Cybersecurity
& Privacy

Protecting organisations in an era of accelerating cyber threats and tightening data privacy regulation. From cyber risk assessments and DPDP Act compliance to security architecture design, ISO 27001 advisory, and incident response planning — for enterprises, BFSI institutions, and government bodies.

5
Core Service Lines
DPDP
India Data Protection Act
ISO
27001 Advisory
ZT
Zero Trust Architecture

Cyber Resilience Across the Enterprise

Advisory-led cybersecurity — not technical implementation, but the strategic and governance layer that makes security investments effective and sustainable.

Cyber Risk Assessment & VAPT Advisory

Identifying and prioritising the cyber risks that matter most to your organisation — providing a risk-informed foundation for all security investment decisions.

Cyber risk assessment framework (NIST, ISO 27005)
Threat landscape analysis — sector-specific threat actors and vectors
Vulnerability assessment and penetration testing (VAPT) scoping and oversight
Risk register development and prioritisation
Cyber maturity benchmarking against peers
Board-level cyber risk reporting framework
DPDP Act & Privacy Compliance

Advisory on India's Digital Personal Data Protection Act 2023 (DPDP Act) — helping organisations understand obligations, assess gaps, and build a compliant data governance programme.

DPDP Act obligations assessment and applicability mapping
Personal data inventory and data flow mapping
Consent management framework design
Data principal rights management process design
Data localisation strategy and cross-border transfer advisory
Privacy policy and notice drafting support
ISO 27001 & Compliance Advisory

End-to-end advisory to achieve and maintain ISO 27001 certification — and to meet the cybersecurity compliance requirements of RBI, SEBI, IRDAI, and other Indian regulators.

ISO 27001:2022 gap assessment and implementation roadmap
Information Security Management System (ISMS) design
RBI IT Framework (Master Direction) compliance advisory
SEBI Cyber Security Framework advisory
SOC 2 Type II readiness advisory
Audit support and evidence preparation
Security Architecture & Zero Trust

Designing the security architecture that protects cloud, hybrid, and on-premise environments — grounded in Zero Trust principles and aligned to the organisation's risk appetite.

Zero Trust Architecture (ZTA) design and roadmap
Cloud security architecture advisory (AWS, Azure, Oracle Cloud)
Identity and Access Management (IAM) strategy
Network segmentation and micro-segmentation design
Endpoint security and device management strategy
Security operations model and SOC advisory
Incident Response & Business Continuity

Building organisational preparedness for cyber incidents — ensuring that when (not if) an incident occurs, the organisation can respond rapidly, contain damage, and recover effectively.

Incident Response Plan (IRP) development
Tabletop exercise design and facilitation
Business Continuity Plan (BCP) for cyber scenarios
Crisis communication plan for cyber incidents
Regulatory notification framework (CERT-In, IRDAI, RBI)
Post-incident review and lessons-learned process
Third-Party & Supply Chain Security

Managing the growing cyber risk from vendors, partners, and the supply chain — building a structured third-party risk management programme that scales.

Third-party cyber risk assessment framework
Vendor cybersecurity questionnaire and assessment process
Critical vendor identification and tiering
Contractual security requirements (DPAs, SLAs)
Continuous third-party monitoring strategy

Compliance Frameworks We Work With

India Regulatory Frameworks
DPDP Act 2023RBI IT Master DirectionSEBI Cyber Security FrameworkIRDAI Information SecurityCERT-In DirectionsIT Act 2000 & Rules
International Standards
ISO 27001:2022NIST Cybersecurity FrameworkSOC 2 Type IIGDPR (cross-border transfers)CIS Controls v8COBIT 2019
Industry Sector Focus
BFSI & BankingInsuranceHealthcare & PharmaGovernment & PSUsManufacturingIT & ITES
Risk-Based, Business-Aligned
We connect security to business risk — not technical compliance checklists. Every recommendation is framed in terms of business impact and proportional to your risk appetite.
India Regulatory Specialists
Deep expertise in DPDP Act, RBI IT Framework, SEBI Cyber Framework, and CERT-In — the specific regulatory landscape that Indian organisations must navigate.
Advisory Independence
We advise without selling security products or implementation services — ensuring our recommendations are driven by your needs, not our revenue interests.