Compliance readiness
We scope your ISO 27001, SOC 2 or DPDP Act programme, find the gaps and plan the work to close them before your audit.
Who it is for
- A deal is waiting on an ISO 27001 certificate or a SOC 2 report.
- You process personal data in India and need to understand your duties under the DPDP Act.
- You are not sure which framework to start with.
What you get
- A scope statement: which systems, teams and locations are in
- A gap assessment against the framework, with each gap explained
- A remediation plan with owners, effort and dates
- Policy and procedure templates where you have none
How it runs
Scope
We agree the framework, the parts of the business in scope and your target audit date.
Assess
Interviews, document review and configuration checks against the framework.
Plan
Gaps ranked by risk and effort, with a realistic timeline to your audit.
Support
Optional help as you close the gaps, up to the audit. The certificate or report itself comes from an independent auditor.
- Typical length
- Two to four weeks for scoping and the gap assessment. Lengths are typical. We confirm them when we agree the scope.
- What we need from you
- Your existing policies, a list of systems and vendors, and time with the people who run them.
Frameworks it helps with
- ISO/IEC 27001
- SOC 2
- DPDP Act 2023
This is the core of readiness for all three. We map the work to one control set, so evidence gathered once can count towards more than one framework.