Clariva GRC Consulting brings 35+ years of IT delivery and 20+ years of ISO 27001 and NIST CSF 2.0 work to ISMS certification, DPDP readiness, AI governance and GRC training.
Project-based and hourly engagements. No retainers. Every deliverable is audit-traceable and ready for your certification body.
Gap assessment to Stage 1 and 2 readiness: SOA, risk register, control documentation and ISMS manuals.
Stage 1 and 2 prepGap analysis across all six CSF 2.0 functions, with a prioritised remediation roadmap for multi-site organisations.
Multi-siteDPDP readiness review, data principal mapping, notice and consent design, and breach response preparation.
DPDP readinessAI use policy, risk classification, model and tool inventory, and oversight aligned to ISO/IEC 42001 and emerging global standards.
AI policyInternal audit execution, pre-certification checklists, corrective action tracking and interim ISMS ownership.
Interim CISOPractical programmes for ISMS implementers and auditors, run on the OpenGRC platform.
Professional trainingEnquire about trainingEach engagement starts from the framework your customers, regulators or auditors ask for, and builds the evidence trail from the first week.
Information security management system: scope, risk assessment, Statement of Applicability, control implementation and Stage 1 and 2 audit readiness.
Discuss ISO 27001Cybersecurity outcomes across Govern, Identify, Protect, Detect, Respond and Recover. Gap assessment with a prioritised remediation roadmap.
Discuss NIST CSF 2.0Data principal rights, consent and notice, data mapping, retention schedules and breach response for organisations processing personal data in India.
Discuss DPDP readinessAI policy, use case risk classification, model and vendor inventory, human oversight and review cycles aligned to ISO/IEC 42001.
Discuss AI governanceLawful basis, records of processing, data subject requests and transfer safeguards for organisations handling personal data of people in the EU.
Discuss GDPRIT general controls supporting financial reporting: user access, change management, operations and the evidence internal and external auditors test.
Discuss SOXCybersecurity management system for vehicles under UNECE R155 and ISO/SAE 21434: lifecycle processes, threat analysis and risk assessment, and the evidence needed for type approval.
Discuss CSMSSecurity for industrial automation and control systems: zones and conduits, target security levels, and the requirements for OT environments in plants and utilities.
Discuss IEC 62443Governance, risk, compliance and training on one platform. Controls, risks, evidence and the Statement of Applicability sit in one controlled record, with training built around the same frameworks.
Preloaded Annex A controls, evidence linked to each control, and a full audit trail on every change.
Request beta accessData privacy controls for Indian organisations, following the ISO 27001 and NIST beta.
Register interestPractical training for working professionals and for students starting out. Both tracks use the same frameworks the consulting work is built on.
Hands-on programmes for ISMS implementers and auditors, run on the OpenGRC platform.
Enquire about trainingFree GRC awareness sessions for undergraduate and early-career students: how audits work, what a control is, and where GRC careers start.
See the freshers pageChoose the reason that fits best, whether that is beta access, a certification or assessment, training, or something else. We reply within one business day.