Your auditor raised a finding you don't fully understand.
ISO 27001 Readiness & Assessment
I review controls and evidence, identify gaps and track remediation.
Get a free initial review of your existing privacy policy to highlight obvious gaps and possible next steps. See how I implement DPDP transparency
Independent Technology & Compliance Consultant
Data Protection Data Privacy (DPDP), Information Security (ISO) 27001 and SOC 2 readiness.
Controls, evidence and go-live readiness, independently reviewed.
Service standup, IT operations, BCP / DR and governance.
Storage tiering, lifecycle rules and unused infrastructure.
Learn more: · ·
Businesses I work with
Whether you need a quick, focused engagement or a more comprehensive programme, we will tailor the scope to your situation. Start with a free five-minute conversation to discuss the issue and identify a practical next step.
Ask Amit — 5-minute free consultationKey Advisory & Consulting Services
Your auditor raised a finding you don't fully understand.
I review controls and evidence, identify gaps and track remediation.
You think you're in DPDP scope and don't know what that means for your systems.
I assess technology and data-handling practices against GDPR or India DPDP requirements, as applicable.
A US enterprise customer sent you a security questionnaire and you're stuck.
I help internal IT teams assess gaps and work effectively with product companies, vendors and service partners.
A tender or audit requires an independent technical view.
I bridge management, technical teams and technology vendors, translating technical jargon into decisions and action.
Your vendor register is a spreadsheet and RBI wants more.
I bridge management, technical teams and technology vendors, translating technical jargon into decisions and action.
Your cloud bill keeps rising and you don't know where the waste is.
I review storage tiering, data lifecycle rules and unused VMs or infrastructure to find sensible cost reductions.
I provide independent technology and compliance readiness support, evidence review and remediation tracking. I am not a certification body, law firm or statutory authority. My work does not constitute legal advice, certification or regulatory sign-off. Final legal interpretation and compliance decisions remain with the organisation and its legal advisers.