compliance & privancy - Skill Arbitrage Blog

How Indian Service Providers Answer SIG And CAIQ Questionnaires

Indian vendors answer SIG and CAIQ questionnaires for the service under review. A CAIQ Yes means fully in place, so a partial control is a No with a date.

Riyali Ganguly September 23, 2026

Data protection compliance & privancy

CCPA And CPRA For Indian Service Providers With California Clients

CCPA and CPRA reach Indian service providers through the client's written contract, not the revenue thresholds. Ten terms in 11 CCR 7051 decide your status.

Riyali Ganguly September 21, 2026

compliance & privancy

NIS2 Directive: What Indian Vendors Of EU Companies Must Do

The NIS2 Directive binds your EU client, not you. The duties arrive as contract clauses under Article 21(2)(d), unless you are a managed service provider.

Riyali Ganguly September 10, 2026

DPDP Act vs GDPR: Side-by-Side for Compliance Professionals

Data protection compliance & privancy

DPDP Act Vs GDPR: For Compliance Professionals

DPDP Act vs GDPR: six lawful bases against consent plus nine legitimate uses, eight rights against four, and no Indian breach threshold. Duties start May 2027

Riyali Ganguly September 8, 2026

Data protection compliance & privancy

DPDP Act Penalties For Non-Compliance

DPDP Act penalties for non-compliance reach 250 crore rupees under the Schedule, but section 33 and the Schedule do not commence until May 2027

Riyali Ganguly September 7, 2026

compliance & privancy careers Remote & Global Careers

Cybersecurity Certifications Compared For Beginners

ISC2 CC costs $199 with no experience needed, Security+ runs $425 to $439, and CEH near $1,050. Compare exam fees, prerequisites and renewal costs.

Ramanuj Mukherjee September 4, 2026

Anatomy of a DPDP notice and consent request: section 5(1) items, rule 3 conditions, the section 6(1) consent standard and withdrawal under sections 6(4) to (6)

compliance & privancy Data protection

DPDP Act Consent And Notice Rules

The DPDP Act consent and notice rules were notified on 13 November 2025 and do not bind an Indian business until May 2027, with one exception in November 2026

Riyali Ganguly September 2, 2026

The third party risk management ladder showing four US rungs with average salary and 25th to 75th percentile range: third party risk analyst at $97,702, third party risk management analyst at $110,003, senior analyst at $131,815 and third party risk manager at $133,083, plus an India entry band of Rs 5 lakh to Rs 9 lakh in Bengaluru

compliance & privancy careers Remote work

Third Party Risk Management Career Path

The third party risk management career path runs from vendor risk analyst to programme manager. US averages run $97,702 to $133,083, Bengaluru entry Rs 5 to 9 lakh

Riyali Ganguly September 1, 2026

Data breach response plan idea and template to help.

Data protection compliance & privancy

Data Breach Response Plan Template

A data breach response plan template runs two Indian clocks: six hours to CERT-In, in force today, and 72 hours to the Data Protection Board from May 2027

Riyali Ganguly August 31, 2026

How Indian Service Providers Answer SIG And CAIQ Questionnaires

CCPA And CPRA For Indian Service Providers With California Clients

NIS2 Directive: What Indian Vendors Of EU Companies Must Do

DPDP Act Penalties For Non-Compliance

Cybersecurity Certifications Compared For Beginners

Third Party Risk Management Career Path

Data Breach Response Plan Template

Allow notifications

If the modal does not open automatically, then follow these steps.