SGAA

Service offerings across Business and Technology Risk practices include the following: # Operational Risk Management – As 1st & 2nd Line of Defense implement ORM based on COSO, RBI/ Basel including Policy & procedures, Risk Registers & Internal Controls, KRI's, Data Analytics, Performance Improvement, Business Continuity # Internal Audits - As 3rd Line of Defense provide independent Assurance to Board and Audit Committee on effectiveness of Risk management procedures across organization's strategic, core & support operations # Forensics, Lender Assurance & Compliances – Code of Conduct Investigations, ASM/ Forensic audits, Due Diligence for M&A deals, Statutory/ Regulatory compliances (RBI, PMLA, ABC), Financial Planning & Analysis @ Technology Risk Management - ISO27001; SEBI/ IRDA/ RBI Cyber compliances (Banks & NBFC, Digital Payments & Lending, PCI DSS), BCBS 239; 3rd Party Assurance (SSAE18 SOC, SoX); Public sector (NCIIPC, UIDAI, GSP, CEA – Power); Data Privacy (DPDP, GDPR); IT Act; Licensing; Business Resilience @ Application & Infrastructure Security – IT General Controls, Application controls, Identity Access & Role based Segregation of duties, Grey and Black box testing (OWASP), Secure configurations & Source code review. Vulnerability Assessment (VAPT) for Network & Security devices, Data Integrity Review, Data Center & Cloud Security @ Digital Transformation Governance - Digital Roadmap & Security-by-design, PMO oversight & Pre/ Post Implementation support to implement ERP (SAP, Oracle, customized Apps) and AI systems