CERT-In Security Audit
Empaneled security audits recognized by the Indian government — for tenders, directions compliance, and organizations that need a defensible report.
Overview
The Indian Computer Emergency Response Team (CERT-In) empanels a short list of auditors it has vetted. As an empaneled firm, our audits are accepted by government bodies and regulators, and we help you meet the obligations in CERT-In's directions — including the 2022 rules on six-hour incident reporting and log retention.
What it covers
The requirements we assess you against and help you meet.
CERT-In empaneled security audit and report
Application, network, and infrastructure VAPT
Six-hour incident-reporting readiness
180-day log-retention and synchronization checks
Remediation guidance and re-audit for closure
Support for government tender and directions compliance
How we take you there
Gap assessment
Know exactly where you stand against the standard, control by control.
Readiness
Policies, controls, and evidence built with your team — not dumped on them.
Certification support
We stand with you through the audit itself: findings handled, evidence packaged.
Continuous compliance
Stay compliant year-round with monitoring, internal audits, and surveillance prep.
Related
RBI Cybersecurity Framework
Framework compliance for banks, NBFCs, co-operative banks, and payment aggregators — baseline controls, SOC mandate, and annual system audits.
Learn moreUIDAI — AUA / KUA Audits
Security audits for the Aadhaar ecosystem — authentication and e-KYC user and service agencies, against UIDAI's policy and checklist.
Learn moreISO 27001
The world's leading information-security management standard — from scoping through Stage 1 and Stage 2 certification support.
Learn moreReady to get started
with CERT-In Security Audit?
Talk to a practitioner — not a sales rep. We usually reply within one business day.
Talk to Us