Insights by topic
Articles for small and growing businesses facing data protection and security questions: the DPDP Act, CERT-In reporting, cookie consent, VAPT and ISO 27001.
The serviceTrust, Security & ComplianceLess to worry about: data protection and security built into the systems you run every day.A customer or regulator wants a VAPT report, or you are about to launch logins and payments. What the test is, when you need one, and what to do with the report.
Questions it answers
A customer has asked whether you are ISO 27001 certified. What the standard asks of a small company, what the work looks like, and how to tell whether certification is worth it yet.
Sooner or later someone will ask to see, correct or delete the data you hold on them. A workable way to receive, verify and answer those requests, even with a small team.
The DPDP Act reaches almost every business that collects customer or staff details. The first steps to take, in the order that saves you redoing work later.
The DPDP Act never mentions cookies, yet its consent rules reach your analytics and ad trackers. What an Indian website should change, and how to test that consent really works.
If a cyber incident hits your business, CERT-In expects a report within six hours of noticing it. Who has to report, what counts, and what to set up before that day comes.
