Practical information security, ISO 27001 and ISO 9001 consulting, audit and training for organisations ready to grow with confidence.
Security and quality systems work best when they fit the realities of your business. We help you make them useful: clear enough to act on, rigorous enough to stand up to scrutiny, and built to last.
↘From first assessment to ongoing assurance, get senior-led support shaped around your risks, teams and goals.
From scoping and gap assessment to a working ISMS that is ready for certification audit.
Independent, evidence-based internal audits that satisfy the standard and genuinely improve the system.
Assess and assure vendors, or prepare for the customer audits you receive.
Senior security leadership on a part-time, retained basis.
Pragmatic advisory across security governance, risk management and regulatory expectations.
Build, audit and improve a quality management system that supports the business.
Practical, engaging training for leadership, auditors and teams.
Build team capabilityClear-eyed advice.
Practical by design.
Rigour matters. So does making the next step feel possible.
Most advisers have either audited systems or run them. Our principal has done both — on the auditor’s side of the table at large corporates, and on the CISO’s side while defending programmes to demanding clients.
Vendor-neutral advice with no certification body or product to sell.
Security that enables the business rather than slowing it down.
NDA-backed engagements and disciplined handling of your information.
25+ years across organisations of all sizes and sectors.
A focused engagement, shaped to your needs and delivered with clear ownership at every step.
We start with your objectives, current controls, operating model and the realities your teams face.
A gap assessment or risk review establishes where you are and what matters most.
A written proposal with scope, timeline, deliverables and fees agreed up front.
Hands-on implementation, audit or advisory work with regular progress reporting.
Follow-up, training and support so improvements stick through surveillance audits.
Jayant Luthra is an ISO/IEC 27001 certified information security auditor and ISO 9001 certified auditor with more than 25 years of experience building information security systems for organisations of all sizes.
He has conducted internal and third-party audits at large corporates across India as a consultant auditor engaged with DNV, and has served as CISO for a Chicago-headquartered legal services offshoring firm and a San Francisco-headquartered lead-generation marketing corporation.
Independent consulting firm; no claim of certification-body accreditation or DNV endorsement.
Read full profileEvery organisation is different. Start with a conversation about yours.
Ask us directlyNo. We are an independent consulting firm. Certification to ISO/IEC 27001 or ISO 9001 is issued only by accredited certification bodies. We help you prepare for, and succeed in, that audit.
We manage this carefully. Where we have helped design a system, we recommend that independent internal audits are performed by a different resource, and we will tell you plainly if an engagement would compromise objectivity.
It depends on scope, size and current maturity. Many organisations take several months from gap assessment to certification audit. We provide a realistic timeline after an initial scoping discussion.
Not if it is right-sized. Customers increasingly ask for evidence of security controls. We scope the ISMS to what your organisation actually needs and avoid unnecessary bureaucracy.
A defined monthly commitment covering strategy, governance, customer security assurance and team guidance. The scope and cadence are agreed up front and can scale as you grow.
Yes. Engagements can be delivered remotely or on-site. Please get in touch with your location and requirements.
Yes — a single internal audit, a gap assessment, a supplier audit or a training workshop can all be engaged individually.
Engagements are covered by a non-disclosure agreement, and we handle client information in line with the same information security practices we advise on.
Tell us what you are working towards. We’ll respond within two business days to arrange an initial conversation.
Pune, India
