Vinayak P

SOC 2 CC7.2: Anomaly Detection and the Authentication Layer That Auditors Examine

Introduction SOC 2 Trust Services Criteria CC7.2 requires that the entity monitors system components and the operation of those components…

2 months ago

DPDPA and Access Controls: Why Clause 8(4) Is Your IT Team’s Responsibility

Introduction DPDPA Clause 8(4) requires Data Fiduciaries to implement appropriate technical and organisational measures to ensure effective observance of the…

3 months ago

HIPAA Technical Safeguards for Indian ITeS Companies Handling US Healthcare Data

Introduction Indian ITeS companies processing US healthcare data on behalf of US covered entities are business associates under HIPAA. The…

3 months ago

The Provisioning and Deprovisioning Requirement Every Indian Compliance Framework Shares

Introduction Every major compliance framework that applies to Indian organisations contains a provisioning and deprovisioning requirement. The language differs. RBI…

3 months ago

DPDPA and the Offboarding Requirement: When an Employee Leaves, What Happens to Their Access?

Introduction DPDPA Clause 8(7)(a) requires Data Fiduciaries to erase personal data and cease processing as soon as it is reasonable…

3 months ago

DPDPA and Access Controls: Why Clause 8(4) Is Your IT Team’s Responsibility

Introduction DPDPA Clause 8(4) requires Data Fiduciaries to implement appropriate technical and organisational measures to ensure effective observance of the…

3 months ago

RBI Clause 15 Audit Trails: What Forensic-Grade Logging Requires for Indian Banks

Introduction RBI 2023 Master Direction Clause 15 requires that regulated entities maintain audit trails suitable for forensic investigation and dispute…

3 months ago

DPDPA Data Principal Rights: What the Technical Infrastructure Behind Each Right Requires

Introduction DPDPA Chapters II and III establish six rights for Data Principals. Each right creates a corresponding technical obligation for…

3 months ago

Building a Defensible Audit Evidence Package for Regulators | Akku

Introduction Every compliance audit, regardless of framework, arrives at the same point: the auditor requests evidence that specific controls operated…

3 months ago

DPDPA Data Principal Rights: What the Technical Infrastructure Behind Each Right Requires

Introduction DPDPA Chapters II and III establish six rights for Data Principals. Each right creates a corresponding technical obligation for…

3 months ago