Writing

Notes from the practice.

Plain-spoken writing on audit, security and automation — the things we explain to clients most often, written down once.

Latest

Humanoid robot in a thinking pose against a deep blue ground with an electric-blue glow

Analysis

The India regulatory-audit opportunity, mapped.

Where RBI, SEBI, IRDAI, CERT-In, the Companies Act, IBC and the DPDP Act force IS, risk and forensic audits — and how credentialed firms capture that mandated demand with the right tooling.

July 2026 · 9 min read

Read it

Everything else.

01What a first IS audit actually coversIf you've never been through an information systems audit, the scope can look opaque. Here's what auditors look at, in the order they look at it.July 2026
6 min read

02DPDP readiness starts with a data inventoryMost DPDP conversations jump straight to consent banners. The harder, more valuable first step is knowing what personal data you hold, where it lives, and who touches it.July 2026
5 min read

03Why your site headers are your first security signalBefore a CISO reads a word of your marketing copy, their browser has already told them what kind of firm you are. Here's what the headers say — and how to make them say the right thing.July 2026
1 min read

Questions about anything we have written?

We publish when we have something worth saying — new analysis lands here first. A practitioner reads every message.

Talk to us