Talk to us
Menu

Services · Audit

Compliance audit

A readiness review against the data protection or security standard you must meet, with gaps and fixes listed.

Before a certification audit, a customer questionnaire or a regulator’s question, you need to know where you stand. We review your systems, data flows, policies and evidence against the framework you name, such as India’s DPDP Act, GDPR, ISO 27001 or SOC 2. We do not certify anyone; we show your gaps clearly so you can close them before an accredited auditor or your lawyers take over.

What you get

  • A control-by-control gap assessment against the framework you choose
  • A data map showing where personal data is collected, stored and shared
  • A list of missing or outdated policies, with templates where suitable
  • Technical findings on access control, logging, encryption and backups
  • A remediation plan ranked by risk, with owners and evidence to collect
  • A readiness summary you can share with leadership or your auditor

How it works

  1. 01

    Frame

    We confirm which framework applies, which systems and teams are in scope, and any audit dates ahead.

  2. 02

    Review

    Policies, records and configurations are examined, and the people who run key processes are interviewed.

  3. 03

    Assess

    Each requirement is marked met, partly met or missing, with the evidence we saw and the gap remaining.

  4. 04

    Plan

    We agree a remediation plan with you and can help implement technical fixes and gather evidence.

Scope it now.

Answer a few questions and we prepare the email for you. Nothing is sent until you press send in your own email app.

Prefer to write freely? hello@clockborn.com

Which framework applies?
What is driving this?
How many employees?
Is there an audit date?

Questions

Will this get us certified?

No. ISO 27001 certification comes from an accredited certification body, and SOC 2 reports are issued by independent CPA firms. Our review prepares you for those audits by finding and helping close gaps beforehand.

Is this legal advice?

No. We assess technical and operational controls against the framework’s requirements. How the law applies to your situation, under the DPDP Act, GDPR or anything else, should be confirmed by your legal counsel, and we work alongside them.

Can you help fix the gaps?

Yes. Many gaps are technical, such as access reviews, logging, encryption, backups or data retention, and we can implement those. Policy and process changes we draft with your team so they match how you actually work.

Related services

Security consultingAn independent view of your security weaknesses and a prioritised, practical plan to fix them.Penetration testingAuthorised testing of your applications and networks, under a signed scope, to find weaknesses before attackers do.Security hardeningServers, cloud accounts, devices and apps locked down against a recognised benchmark, with every change recorded.Backup and disaster recoveryBackups you have actually restored, and a written plan for getting systems back after a failure or attack.

Software it applies to

Compliance automationControls, evidence and policies kept current automatically, so an audit becomes a review, not a scramble.Identity and access managementWho can sign in, to what and why: single sign-on, MFA and access rules managed from one place.Encryption and key managementEncryption done properly: keys generated, stored, rotated and retired under control, with every use logged.

Language · 42