- Home
- Compliance consulting
Governance, risk & compliance
Compliance consulting — from gap assessment to audit, and beyond.
ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA and DPDPA programmes, plus audits for RBI, SEBI, IRDAI and CERT-In requirements — led by certified lead auditors.
Standard compliance
ISO 27001 ComplianceISO 27001:2022 implementation — from gap assessment and ISMS design to internal audit and certification, led by certified lead auditors.SOC 2 ComplianceSOC 2 readiness for Type I and Type II reports — scoping, control design, evidence and auditor coordination.PCI DSS CompliancePCI DSS v4.0.1 scoping, gap assessment, segmentation testing and remediation for merchants and service providers.GDPR ComplianceGDPR readiness for companies processing EU personal data — data mapping, DPIAs, transfers and data subject rights.HIPAA ComplianceHIPAA Security and Privacy Rule readiness for healthtech, RCM and healthcare BPO companies serving US clients.Adiroha For StartupsA lean security and compliance programme for startups — enterprise-deal ready, investor-ready, and sized to your stage.ISO 27701 CertificationISO/IEC 27701 privacy information management — extending your ISMS to cover personal data, GDPR and DPDP.ISO 27017 CertificationISO/IEC 27017 cloud security controls for cloud service providers and customers, built on your ISO 27001 ISMS.ISO 27018 CertificationISO/IEC 27018 controls for protecting personal data in public cloud services, built on your ISO 27001 ISMS.Cyber Crisis Management PlanCyber Crisis Management Plans aligned to CERT-In and sector regulator expectations, with playbooks and drills.SDLC Gap AnalysisSecure SDLC gap analysis against OWASP SAMM and NIST SSDF, with a practical roadmap to build security into development.NIST CSF 2.0NIST CSF 2.0 maturity assessment across Govern, Identify, Protect, Detect, Respond and Recover, with a target-state roadmap.Cloud Security AuditIndependent cloud security audit against CSA Cloud Controls Matrix, CIS Benchmarks and your compliance obligations.
Regulatory compliance
IS Audit (RBI)IS audits for banks, NBFCs and other RBI-regulated entities, aligned to the RBI Master Direction on IT governance and assurance.IRDAI Compliance AuditInformation and cyber security audits for insurers and intermediaries under the IRDAI Information and Cyber Security Guidelines.SEBI Compliance AuditCybersecurity audits and readiness for SEBI-regulated entities under the Cybersecurity and Cyber Resilience Framework (CSCRF).CERT-In Security AuditAssessment against CERT-In Cyber Security Directions — incident reporting, log retention, time sync and security audit requirements.SAR Compliance AuditReadiness and support for RBI's System Audit Report on payment data localisation for payment system operators.DPDP Act 2023DPDP Act 2023 readiness — data mapping, consent, notices, data principal rights, breach response and Significant Data Fiduciary obligations.CICRACompliance and information security assessment under the Credit Information Companies (Regulation) Act, 2005.
How we work
Discover. Assess. Remediate. Validate.
01
Discover
Understand your business, scope, stakeholders and the obligations that actually apply to you.
02
Assess
Gap assessment against the framework or regulation, turned into a prioritised, costed roadmap.
03
Remediate
Implement policies, controls and evidence with your teams, tracked in Cydital.
04
Validate
Internal audit before the external one, audit-day support, and continuous compliance after.
Why Adiroha
Qualified to find it, fix it and prove it
Our consultants bring hands-on offensive security and audit experience across the frameworks your customers and regulators care about.
- 13+ years of cybersecurity experience
- CERT-In aligned testing methodologies
- CISA, CISM and CRISC certified consultants
- OSCP, OSCP+ and OSWE certified testers
- CEH certified testing team
- CCISO and CIPM certified consultants
- ISO 27001 and ISO 22301 lead auditors
- PCI DSS specialists
- AWS Security–certified cloud reviewers
Team credentials & expertise
CISACISMCRISCOSCPOSWEOSCP+CCISOCIPMCEHAWS Security – SpecialtyAWS Solutions Architect – ProfessionalISO 27001 Lead AuditorISO 22301 Lead AuditorPCI DSSSOC 2DPDPA
Not sure which service you need?
Tell us what's driving the requirement. We'll recommend the smallest scope that gets the job done.