Vinayak P

SOC 2 Type II for Indian ITeS and BPO: Implementing Trust Services Criteria

SOC 2 Type II has become a commercial prerequisite for Indian ITeS and BPO companies serving enterprise clients in North…

4 months ago

ISO 27001:2022 Annex A Access Controls: A Technical Guide for IT and Security Teams

ISO 27001:2022 reorganised the Annex A control set from 114 controls across 14 domains to 93 controls across four themes.…

4 months ago

IRDAI ICS Guidelines: Technical Requirements for Indian Insurance Companies

The Insurance Regulatory and Development Authority of India's Information and Cyber Security Guidelines, 2023 apply to all insurers, re-insurers, and…

4 months ago

SEBI CSCRF Explained: Technical Requirements for Capital Markets Entities

The Securities and Exchange Board of India's Cybersecurity and Cyber Resilience Framework applies to all SEBI-regulated entities: stock brokers, depository…

4 months ago

RBI IT Governance and Cybersecurity Framework: What Regulated Entities Must Implement

The Reserve Bank of India's 2023 Master Direction on Information Technology Governance, Risk, Controls and Assurance Practices applies to all…

4 months ago

Five IAM Controls Every Major Compliance Framework Requires

Your organisation is likely operating under more than one compliance framework. RBI if you are a bank or NBFC. SEBI…

4 months ago

What DPDPA Actually Requires From Your IT Team

The Digital Personal Data Protection Act, 2023 is not a policy compliance exercise. The obligations it creates land directly on…

4 months ago

PAM Coverage Gaps on Linux: Why SSH Sessions Are Your Highest-Risk Ungoverned Access

Your PAM platform covers privileged access. Ask your infrastructure team how much of it, and the answer will involve a…

4 months ago

Android MDM Background Location Tracking: Why Foreground-Only APIs Miss Most of the Shift

Your MDM platform reports device location. What it does not tell you is how much of the shift that location…

5 months ago

Audit-Ready Organisations Don’t Prepare for Audits. They’re Already Ready.

Here is a question worth asking your compliance team: how long would it take to produce the evidence package for…

5 months ago