Privacy / Sector rules
Meet your regulator's
cyber rules.
Regulated industries answer to a sector regulator as well as the law. We build to RBI, SEBI, CERT-In and IRDAI expectations.
What it requires
Who you
answer to.
RBI Cyber Security Framework
Controls and reporting for banks and regulated lenders.
SEBI CSCRF
The cyber security and resilience framework for market intermediaries.
CERT-In directions
Incident reporting timelines and log retention for Indian entities.
IRDAI
Information and cyber security requirements for insurers.
How we get you there
Built to your
regulator's bar.
Map the mandate
We read your regulator's current directions and map them to your estate.
Design the controls
Controls, reporting lines and timelines that match what the regulator asks.
Put them to work
We deploy the controls and the reporting, and rehearse the drills.
Report and renew
Ongoing reporting and evidence, kept ready for inspection.
Packages
One package,
your sector.
We combine the sector rules with ISO 27001 or SOC 2 so you meet the regulator and the market in one programme.
See packagesQuestions
Sector rules, in your words.
How fast must we report an incident to CERT-In?
Within the window CERT-In's directions set, which is tight. We give you a runbook and the reporting path so you meet it.
Does ISO 27001 cover the RBI framework?
It covers much of it, but not all. We map the gaps and build the sector specific controls on top.
Privacy. Security. Intelligence.
Built for trust.
Tell us what you need to prove. We reply within one working day.