SERVICES
Three disciplines. One team.
DPDP compliance, governance and risk, and cybersecurity advisory — scoped individually or combined into a single engagement, depending on where you're starting from.
DPDP & Data Privacy
End-to-end support for compliance with India's Digital Personal Data Protection Act, 2023 — from your first readiness assessment through to day-to-day rights management.
DPDP Readiness Assessment
A structured review of your current data practices against DPDP Act requirements, producing a clear picture of where you stand today.
Data Discovery & Mapping
Identifying what personal data you collect, where it's stored, how it flows through your systems, and who has access to it.
Gap Analysis
Comparing current practices against DPDP obligations to identify specific, prioritised gaps rather than generic recommendations.
Consent Management
Designing and implementing consent capture, tracking, and withdrawal mechanisms that meet DPDP's consent standards.
Privacy Policy & Notice Development
Drafting privacy notices and internal policies that are legally sound and written in plain, understandable language.
Data Principal Rights Management
Building the processes to handle access, correction, and erasure requests within required timelines.
Vendor / Data Processor Assessment
Reviewing your third-party vendors and processors for their own data handling practices and contractual obligations.
Data Breach Readiness
Breach response planning and notification procedures aligned to DPDP timelines and requirements.
Employee Training & Awareness
Practical training that helps staff recognise and follow data protection practices in their day-to-day work.
Governance, Risk & Compliance
Frameworks, policies, and audit-ready documentation that turn compliance from a one-time project into an ongoing operating discipline.
ISO 27001 / 27701 Implementation Support
Guidance through implementing information security and privacy management systems aligned to ISO standards.
Risk Assessments
Structured identification and evaluation of data and security risks across your organisation.
Internal Audit Support
Preparing documentation and evidence, and supporting your team through internal or external audits.
Policy & SOP Development
Clear, enforceable policies and standard operating procedures that your teams can actually follow.
Vendor & Third-Party Risk Assessment
Evaluating the compliance and security posture of vendors and partners who handle your data.
Regulatory Mapping
Mapping applicable regulatory requirements — including sector-specific ones such as RBI, IRDAI, or SEBI guidelines where relevant — against your current controls.
Compliance Monitoring & Audit Support
Ongoing tracking of compliance status, with support ahead of scheduled or surprise audits.
Cybersecurity Advisory
Practical security assessment and monitoring — identifying exposure before regulators or attackers do.
Vulnerability Assessment & Penetration Testing (VAPT)
Identifying exploitable weaknesses in your systems and applications before they're used against you.
Security Audits
Comprehensive review of your technical controls, configurations, and security practices.
SOC / NOC Monitoring
Ongoing security and network operations monitoring to detect and respond to threats in real time.
Security Architecture Review
Assessing how your systems are designed and connected to identify structural security weaknesses.
Incident Response Planning
Preparing your team with a clear, tested plan for detecting, containing, and recovering from security incidents.
Employee Security Awareness Training
Practical training that reduces your biggest security risk — human error — through phishing simulations and awareness sessions.