Defensive security
Threat modelling, secure review and practical attack awareness.
Training Programme
Cyber Security & Data Protection
Defensive security and data-protection compliance, mapped to the DPDP Act, the IT Act and ISO 27001.
Overview
What this gives you
Compliance training that only lists the clauses is forgotten within a week. This programme is built around the decisions people actually make — what to do when a laptop is left in a taxi, how to tell a phishing attempt from a genuine invoice, and what must happen in the first hour after an incident.
The law is taught as it applies to the participant's own work: the DPDP Act 2023, Section 70A of the IT Act and its rules, and the controls implied by ISO/IEC 27001. Every session ends with a decision the participant would make differently the next time.
- Supplied, installed and supported by Quridge Global Solutions from Bengaluru
- Written quotation with GST-inclusive pricing, warranty and AMC options
- Documentation, operator training and a named point of contact for support
At a glance
What you get
Identity and access
Least privilege, MFA, privileged accounts and joiner-mover-leaver control.
Incident readiness
What happens in the first hour, and how it is rehearsed.
Mapped to the law
DPDP Act 2023, IT Act 2000 and ISO/IEC 27001 in the context of your role.
Specification
Technical details
| Module | Content |
|---|---|
| Threat modelling and risk assessment | Identifying what you are protecting, from whom and why |
| Network and application security fundamentals | Secure configuration, common weaknesses and reviews |
| Identity and access management | Least privilege, MFA, privileged accounts and lifecycle control |
| Incident response and disaster recovery | Preparation, first-hour response, recovery and lessons |
| DPDP Act 2023 and IT Act awareness | Consent, purpose limitation, retention, breach and data subject rights |
| ISO/IEC 27001 awareness | The controls, the evidence and how an audit actually works |
Where it is used
Typical applications
The situations this is most often specified for, based on what we are asked to quote most often.
- Mandatory staff awareness programmes
- Security and IT staff upskilling
- Pre-audit readiness for teams
- Customer-facing and data-handling roles
FAQ
Frequently asked questions
It is usable by both, and we run separate versions for technical and non-technical cohorts so nobody sits through material irrelevant to their role.
Yes. We issue a certificate of completion and a participation record for your compliance file, and can provide the module mapping your auditor asks for.
Annually for general staff, and whenever roles change materially. We can schedule the repeat cycle for you so it does not get forgotten.
Related
Other options in this range
Need a recommendation?
Tell us your volume, media, site count and compliance requirement. We will come back with a model, a costed quotation and AMC options within one business day — with no obligation.