CN Insight

SITA: security assurance for passenger processing at 44 airports

Governance, ISO 27001 / 27018 audits, cloud and ICT assessments and awareness drills for the CUPPS, CUSS and BRS systems run for the Airport Authority of India.

Project scope of work

• Security Governance and Framework Review
• ISO 27001 Internal Audit and Risk Assessment
• ISO 27018 Internal Audit and Risk Assessment
• ICT Infrastructure Assessment
• Cloud Security Assessment
• Mock Drill Activities
• Social Engineering / Phishing Campaigns
• User Awareness and Training
• Configuration Reviews

SITA: securing the DigiYatra system at 20 airports

ISO 27001 / 27018 audits, cloud and infrastructure assessments, phishing campaigns and mock drills for the DigiYatra system of the Airport Authority of India.

Project scope of work

• Security Governance and Framework Review
• ISO 27001 Internal Audit and Risk Assessment
• ISO 27018 Internal Audit and Risk Assessment
• ICT Infrastructure Assessment
• Cloud Security Assessment
• Mock Drill Activities
• Social Engineering / Phishing Campaigns
• User Awareness and Training
• Configuration Reviews

BSES Rajdhani Power: security audits from IT to SCADA

Architecture and governance reviews, ISO 27001, ITGC and SAP audits, ICS / SCADA and application security audits, BCP / DR and awareness programmes.

Project scope of work

• Security Architecture and Solutions Review
• Security Governance and Framework Review
• ISO 27001 Internal Audit and Risk Assessment
• ITGC Internal Audit and SAP Audit
• ICT Infrastructure Assessment
• ICS / SCADA Security Audit
• Business Web and Mobile Applications Security Audit
• Business Continuity and Disaster Recovery
• User Awareness Training Programs
• Mock Drills and Tabletop Activities
• Phishing Simulation Campaigns

BSES Yamuna Power: security audits from IT to SCADA

Architecture and governance reviews, ISO 27001, ITGC and SAP audits, ICS / SCADA and application security audits, BCP / DR and awareness programmes.

Project scope of work

• Security Architecture and Solutions Review
• Security Governance and Framework Review
• ISO 27001 Internal Audit and Risk Assessment
• ITGC Internal Audit and SAP Audit
• ICT Infrastructure Assessment
• ICS / SCADA Security Audit
• Business Web and Mobile Applications Security Audit
• Business Continuity and Disaster Recovery
• User Awareness Training Programs
• Mock Drills and Tabletop Activities
• Phishing Simulation Campaigns

Globe Capital Market: SEBI cyber resilience and system audits

SEBI CSCRF and PCM system audits, ISO 27001 and ISO 22301 internal audits, application and API security, hardening reviews and awareness drills.

Project scope of work

• SEBI Cyber Security Resilience Framework Audit
• SEBI PCM System Audit
• ISO 27001 Internal Audit and Risk Assessment
• ISO 22301 Internal Audit and Risk Assessment
• ICT Infrastructure Security Audit
• Business Web and Mobile Applications Security Audit
• API and Web Services Security
• Configuration and Hardening Reviews
• User Awareness Training Programs
• Mock Drills and Tabletop Activities
• Phishing Simulation Campaigns

MMAD Communications: RBI PA-PG and data localisation audits

Audits under RBI’s PA-PG regulation and SAR data localisation, ISO 27001, business impact analysis, cloud, application, API and source code reviews.

Project scope of work

• Audit as per RBI – PA-PG Regulation
• Audit as per RBI – SAR Data Localisation
• ISO 27001 Internal Audit and Risk Assessment
• Business Impact Analysis (BIA)
• ICT Infrastructure Assessment
• Cloud Security Assessment
• Business Web and Mobile Applications Security Audit
• API and Web Services Security Audit
• Source Code Reviews
• User Awareness Training Programs
• Mock Drills and Tabletop Activities
• Phishing Simulation Campaigns

GAIL (India) Ltd: cyber security sessions, 2022

Classroom and lab sessions for GAIL teams, with live demonstrations at the lectern and hands-on work at the workstations.

GAIL (India) Ltd: cyber security sessions, 2020

Instructor-led cyber security sessions for GAIL officers in the organisation’s training lab.

DRDO: cyber security sessions for defence research teams

Sessions for the Defence Research & Development Organisation, recognised with a memento from its Scientific Analysis Group.