GRC Consulting
Governance
- Gap Analysis.
- Business Impact Analysis.
- Information Security Policy & procedure review & update.
- ISMS implementation.
- Data classification.
- Security Baselining.
- SLA’s, CIA assessments.
- Awareness Training.
Risk
- Risk management framework.
- Process & Asset-based Risk assessment.
- Risk Control selection & finalization.
- Risk Mitigation & Treatment Planning.
Compliance
- Internal Audits.
- Standards based implementation:( ISO/IEC 27001, ISO/IEC 22301, SOC 2 Type 1 / Type 2, Fedramp, FISMA, FDA 510(k), NIST, RBI, NCIIPC, PCI-DSS ).
- DPDP, PHI, & PII compliance, GDPR, HIPAA.