Cyber Security, Privacy and Data Protection
GLOBAL KNOWLEDGEBASE
CLA Global Cyber teams across the globe share and learn from global experiences and keep updating our framework
GLOBAL LEADING PRACTICES
We derive our learnings from global leading practices by participating in various forums, research, and surveys, and update our framework to incorporate these learnings
GLOBAL STANDARDS
We have built our Cyber Security framework based on global leading standards such as ISO 27001, ISO 22301, OWASP, NIST, CIS, CIF, CSA, GAPP, OECD, etc.
INDUSTRY STANDARDS / REGULATIONS
We also seek inputs from regulatory guidelines related to Cyber Security & Resilience published by RBI, SEBI, TRAI, IRDAI, HIPPA, GDPR, PDPB (draft), etc. and keep updating our framework to align with industry requirements
Cyber Security Offerings
IN HOUSE / ON PREMISE / HYBRID IT INFRASTRUCTURE
CLOUD INFRASTRUCTURE (SAAS / PAAS / IAAS / HYBRID)
- Strategy and roadmap
- Organization Structure
- Risk and Compliance
- Metrics and Reporting
- Governance Framework
- Roles & Responsibilities
- Training and Awareness
- Cyber Maturity
- Application Security
- Infrastructure Security
- API Security
- Network Security
- DevSecOps
- ICS / OT Security
- Identity Gov.& Lifecycle
- Single Sign on
- Role Management
- Segregation of Duties
- Privileged / Cust. Identity
- Remote Access Mgmt.
- Privacy Compliance
- Data Discovery
- Data Classification
- Data Leakage Prevention
- Information Rights Mgmt.
- Privacy Operations.
- Business Continuity Mgmt.
- BCM Automation
- Disaster Recovery Plan
- Crisis Management
- Incident Response
- BCM Managed Services
- Risk Framework
- Risk Profiling
- Risk Assessments
- Contract Review
- SLA / Performance Review
- Managed Services
- SIEM
- Threat Management
- Security incident response
- Orchestration & Automation
- 24×7 Security Operations
- Incident and Event Monitoring
- Endpoint Detection Response
- Device Management
Key Clients Overview
Revenues over USD 20 billion
Indian multinational conglomerate comprising 118 subsidiaries, 6 associates, 25 joint-venture and 35 joint operations companies
The company is counted among the world’s top five construction companies
A Global Inhouse Center (GIC) of the brand’s AG
Serving global companies as IT and application development and maintenance COE
A Global Inhouse Center (GIC) of the brand’s Global serving global companies
India’s largest Private sector Bank
It is the third largest company by market capitalisation of $122.50 billion on the Indian stock exchanges
Revenues over USD 2 billion with presence in the U.S., Europe, Japan, South Africa, Australia, Philippines, Mexico & Latin America
Indian multinational pharmaceutical company, one of the largest generic pharmaceutical companies by revenue globally
Leading global technology company in to electrification, robotics, automation and motion portfolio
With a history of excellence stretching back more than 130 years, The brands success is driven by about 105,000 talented employees in over 100 countries.
Resource Augmentation For Indian COEs
Provide QSA Assessment services to Merchants (if required/on-demand basis)
Assist the merchants to select correct SAQ version for their business and help pre-populate the appropriate SAQ questions with accurate answers
Seek compliance status against VISA International Operating Guidelines /MasterCard Guidelines/ RBI Guidelines where required
Seek compliance reports for ensuring POS applications are PCI SSF compliant
Concurrent audit of the following areas:
- Review of PIM Solution-ARCOS
- Review of application level documentation
- Review of TACACS, Bomgar and VPN solutions
Assisting the client in their cyber security management practice in the following domains:
- Protection from Malware
- User Access Management
- Third Party Risk Assessment
- Cyber Security Incident Management
- IS aspects of Business Continuity Management
- Network Security and Management
Review of 400+main controls across the corporate & IC.
Ensuring compliance adherence by internal coordinating with respective stake holders
Conducting periodic internal audits as per the team regularly
Assisting the client in their design and implementation of the following but not limited to
- ESXI Installation
- Domain Control
- System Hardening
- Anti-virus, backup and restoration
- Network architecture
- Social Engineering
Resource Augmentation For Global COEs
Diagnostic as is Process study
SOP Creation & Implementation
Global Internal Audit – Talent Hub
Remote execution along with periodic on-site audit
Smart Data Analytics
1st level Quality Review by India Internal Audit Manager
On-site data storage using huddle
Internal Audit
Supervision of in-house Internal audit activities
Global Internal Audit – Talent Hub
Remote execution along with periodic on-site audit
SOX Compliance Review for multiple locations across the world
Controls Review including Business Continuity
Internal audit for multiple India Locations
1st level Quality Review by India Internal Audit Manager
On-site data storage using huddle
Internal audit for multiple India Locations
Smart Data Analytics
On-site data storage using huddle
Internal audit for multiple India Locations
Supervision of in-house Internal audit activities