Category: Compliances & Certifications

DPDPA Data Principal Rights: What the Technical Infrastructure Behind Each Right Requires

Introduction DPDPA Chapters II and III establish six rights for Data Principals. Each right creates a corresponding technical obligation for…

3 hours ago

Building a Defensible Audit Evidence Package for Regulators | Akku

Introduction Every compliance audit, regardless of framework, arrives at the same point: the auditor requests evidence that specific controls operated…

2 months ago

DPDPA Data Principal Rights: What the Technical Infrastructure Behind Each Right Requires

Introduction DPDPA Chapters II and III establish six rights for Data Principals. Each right creates a corresponding technical obligation for…

2 months ago

GDPR Article 25: Data Protection by Design and IAM | Akku

Introduction GDPR Article 25 requires that data protection be built into system architecture by design and that data minimisation be…

3 months ago

ISO 27001 A.8.15: User Activity Logs and Authentication Logs Are Not the Same Control

Introduction ISO 27001:2022 Annex A.8.15 requires that logs recording user activities, exceptions, faults, and security events be produced, kept, and…

3 months ago

How to Build an Audit Evidence Package That Survives Regulatory Scrutiny

Introduction Every compliance audit, regardless of framework, arrives at the same point: the auditor requests evidence that specific controls operated…

3 months ago

SOC 2 CC6: Logical Access Controls and What IAM Must Deliver

Introduction SOC 2 CC6 is the Logical and Physical Access Controls criterion cluster and is where the majority of IAM-relevant…

3 months ago

Access Controls for Indian Banks. What Need-Based Access Requires Technically.

Introduction RBI 2023 Master Direction Clause 19 is the most technically detailed access control provision in the framework. It establishes…

3 months ago

SEBI CSCRF Access Controls: What PR.AA and DE.CM Require From Your Identity Stack

Introduction SEBI CSCRF's Protect function contains the Access Authentication sub-category PR.AA, which runs from PR.AA.S1 through PR.AA.S17 and represents the…

3 months ago

DPDPA Consent Management: What Explicit, Informed, and Withdrawable Looks Like Technically

Introduction DPDPA Clause 6 sets specific conditions for consent as a lawful basis for processing personal data. Consent must be…

3 months ago