What we do
What the regulator asks for
Start here
Six practices, one lifecycle: advise, assess, comply, protect, monitor, respond. Most engagements begin with an assessment and stay for the monitoring.
Prime can sign the audit report your regulator will accept.
Scope an engagementAudit & testing
Certification & privacy
Arrived with a deadline rather than a question? Every page above states the scope, the evidence produced and the typical duration.
All requirementsRegulated
Operational
Data-intensive
Each industry page names the specific obligations that apply — SEBI CSCRF for market infrastructure, CEA guidelines for utilities, DPDP for everyone holding personal data.
All industriesSecurity here is a sales blocker before it is a risk. The report is a commercial asset and the deadline belongs to a customer, not a regulator.
Described by sector rather than by name.
All case studiesTechnology / SaaS
A prospect's procurement team had sent a 240-line security questionnaire and a request for SOC 2. Prime mapped the questionnaire to controls the company already ran, identified the eleven that genuinely did not exist, and built the evidence programme around the deal timeline rather than around the certificate.
240
questionnaire lines mapped
11
real control gaps found
Thirty minutes with a practitioner rather than a salesperson. If the requirement somebody has handed you does not match what you actually need, that is a more useful thing to find out now than in week nine.
Or reach the incident line directly on +91 9147712576, monitored 24×7 from Kolkata.