Data Protection & Compliance Services

CERT-In's essential controls include: 6-hour incident reporting, 180-day log retention, NTP time synchronisation, mandatory security audit, designated CISO and security contact, vulnerability management programme, network traffic monitoring, and backup and recovery processes — among others.

For most Indian SMEs, achieving ISO 27001 certification takes 6–12 months from initial gap assessment to certification audit. This includes ISMS design, control implementation, internal audit, and management review before the external Stage 1 and Stage 2 certification audits.

DPDPA 2023 is India's data protection law modelled loosely after GDPR but with significant differences — no right to data portability in the initial framework, a consent-first approach, specific Indian Data Principal rights, and penalties enforced by the Data Protection Board of India (DPBI).

Yes. For organisations that need a DPO under DPDPA 2023 but don't have one in-house, we provide a virtual DPO service — handling compliance oversight, breach assessment, regulatory engagement, and data protection impact assessments on a fractional basis.