Blog

By Girija Togarati, ISO 27001 Lead Auditor. Reviewed by Murty Nisthala, CISA, CISSP.ISO 9001:2015 sets the requirements for a Quality Management System built on customer focus, the process approach and continual improvement.The management system clausesClauses 4 to 10...

By Girija Togarati, ISO 27001 Lead Auditor. Reviewed by Murty Nisthala, CISA, CISSP.The cost of ISO 9001 certification in India depends on your company size, number of sites and process maturity, and often starts around thirty thousand rupees for small businesses.What...

By Murty Nisthala, CISA, CISSP, CCSP. Reviewed by Girija Togarati, ISO 27001 Lead Auditor.PCI DSS compliance is validated in one of two ways: a Self Assessment Questionnaire or an audit by a Qualified Security Assessor.Self Assessment QuestionnaireAn SAQ is completed...

By Murty Nisthala, CISA, CISSP, CCSP. Reviewed by Girija Togarati, ISO 27001 Lead Auditor.Yes. PCI DSS compliance is mandatory for any organisation in India that stores, processes or transmits payment card data.The RBI mandateThe Reserve Bank of India specifically...

By Murty Nisthala, CISA, CISSP, CCSP. Reviewed by Girija Togarati, ISO 27001 Lead Auditor.PCI DSS v4.0 is built on 12 requirements that protect cardholder data. Here is what each group covers.The six goals and 12 requirementsThe requirements span building a secure...

By Murty Nisthala, CISA, CISSP, CCSP. Reviewed by Girija Togarati, ISO 27001 Lead Auditor.The cost of PCI DSS certification in India depends on your cardholder data environment, transaction volume and validation level. This guide explains the drivers.What PCI DSS cost...

By Murty Nisthala, CISA, CISSP, CCSP. Reviewed by Girija Togarati, ISO 27001 Lead Auditor.SOC 2 evaluates your controls against the AICPA Trust Services Criteria. There are five criteria, and you choose which apply to your service.The five criteriaSecurity is...

By Murty Nisthala, CISA, CISSP, CCSP. Reviewed by Girija Togarati, ISO 27001 Lead Auditor.SOC 2 and ISO 27001 both prove strong information security, but they differ. SOC 2 is an attestation report under AICPA criteria. ISO 27001 is a certifiable international...

By Murty Nisthala, CISA, CISSP, CCSP. Reviewed by Girija Togarati, ISO 27001 Lead Auditor.SOC 2 comes in two report types. A Type 1 assesses the design of your controls at a point in time. A Type 2 assesses how effectively those controls operate over a period, usually...

By Murty Nisthala, CISA, CISSP, CCSP. Reviewed by Girija Togarati, ISO 27001 Lead Auditor.The cost of SOC 2 in India depends on the report type, your security maturity, and business complexity, and can range widely. This guide explains the drivers.What SOC 2 cost...