A customer asks for SOC 2 or ISO 27001
A deal depends on it, and nobody has started.
Bridging the technology gap
We help Ahmedabad companies prepare for ISO 27001, SOC 2 and the DPDP Act: a gap review, policies and procedures, the technical controls and the evidence an auditor asks for.
MOUNTSMY provides compliance readiness consulting in Ahmedabad, India, for the DPDP Act, SOC 2 and ISO 27001: gap assessments, policies and procedures, technical controls such as access, logging, backups and encryption, and evidence collection. We prepare you for the audit. The audit report or certificate itself is issued by an independent auditor or certification body, and legal advice on the law comes from your lawyer.
The paperwork is only half of it. The technical controls need real work.
A deal depends on it, and nobody has started.
Documents written for the auditor, not for how the team works.
Multi-factor sign-in, logging and tested backups are not in place yet.
Screenshots and records collected in a rush before the audit.
Map personal data, review notice and consent practices, plan for data-subject requests and a breach response.
Choose scope and criteria with you, set up controls and policies, collect evidence and support the audit.
Scope and risk assessment, statement of applicability, policies and an internal review before the audit.
Single sign-on and multi-factor sign-in, logging and monitoring, encrypted and tested backups, secure development and patching.
Evidence collected as you go, monthly control reviews, staff training and a calendar of recurring tasks.
What to ask and how to compare auditors, then we step back and let them do their independent work.
We set up access, logging, backups and encryption ourselves, so controls are real, not just written down.
We prepare you for the audit. The report or certificate comes from an independent auditor, and legal advice comes from your lawyer.
Our office is in Memnagar, Ahmedabad. Book a visit and meet the people who will do the work, instead of a sales team.
You get a plan and a quote in writing before any work starts, and an NDA if you need one.
Where you stand against the standard, with a written plan.
Policies written for how you work, and technical controls put in place.
Records collected over time, with monthly control reviews.
Help during the audit by the independent auditor or certification body.
Office No. 530, 5th Floor, Yash Arian, Bhuyangdev Society, Memnagar, Ahmedabad, Gujarat 380052
Also +91 96244 21866 · info@mountsmy.com
Book a visit before coming so the right people are in the office.
Something else on your mind? Ask us directly.
Ask a questionIndia's Digital Personal Data Protection Act, 2023, which sets rules for how organisations handle personal data. Your lawyer can advise on how it applies to you.
A report by an independent auditor on a company's controls for security and related areas. Customers often ask for it before they buy.
An international standard for an information security management system. Certification is issued by an accredited certification body.
No. An independent auditor or certification body does. We prepare you for the audit.
No. It is practical guidance. For legal interpretation of the DPDP Act, speak to your lawyer.
Yes. We are an engineering team, so we set up access, logging, backups and encryption as part of the work.
It depends on the standard, the scope and your starting point. After a gap review you get a written plan and quote.
Yes. Our office is in Memnagar, Ahmedabad. Book a visit first so the right people are there.
Book a free 30-minute call. We’ll send a written plan and quote after.