IT security and compliance guidesPractical guides, written by the founder.
Short, neutral guides to the decisions we are asked about most. No statistics, no vendor rankings.
Read next.
- 6 October 2026 · 6 min
CERT-In's 6-hour incident reporting rule: what to do on day one
CERT-In's April 2022 directions explained: which incidents to report within six hours, who reports, how, 180-day logs, clock sync and a checklist.
Read the guide - 6 October 2026 · 5 min
ISO/IEC 27001:2022 certification, step by step
The path to ISO/IEC 27001:2022 certification: scope, gap assessment, risk assessment and SoA, controls, internal audit, Stage 1 and 2, surveillance.
Read the guide - 6 October 2026 · 5 min
Gmail, Yahoo and Outlook sender requirements, explained
Google, Yahoo and Microsoft sender requirements: SPF, DKIM, DMARC, alignment, one-click unsubscribe and spam rates, for invoices and newsletters.
Read the guide - 6 October 2026 · 5 min
Google Workspace to Microsoft 365: a migration checklist
A practical checklist for moving from Google Workspace to Microsoft 365: inventory, licences, MX cutover, mail, Drive, devices, users and rollback.
Read the guide - 6 October 2026 · 5 min
VAPT explained: scope, testing types and what a good report contains
What VAPT covers: black, grey and white box testing, scope and rules of engagement, authorisation, CVSS severity, good reports, retests and frequency.
Read the guide - 6 October 2026 · 5 min
A Microsoft 365 security baseline for small businesses
Microsoft 365 settings every small business tenant should check: MFA, Conditional Access, legacy sign-in, admin roles, Defender, sharing and DMARC.
Read the guide - 6 October 2026 · 8 min
DPDP Rules 2025 timeline: what to do before May 2027
DPDP Rules 2025 compliance deadlines explained: the November 2026 and May 2027 phases, 72-hour breach reports, penalties and a month-by-month plan.
Read the guide - 6 October 2026 · 8 min
Why are my emails going to spam? The fixes that work
Why emails go to spam or Outlook junk: SPF, DKIM, DMARC alignment, Gmail, Yahoo and Outlook sender rules, spam rates, spoofing and a step-by-step fix.
Read the guide - 6 October 2026 · 7 min
SPF too many DNS lookups (PermError): how to fix it
Fix the SPF PermError for too many DNS lookups: the RFC 7208 10-lookup and void limits, what counts, how to count, and why naive SPF flattening breaks.
Read the guide - 6 October 2026 · 7 min
ISO 27001 certification cost: what drives the price
ISO 27001 certification cost explained: audit days, Stage 1 and 2, surveillance, consulting, staff time, tooling, remediation and how small firms save.
Read the guide - 6 October 2026 · 7 min
Penetration testing cost: scope, drivers and comparing quotes
Penetration testing cost explained: web, API, network, cloud and mobile scope, box type, roles, tester skill, reports and how to compare VAPT quotes.
Read the guide - 6 October 2026 · 6 min
New Labour Codes: a payroll checklist for employers
New Labour Codes payroll impact: the 50% wage definition, PF/ESI base, gratuity for fixed-term staff, two-day full and final, overtime and HRMS changes.
Read the guide - 6 October 2026 · 7 min
RBI and SEBI cyber rules 2026: which apply to you?
Which RBI and SEBI cyber rules apply: RBI cybersecurity Directions of July 2026 by entity, NBFC layers, SEBI CSCRF, IRDAI 2026 and CERT-In reporting.
Read the guide - 6 October 2026 · 7 min
Microsoft 365 tenant-to-tenant migration checklist
Microsoft 365 tenant-to-tenant migration: the one-tenant domain rule, native cross-tenant mailbox and OneDrive moves vs tools, Teams, cutover and rollback.
Read the guide - 6 October 2026 · 6 min
Microsoft 365 to Google Workspace migration checklist
Microsoft 365 to Google Workspace migration checklist: inventory, Google's data import tool for Outlook mail, Drive files, Zoho Mail moves and cutover day.
Read the guide - 6 October 2026 · 7 min
Incident response plan for small businesses (with CERT-In and DPDP steps)
Incident response plan for small businesses: roles, severity, first-hour and ransomware steps, evidence, the CERT-In 6-hour report, DPDP breach notice, 1930.
Read the guide - 6 October 2026 · 6 min
DPDP Act vs GDPR: key differences for Indian companies
DPDP Act vs GDPR for Indian companies: when GDPR applies, consent vs lawful bases, children, rights, breach notification, transfers, DPOs and penalties.
Read the guide - 6 October 2026 · 6 min
Custom HRMS or off-the-shelf HR software? How SMEs decide
Custom HRMS vs off-the-shelf HR software for SMEs in India: a decision table on headcount, states, payroll, integrations, data, Labour Codes and cost.
Read the guide - 6 October 2026 · 6 min
How to answer a client security questionnaire (without overclaiming)
How to answer a vendor security questionnaire: SIG Lite, CAIQ and spreadsheets, an evidence library, honest partial answers and when ISO 27001 helps.
Read the guide - 6 October 2026 · 7 min
Backup and disaster recovery for small businesses
Backup and disaster recovery for small businesses: RPO vs RTO, the 3-2-1 rule with immutable copies, whether Microsoft 365 needs backup, restore tests.
Read the guide - 6 October 2026 · 6 min
Intune or Jamf? Managing Macs, iPhones and Windows in a small business
Intune vs Jamf for small businesses: what each manages, Apple Business automated enrolment, Windows Autopilot, managing Macs with Intune and mixed fleets.
Read the guide - 5 October 2026 · 2 min
ISO 27001 or SOC 2: which one do your clients need?
ISO/IEC 27001 certification or a SOC 2 report? What each is, who issues it, Type I vs Type II, and how to decide based on where your clients are.
Read the guide - 5 October 2026 · 2 min
DMARC from p=none to p=reject without breaking your email
A step-by-step path from DMARC monitoring to enforcement: find every sender, align SPF and DKIM, read reports, then move to quarantine and reject safely.
Read the guide - 5 October 2026 · 2 min
Microsoft 365 or Google Workspace for a growing business
A neutral, criteria-based way to choose between Microsoft 365 and Google Workspace: how your team works, apps, devices, security and migration.
Read the guide - 5 October 2026 · 2 min
DPDP Act: first steps for small and mid-sized businesses
Where a small or mid-sized business should start with India's DPDP Act, 2023 and Rules, 2025: data mapping, notices, safeguards, breaches and rights.
Read the guide
Check where you stand.
Let's build what's next.
Tell us about your infrastructure, security or automation goals. We reply with questions, then a written plan with scope and next steps.
- Response
- Usually within one business day
- Location
- Worldwide
What happens next
- 01
Reply
- 02
Discovery call
- 03
Proposal