Blog

By Murty Nisthala, CISA, CISSP, CCSP. Reviewed by Girija Togarati, ISO 27001 Lead Auditor.SOC 2 comes in two report types. A Type 1 assesses the design of your controls at a point in time. A Type 2 assesses how effectively those controls operate over a period, usually...

By Murty Nisthala, CISA, CISSP, CCSP. Reviewed by Girija Togarati, ISO 27001 Lead Auditor.The cost of SOC 2 in India depends on the report type, your security maturity, and business complexity, and can range widely. This guide explains the drivers.What SOC 2 cost...

By Bansi Rath, CMMI Lead Appraiser. Reviewed by Murty Nisthala, CISA, CISSP.For most Indian IT and engineering firms, CMMI certification is worth it. It enhances customer confidence, reduces delivery risk, and unlocks tenders that require a CMMI maturity level.The...

By Bansi Rath, CMMI Lead Appraiser. Reviewed by Murty Nisthala, CISA, CISSP.Getting CMMI certification in India means implementing the CMMI process areas and passing an official Benchmark Appraisal led by a certified Lead Appraiser. Here are the steps.The CMMI pathYou...

By Bansi Rath, CMMI Lead Appraiser. Reviewed by Murty Nisthala, CISA, CISSP.CMMI defines five maturity levels that show how disciplined and predictable your processes are. Most Indian organisations target Maturity Level 3, while larger firms pursue Level 5.The five...

By Bansi Rath, CMMI Lead Appraiser. Reviewed by Murty Nisthala, CISA, CISSP.The cost of CMMI certification in India depends on your team size, the maturity level you target, and how mature your processes already are. This guide explains what you pay for and how to...

By Girija Togarati, ISO/IEC 27001 Lead Auditor (CISA, CCSK). Reviewed by Murty Nisthala, Director, Audit and Assessment Services (CISA, CISSP, CCSP).This ISO 27001 requirements checklist covers what an accredited certification body expects to see in your Information...

By Girija Togarati, ISO/IEC 27001 Lead Auditor (CISA, CCSK). Reviewed by Murty Nisthala, Director, Audit and Assessment Services (CISA, CISSP, CCSP).ISO 27001 certification follows a defined process that ends in a two stage audit by an accredited certification body....

By Girija Togarati, ISO/IEC 27001 Lead Auditor (CISA, CCSK). Reviewed by Murty Nisthala, Director, Audit and Assessment Services (CISA, CISSP, CCSP).Annex A of ISO/IEC 27001:2022 lists 93 information security controls grouped into four themes. You select the controls...

By Girija Togarati, ISO/IEC 27001 Lead Auditor (CISA, CCSK). Reviewed by Murty Nisthala, Director, Audit and Assessment Services (CISA, CISSP, CCSP).ISO 27001 and SOC 2 both prove you protect data, but they are not the same. ISO 27001 is a certifiable international...