Our work

ISO 27001 implementation & certification

Australian FinTech startup

ISO 27001

certified, launch kept on schedule

From startup to certified FinTech

Problem

A founder with limited in-house security resources needed ISO/IEC 27001 certification to support regulatory approval, while coordinating an outsourced software partner against an aggressive launch timeline.

What we did

Led the implementation end to end: defined the ISMS scope, strengthened controls with the outsourced development partner, built the ISMS documentation (policies, risk register, Statement of Applicability), guided the founder through implementation, and coordinated the Stage 1 and Stage 2 certification audits.

Result

• ISO/IEC 27001 certification achieved
• Supported the regulatory approval process
• Launch stayed on schedule
• Clearer security responsibilities with the outsourced technology partner

SOC 2 readiness & implementation

Australian digital marketing company

SOC 2

implemented ahead of customer deadlines

Turning a customer requirement into a business enabler

Problem

Enterprise customers, including major banks, required SOC 2 assurance. Existing security practices were not documented or backed by formal policies, procedures and controls, and customer deadlines were tight.

What we did

Documented existing practices, assessed gaps against the SOC 2 Trust Services Criteria, built the policies, procedures and control ownership, then worked with the CTO/CISO and teams to put the controls into daily operations and validate readiness.

Result

• Implementation completed ahead of the required timeline
• Helped retain strategic banking customers
• Better positioned to win larger enterprise customers
• Documented policies and defined control ownership

Identity & access management

Large omnichannel retailer

50%

faster vendor onboarding

Fixing access for hundreds of small vendors

Problem

Hundreds of small craft vendors with minimal IT maturity used the retailer’s portal. Vendor identities were created by hand, logins were shared, MFA adoption was below 25%, and over 40% of service desk tickets were access-related.

What we did

Set up an authoritative source for vendors and a vendor access portal, with roles and access provisioned and reviewed centrally, plus MFA and self-service.

Result

• 50% reduction in vendor onboarding time
• Significant reduction in support tickets
• A successful Christmas retail season

Identity & access management

Indian GCC of an Australian bank

Audit finding

resolved

Closing an internal audit finding on access

Problem

An internal audit found significant weaknesses in access management for the GCC’s staff across the bank’s payment applications.

What we did

Reviewed policies and processes across teams, inventoried every application, built a role-based access control matrix, standardised access request and review procedures, set up a central access team, and added monitoring and reporting for leadership.

Result

• Internal audit finding resolved
• More efficient access management for the GCC
• Consistent access request and review across teams and applications
• Real-time view of process failures and periodic access review results

Outsourced accounting & compliance

₹500+ Cr multi-state B2B paper distributor

+2%

overall profitability

Pricing by data, not intuition

Problem

No product or customer margins, so pricing ran on gut feel. Branch workflows were manual, month-end close took weeks, and GST and TDS deadlines were tracked by hand.

What we did

Standardised the month-end close with maker-checker controls and SOPs, built product-level profitability and working-capital dashboards, and set up a central compliance calendar.

Result

• Profitable and loss-making segments now visible
• Faster monthly close with structured MIS
• Zero missed statutory deadlines

Outsourced accounting & MIS

₹20+ Cr furniture designer and manufacturer

+5%

overall profitability

From daily firefighting to a new product line

Problem

Manual processes, departments working in silos, weak inventory controls, and no monthly MIS or project-level profitability.

What we did

Standardised workflows and the month-end close, built the first project- and product-level MIS with inventory and working-capital dashboards, and aligned controls to how the business actually runs.

Result

• First comprehensive monthly MIS
• Tighter expense and inventory control
• Promoter freed up to launch a new product

Procure-to-pay transformation

Power utility

100+ days

faster asset capitalisation

Cutting a 169-day capitalisation cycle

Problem

Budget and scheme approvals ran on spreadsheets, averaging 169 days to capitalisation and up to 285. The scheme portal and SAP didn’t talk, and vendors submitted invoices on paper.

What we did

Designed an integrated target state across the scheme portal, SAP and SRM, automated approval matrices and escalations, added budget-to-procurement controls in SAP, and proposed a vendor portal.

Result

• Quick wins deliverable within 2 months
• System-driven, audit-ready controls
• Real-time view of pending approvals