GRC · ISO 27001 · SOC 2 · DPDP · CERT-In
Compliance Is Not a Destination. It’s a Discipline.
Compliance is no longer optional; it is competitive advantage. We don’t hand you templates and disappear. We walk with you from gap assessment to certification audit.
DPDP Act 2023 full compliance deadline · 13 May 2027
–
Days
–
Hours
–
Minutes
–
Seconds
DPDP Act 2023: Maximum Penalties
Per violation, in ₹ Crore
Failure to implement reasonable security safeguards to prevent data breaches
₹250 Cr
Failure to notify the Board or affected individuals about a data breach
₹200 Cr
Breach of obligations regarding children's data or data of persons with disabilities
₹200 Cr
Breach of additional obligations by a designated Significant Data Fiduciary
₹150 Cr
Any other general violation of the Act or its rules
₹50 Cr
Compliance services
From Gap Assessment to Certification
Information Security Management
ISO 27001:2022
- Gap Assessment against Annex A controls
- Risk Assessment & Treatment Plan (ISO 27005)
- ISMS Policy Framework Development
- Internal Audit & Management Review
- Certification Body Liaison
Typical timeline
8 to 16 weeks for MSMEs
The Triad Compliance Roadmap
Scroll sideways ›
01
Discover
Gap assessment & regulatory scope definition
02
Design
Policy framework & control architecture
03
Implement
Control deployment & documentation
04
Validate
Internal audit & evidence collection
05
Certify
External audit support & certification
06
Sustain
Continuous monitoring & annual maintenance
Compliance services do not guarantee certification; certification bodies issue certificates. Support is based on the provisions applicable to your organisation. Check your DPDP readiness.