VAPT
Find and fix weaknesses in apps, APIs, networks and cloud before attackers exploit them.
Learn more about VAPT → Service
Cyber Compliance & Risk Advisory
Gap assessments, policies and playbooks aligned with RBI, SEBI CSCRF, CERT-In, IRDAI, PCI DSS and DPDP.
The problem
Indian regulators keep raising the bar: SEBI CSCRF, RBI IT governance directions, CERT-In 6-hour reporting, IRDAI guidelines and now the DPDP Act. Keeping track of what applies to you, and proving it, takes real effort.
We translate these rules into a practical programme: what applies, where you fall short, what to fix, and the policies, playbooks and evidence to show your board and regulator.
What's included
- Gap assessment against applicable frameworks
- Policies and procedures suite
- SEBI CSCRF support (category-wise)
- RBI IT governance and cyber security controls
- CERT-In 6-hour incident reporting playbook and 180-day log retention
- IRDAI information and cyber security guidelines
- PCI DSS readiness
- ISO/IEC 27001 readiness
- DPDP readiness: data mapping, consent and breach notification
- Cyber Crisis Management Plan (CCMP)
- Tabletop exercises
- Board reporting
Deliverables
What you receive
- Applicability map of frameworks and requirements
- Gap assessment report with a prioritised roadmap
- Policy and procedure documents tailored to your organisation
- Incident reporting playbook and Cyber Crisis Management Plan
- Board-ready compliance status summary
Standards & method
How we work
- SEBI CSCRF
- RBI Master Direction on IT Governance, Risk, Controls & Assurance Practices
- CERT-In Directions (2022)
- ISO/IEC 27001:2022
- PCI DSS v4.x
- Digital Personal Data Protection Act, 2023
Timeline
How an engagement runs
Durations depend on scope and are fixed in your proposal.
Understand
Learn your business, regulator, category and current controls.
Assess
Compare your controls and evidence with each applicable requirement.
Plan
Agree a prioritised remediation roadmap with owners.
Build
Draft policies, playbooks and plans; run tabletop exercises.
Report
Give the board and management a clear view of compliance status.
Who needs it
Built for
- Banks, co-operative banks and NBFCs
- SEBI-regulated entities
- Insurers and intermediaries
- Payment companies and fintechs
- Hospitals and health-tech firms handling personal data
Regulator mapping
Helps you align with
RBI
Scheduled commercial banks and small finance banks
SEBI CSCRFMarket infrastructure institutions (MIIs)
CERT-InService providers and intermediaries
IRDAILife, general and health insurers
PCI DSSMerchants that accept card payments
DPDPAny organisation processing digital personal data in India
ISO 27001Any organisation that wants a recognised security management system
HIPAA · ABDMHospitals, clinics and diagnostic labs
Regulatory references (SEBI, RBI, CERT-In) indicate the frameworks we help clients align with, not endorsement by any regulator.
FAQ
Compliance & Risk Advisory — common questions
Which framework applies to us?
It depends on your regulator, your category and the data you handle. Try our Compliance Finder for a quick view, then talk to us for a confirmed applicability map.
Do you guarantee we will pass our regulator review?
No one can honestly guarantee that. We help you align your controls and evidence with the requirements and prepare you well for the review.
Can you help with DPDP Act readiness?
Yes. We help with data mapping, consent and notice flows, breach notification processes and grievance handling.
Related services
Security Audit
Independent review of your systems, controls and architecture against the rules you must follow.
Learn more about Security Audit →Lifetime Small Security Audit
A lightweight, recurring security health-check with a clear A–F scorecard. Contact us for details.
Learn more about Lifetime Small Security Audit → Book a consultation
Talk to us about Compliance & Risk Advisory
Share a few details and a founder-led team will come back with scope, approach and a proposal.
support@trustnetsecure.com · +91 93229 37312 · +91 88300 61438
Under attack right now? Go to emergency help →