Government and PSU cybersecurity

Applicable regulations

• CERT-In directions and empanelled security auditing
• Government security guidelines and tender requirements
• DPDP Act 2023 for citizen data
• ISO 27001 where mandated

Common cybersecurity risks

• Public-facing portals as high-value targets
• Citizen-data exposure across integrations
• Legacy systems and slow patch cycles
• Tender-mandated evidence not readily available

Audit findings we typically see

• Critical VAPT findings on public portals
• Weak access and log monitoring
• No safe-to-host or empanelled-audit evidence
• Incident-reporting process undocumented

Services required

• CERT-In empanelled VAPT
• Web application security testing
• Network vulnerability assessment
• Security architecture review

Our engagement approach

• Scope. Confirm portals, systems and the tender and CERT-In requirements.
• Test. Empanelled VAPT across web, network and infrastructure.
• Remediate. Prioritised closure with retest evidence.
• Report. Tender-ready and CERT-In-aligned reporting.

Expected evidence

• Empanelled-audit test results
• Retest closure evidence
• Safe-to-host certificate where applicable
• Tender-ready report pack

Deliverables

• CERT-In-aligned VAPT reports
• Closure and retest evidence
• Safe-to-host certificate
• Tender-ready documentation