DPDP Act, 2023Deadline approaching
India's privacy law: notice & consent, security safeguards, breach reporting (72-hour report to the Board), data-principal rights. Penalties up to ₹250 crore.
- Home
- Compliance
Which rules apply to you — and what to do next.
Plain-language summaries of the regulations and standards our clients are asked about most, with the fastest route to meeting each one.
CERT-In Directions 2022
Report cyber incidents within 6 hours, keep ICT logs for 180 days in India, sync clocks to NIC/NPL, name a point of contact.
ISO/IEC 27001:2022
The international standard for an information security management system — 93 Annex A controls in 4 themes, certified by an accredited body.
OWASP Top 10:2025
The reference list of web-application risks — broken access control, misconfiguration, supply-chain failures and more. The baseline for any VAPT.
RBI · SEBI CSCRF · IRDAI
Sector cyber-security directions: governance, VAPT, SOC monitoring, third-party risk and cyber resilience.
PCI DSS v4.0.1
Payment-card security: segmentation, vulnerability management, script integrity on payment pages, logging.
HIPAA Security Rule
Administrative, physical and technical safeguards for electronic patient data — and evidence your US clients will ask for.
SOC 2 · NIST CSF 2.0
Trust-services criteria and the NIST Cybersecurity Framework (Govern, Identify, Protect, Detect, Respond, Recover).
Facing more than one of these?
Most controls overlap. We map ISO 27001, DPDP and your sector's rules into one programme so you build evidence once.
// ready when you are
Find out how an attacker sees you — before they do.
Book a free 30-minute scoping call with our security team. No sales script, just an honest view of your risk and what to do first.