Sitemap
Company
Services
- All services
- ISO 27001 / 27701 / 42001: Gap Assessment, Implementation & Audit Readiness
- Information Security Audit — NRB & NIA Regulatory Compliance
- Vulnerability assessment and penetration testing (VAPT)
- Offensive Security & Red Team Engagements
- Information Security & Cybersecurity Consultation
- vCISO / vISO: Strategic Security Leadership
- Managed security tooling
- Uptime Status Monitoring
Legal
Insights
- All insights
- ISO 27001 Certification in Nepal: Process, Timeline Drivers and Choosing a Certification Body
- ISO 27701 and Nepal's Individual Privacy Act, 2075
- IT and Information Security Expectations for Insurers Regulated by NIA
- NRB IS Audit: What Nepal's Banks and Financial Institutions Should Prepare
- VAPT in Nepal: Scoping, What a Good Report Contains, and VAPT vs Red Team
- vCISO for Regulated Institutions in Nepal: When It Makes Sense
- From NIST CSF Profile to ISO 27001 Certificate: The Triggers That Should Move a Fintech
- The Branch Hotspot Problem: When Outage Workarounds Break NRB Network Controls
- 'Immediately' Means Immediately: Incident Reporting Under NRB's Cyber Resilience Guidelines
- The 2% Result: What a 19,500-Employee Study Says About Embedded Phishing Training
- Beyond SMS OTP: SIM Swaps, OTP-Stealing Apps and Stolen Sessions
- NIST CSF 2.0's Govern Function, Read as a Bank Board's Job Description
- DORA and PCI-DSS v4.0: The End of 'Checkbox' Security Awareness
- Surviving the NRB CRG 2023: How to Build a Compliant Cross-Disciplinary Steering Committee
- The 'Re. 1 Ping': Hunting Automated Mule Account Validation in Digital Wallets
- Mapping the RBI IT Master Direction to ISO 27001:2022: A CISO's Guide to Unified Compliance
- The Cryptography Trap: Auditing PFX Implementations in Open Banking APIs
- Building a Two-Hour Incident Response Engine: Navigating CBSL Circular No. 2 of 2025
- Why Click Rates Lie: Operationalizing the NIST Phish Scale in Enterprise Training
- The CISO's Guide to NRB's Unified Payment Systems Directive: Why ISO 27001 Is No Longer Optional
- From Out-of-Scope to High Severity: How One Rejected Bug Report Became a 50-Organization Study