02The challenge
Separate teams were preparing for SEBI's new framework, ISO 27001 surveillance and DPDPA readiness, with conflicting policies and duplicated evidence.
03The approach
- 1Regulatory crosswalkCSCRF, ISO 27001 Annex A and DPDPA obligations mapped to one control set.
- 2Governance redesignA single cyber and privacy committee reporting to the board.
- 3Privacy programConsent, notices and data-principal rights operationalized.
- 4Audit calendarCyber audit and ISO surveillance aligned to one cycle.
04In their words
For the first time our board sees one cyber picture instead of three different audit reports.
05The results
- ✓Clean ISO 27001 surveillance and SEBI cyber audit
- ✓DPDPA readiness roadmap underway
- ✓Quarterly board dashboard across all obligations