I still remember that Monday morning. An email landed in my inbox from a major banking client’s infosec team: “We’re initiating a vendor cybersecurity compliance review. Please submit your latest audit report.” I froze. We had decent firewall setups and some cloud security hygiene—but no…
It started like any other Monday. I was sipping my third cup of coffee when one of our junior devs ran in, pale-faced: “Sir, our client dashboard has been hacked—admin controls were exposed.” I thought he was joking. He wasn’t. That single breach compromised sensitive…
In March 2023, I was sitting in a pitch meeting with a PSU client in Delhi. Everything was going smoothly until they asked a simple question: “Do you have a valid CERT-In Safe to Host audit report?” My face went blank. We had everything else—strong…
It happened on a Sunday. Our tech team was off. I got an SMS from AWS: “Unusual login detected from Kazakhstan.” I thought it was a false positive. An hour later, our dev staging server was wiped clean. We later found out a port was…
I’ll never forget the gut punch of that morning. It was August last year when our servers suddenly went silent. Emails bounced, our CRM crashed, and one of our biggest clients messaged: “Your site’s down. Is everything okay?” It wasn’t. We had suffered a ransomware…
In today’s hyper-digital business environment, cybersecurity is not optional—it’s mandatory. If your organization handles data, offers digital services, or runs critical information infrastructure in India, you must comply with CERT-IN directives. But here’s the truth: most businesses are either unaware, confused, or not fully compliant—and…