Foundation
🏛
⚖
✅
Framework We Cover
ISO 27001
Information Security Management
Global standard for ISMS implementation, audit, and certification readiness.
ISO 27701
Service Organisation Controls
Extension of ISO 27001 for PIMS — covering data controller and processor obligations.
SOC 2
Privacy Information Management
Type I & Type II audits across Security, Availability, Confidentiality trust criteria.
GDPR
EU General Data Protection Regulation
Data protection impact assessments, lawful processing, and DPO advisory.
DPDP Act
India’s Digital Personal Data Protection
Compliance roadmap and readiness assessment under India’s 2023 DPDP Act.
RBI / SEBI
Indian Financial Sector Guidelines
Cybersecurity framework compliance for banks, NBFCs, brokers, and AMCs
OUR grc SERVICES
ISO 27001 Implementation & Audit
End-to-end support for ISO/IEC 27001 ISMS — from gap analysis and policy development through control implementation, internal audit, and certification readiness. Independent audit services also available.
ISO 27701 Privacy Audit (PIMS)
Independent audit of your Privacy Information Management System — evaluating data controller and processor obligations, consent management, data subject rights, DPIAs, and breach procedures.
SOC 2 Readiness & Audit Support
Prepare for Type I and Type II SOC 2 audits with readiness assessments, control mapping, evidence collection support, and pre-audit gap remediation against AICPA Trust Services Criteria.
GDPR Compliance Advisory
Navigate Europe's data protection regulation with lawful basis assessments, ROPA development, DPIA frameworks, cross-border transfer mechanisms, and Data Protection Officer (DPO) advisory services.
DPDP Act Compliance (India)
Readiness assessment and compliance roadmap under India's Digital Personal Data Protection Act 2023 — consent framework design, data principal rights, significant data fiduciary obligations, and DPBO setup.
RBI & SEBI Cybersecurity Compliance
Compliance assurance for India's financial sector — covering RBI Cybersecurity Framework (CSF), RBI IT Risk Circular, SEBI Cybersecurity guidelines for exchanges, brokers, depositories, and AMCs.
Risk Assessment & Treatment
Structured information security risk assessments aligned with ISO 31000 and ISO 27005 — including threat modelling, likelihood-impact analysis, risk treatment plans, and residual risk acceptance frameworks.
Policy & Procedure Development
Design and development of audit-ready information security policies, procedures, and standards — covering access control, data classification, incident response, BCP, supplier management, and more.
Third-Party & Vendor Risk Management
Evaluate the security posture of vendors, suppliers, and partners. Design vendor risk tiering frameworks, due diligence questionnaires, contractual security requirements, and ongoing monitoring programs.
Business Continuity & DR Planning
Develop, test, and maintain ISO 22301-aligned Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP) — including BIA, RTO/RPO setting, scenario testing, and management review processes.
Security Awareness & Training
Role-based information security awareness programs, phishing simulations, and compliance training tailored to your workforce — from board-level executive briefings to technical staff deep-dives.
Incident Response Governance
Design and operationalise an incident response framework aligned with ISO 27035 — covering detection playbooks, escalation procedures, stakeholder communication, post-incident review, and regulatory notification.
For Whom
🏠
Organizations Pursuing Certification
Preparing for ISO 27001, ISO 27701, SOC 2, or PCI DSS certification for the first time or surveillance audit cycles.
🏛
BFSI & Regulated Industries
Banks, NBFCs, brokers, insurance firms, and healthcare organizations with RBI, SEBI, IRDAI, or clinical data compliance obligations.
💻
SaaS & Technology Companies
Product companies needing SOC 2 reports or ISO 27001 certificates to satisfy customer security questionnaires and enterprise sales.
🌐
Global Enterprises & MNCs
Multinationals with GDPR, DPDP Act, or cross-border data transfer obligations needing localised privacy compliance expertise.
📊
Leadership & Board Teams
C-suite and board members seeking independent assurance on security governance, risk posture, and compliance maturity.
👥
Enterprises Handling Personal Data
Organizations processing sensitive customer data who need structured privacy governance, consent management, and DPIA programs.
Why Cyedux
🖌
🧠
🔍
📄
🏛
🛡
Cyedux operates with strict audit independence principles. Any advisory or implementation services are delivered through separate engagement structures, ensuring objectivity, neutrality, and regulatory integrity in all audit and assurance activities.
This means: if we implement your ISMS, a separate Cyedux team — with no advisory involvement — conducts the audit. The auditor never reviews their own work.
Expert Certifications
start today