Compliance Center
Practical implementation guides for ISO 27001, NIST CSF 2.0, CIS Controls v8, PCI-DSS v4.0, SOC 2, CERT-In, RBI Guidelines and HIPAA.
International ISMS standard — 93 controls across 4 themes. Widely recognised globally.
6-function framework (GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, RECOVER) for any organisation size.
18 prioritised controls in 3 implementation groups. Practical cyber hygiene baseline.
12 requirements for entities handling payment card data. Mandatory for merchants and service providers.
Trust Service Criteria audit covering Security, Availability, Confidentiality, Integrity and Privacy.
India mandatory incident reporting: 6-hour reporting window, 180-day log retention, NTP sync.
Reserve Bank of India Master Directions covering cyber risk, SOC requirements and incident reporting.
Administrative, physical and technical safeguards for electronic Protected Health Information (ePHI).
Framework Selection Guide
Payment processing? PCI-DSS is mandatory. Layer CIS Controls for technical implementation.
Selling to enterprises? SOC 2 Type II is expected. ISO 27001 for international deals.
Operating in India? CERT-In Directions are mandatory. Banks also add RBI requirements.
Healthcare data? HIPAA applies to covered entities and business associates.
Starting from zero? Begin with CIS Controls IG1 — fastest path to meaningful security improvement.