Preference cookies (where set) expire after 12 months.
Your choices: you can block or delete cookies via your browser settings. Disabling essential cookies may impair functionality. To learn more about cookies generally, see aboutcookies.org.
Contact: info@rlkestates.eu
Effective Date: 8 March 2026 · revised 25 April 2026
Commitment. Kieran Upadrasta is committed to ensuring digital accessibility for all users, in line with EU Web Accessibility Directive (2016/2102/EU) as transposed in Belgium, and the European Accessibility Act (Directive 2019/882/EU), and the Web Content Accessibility Guidelines (WCAG) 2.2 Level AA published by the W3C.
Conformance status. rlkestates.eu is designed to be partially conformant with WCAG 2.2 Level AA. "Partially conformant" means that some content does not yet fully meet the standard.
Measures applied. Semantic HTML structure, keyboard-navigable interface, skip-to-content link, ARIA landmarks, sufficient colour contrast ratios (≥ 4.5:1 for body text), focus-visible indicators, accessible form controls with error messaging, alternative text for meaningful images, scalable text up to 200% without loss of content, and respect for user preferences (prefers-reduced-motion, prefers-color-scheme).
Known limitations. Some interactive elements (carousels, modals, sticky CTAs, decorative SVGs) may not yet fully meet WCAG 2.2 Level AA under all assistive-technology combinations. Long doctrine PDFs are tagged but may contain complex tables that screen readers traverse non-linearly. We actively test and remediate.
Testing approach. Automated evaluation via axe-core and Lighthouse. Manual evaluation via keyboard-only navigation, screen readers (NVDA, JAWS, VoiceOver), and 200% browser zoom. The site is reviewed against WCAG 2.2 quarterly.
Alternative formats. If you encounter an accessibility barrier, contact info@rlkestates.eu for the information in an accessible alternative format (accessible PDF, plain text, telephone discussion).
Feedback & enforcement. Accessibility feedback is welcomed and triaged within 5 business days. If you are not satisfied with our response, you may refer the matter to the relevant equality body in Belgium.
Contact: info@rlkestates.eu
Effective Date: 1 March 2026 · revised 25 April 2026
Commitment. Kieran Upadrasta ("the practice") supports the United Nations Guiding Principles on Business and Human Rights, the International Labour Organization (ILO) Declaration on Fundamental Principles and Rights at Work, and the OECD Guidelines for Multinational Enterprises. The practice acknowledges the Belgian Penal Code provisions on human trafficking (Articles 433quinquies through 433decies) and the EU Anti-Trafficking Directive (2011/36/EU).
Modern slavery. The practice commits to ensuring that no slavery, servitude, forced or compulsory labour, or human trafficking takes place within its engagements, supply chain, or counterparty arrangements. This includes child labour, debt bondage, deceptive recruitment, and any restriction on freedom of movement.
Due diligence. Given the individual professional nature of this practice, the supply chain is limited (cloud hosting, software tooling, editorial vendors). Each supplier is risk-assessed at engagement and at annual renewal. Suppliers materially failing the assessment must remediate or be replaced.
Diversity & non-discrimination. Engagements are accepted without regard to gender, race, ethnicity, sexual orientation, disability, religion, or age. Counterparty conduct that is materially incompatible with these principles is grounds for engagement termination.
Training & awareness. The practitioner maintains current awareness of human-rights and anti-trafficking standards via continuing professional development under ISACA, (ISC)², and IRM.
Reporting concerns. Concerns relating to modern slavery, human trafficking, or any human-rights matter may be reported confidentially to info@rlkestates.eu. The practice will investigate, escalate where required, and cooperate with relevant authorities.
Review. This statement is reviewed annually and republished at the same URL.
Effective Date: 1 March 2026
Kieran Upadrasta maintains a professional standard aligned with the codes of conduct of ISACA, (ISC)², IRM, and CIPP/E. Engagements are governed by:
Integrity. Advice is never shaped by financial, political, or personal interest. Conflicts of interest are disclosed in writing before engagement and at any point a conflict arises during delivery.
Confidentiality. All client data is handled at regulator-grade standard. No disclosure, identification, or cross-engagement reuse without written authorisation. Sensitive matters are subject to NDA and segregated storage.
Competence. Advice is provided only in areas where the practice has demonstrable expertise. Out-of-scope topics are escalated or declined — never bluffed.
Diligence. Contractual, regulatory, and confidentiality obligations are honoured in full. Engagements are delivered to procurement-grade artefact standard, on time, with documented evidence chains.
Independence. No referral fees, kickbacks, or undisclosed commissions are accepted from any third-party vendor or platform.
This page collects everything you need to navigate rlkestates.eu, contact the practice, or report a problem.
rlkestates.eu is optimised for the latest two major versions of Chrome, Edge, Firefox, and Safari. JavaScript and CSS must be enabled. The site adapts down to 320 px viewport width. No proprietary plug-ins or extensions are required.
To search content on the site, use your preferred search engine with a site: operator — for example: site:rlkestates.eu DORA, site:rlkestates.eu "evidence chain", or site:rlkestates.eu ISO 42001. Search engines are not case-sensitive; common words like "and", "or", "the" are typically ignored. Quotation marks force an exact phrase match. No tracking or analytics cookies are set.
The site is fully responsive and works on mobile phones, tablets, laptops, and desktops. All modals, forms, and downloadable artefacts (PDFs) function on touch devices.
Press Ctrl + P (Windows / Linux) or Cmd + P (macOS) to print or save any page as PDF. A print-friendly stylesheet is applied automatically.
The site is designed to conform with WCAG 2.2 Level AA. Semantic HTML, keyboard navigation, ARIA landmarks, and high-contrast colour ratios are applied throughout. See the Accessibility statement for known limitations and remediation plans.
The XML sitemap is available at rlkestates.eu/sitemap.xml for search-engine indexing. A doctrine-specific sitemap is at rlkestates.eu/docs/sitemap.xml.
Business enquiries, media requests, or site feedback: info@rlkestates.eu. Concerns relating to privacy, accessibility, or professional conduct can also be raised at this address. Response within one business day for engagement enquiries.
LinkedIn: linkedin.com/in/kieranupadrasta
Effective Date: 1 March 2026 · revised 25 April 2026
Information accuracy. The content published on rlkestates.eu is provided for general information only and reflects Kieran Upadrasta's analysis at the date of publication. The regulatory landscape evolves continually; some information may become outdated and no commitment is made to keep it perpetually current.
No professional advice. Nothing on this site constitutes individualised legal, tax, financial, regulatory, or insurance advice. Strategic decisions should be the subject of a separate written engagement.
Reliance. Visitors are responsible for assessing the relevance and accuracy of the content for their own circumstances. Kieran Upadrasta accepts no responsibility for actions taken or not taken in reliance on this site without engagement under contract.
Limitation of liability. To the fullest extent permitted by law, Kieran Upadrasta excludes all liability (in contract, tort, negligence, or otherwise) for any direct, indirect, incidental, consequential, or punitive loss arising from use of, or inability to use, this site, or reliance placed on its content.
Third-party links. rlkestates.eu may contain links to external websites. Kieran Upadrasta does not control, endorse, or accept liability for third-party content.
Intellectual property. All content, doctrine, trademarks (including Board-Survivable Cyber Architecture™, The Evidence Chain Model™, Decision Rights Architecture™, Recoverability Mandate™, Contract Control Matrix™, and AI Accountability Stack™), and methodologies are the intellectual property of Kieran Upadrasta. Reproduction, distribution, or adaptation without prior written permission is prohibited.
Governing law. Refer to the Terms of Use modal for the governing law and exclusive jurisdiction applicable to your use of this site.
Updates. This disclaimer may be amended without notice; check back periodically.
Contact: info@rlkestates.eu
Effective Date: 1 March 2026
The following information is published in accordance with the EU Services Directive 2006/123/EC, as transposed into Belgian law, applicable in Belgium.
Service provider: Kieran Upadrasta, an individual professional practice.
Contact address: info@rlkestates.eu · written correspondence may also be sent to the practice address provided on engagement.
Areas of practice: institutional cyber governance; operational resilience architecture; regulatory delivery (DORA, NIS2, EU AI Act, GDPR, ISO 27001, ISO 42001); board-level advisory and interim CISO mandates.
Professional affiliations: ISACA (Platinum Member), (ISC)² (Gold Member), Institute of Risk Management (IRM), PRMIA (Cyber Security Programme Lead), Information Security Forum (ISF Lead Auditor).
Certifications: CISSP, CISM, CRISC, CCSP.
Academic appointments: Honorary Professor (Cybersecurity, AI & Quantum Computing), Honorary Senior Lecturer at Imperials, UCL Researcher.
Professional indemnity insurance: in force; policy details disclosed under engagement contract on request.
VAT / tax registration: registration details provided in engagement-level documentation as required by Belgium tax authorities.
Complaints procedure: complaints should be addressed in writing to info@rlkestates.eu. Initial acknowledgement within 5 business days; substantive response within 30 days. Complaints are tracked in writing and reviewed under the Code of Conduct.
Out-of-court dispute resolution: if internal complaints handling is exhausted, mediation or arbitration may be invoked under the rules of the competent body in Belgium. Consumer-related complaints may also be referred to the relevant national consumer-protection authority.
Code of Conduct: the practice is bound by the codes of conduct of ISACA and (ISC)² (see Code of Conduct modal).
This site uses essential cookies to ensure proper functionality.