NIRMATA Cybersecurity Guides

Board-level oversight, security ownership, policies, and strategic direction for cybersecurity and data protection.

Risk management frameworks, regulatory compliance with DPDP Act, CERT-In, IT Act, and audit posture.

Secure SDLC, DevSecOps, vulnerability management, SAST/DAST, and secure coding standards.

Asset inventory, data classification, data lifecycle management, and retention policies.

Identity management, MFA, privileged access controls, and zero-trust principles.

Network security, endpoint protection, cloud security, and physical infrastructure controls.

Third-party risk management, vendor assessments, and software supply-chain controls.

Incident response plans, playbooks, CERT-In reporting obligations, and breach response drills.

BCP/DR plans, RTO/RPO objectives, backup testing, and crisis management.

DPDP Act 2023 alignment, personal data protection, data subject rights, and PII handling.

Security awareness programmes, training cadence, phishing simulations, and building a security-first culture.

SIEM, log management, SOC capabilities, threat detection, and incident alerting.