AuditXYZ

CERT-In Empanelled Auditor

BDO India LLP

Mumbai, Maharashtra

CERT-In EmpanelledVAPT Capable

Overview

BDO India LLP is empanelled by CERT-In as an information security auditing organisation, auditing since September 2013 and headquartered in Mumbai, Maharashtra. It is authorised to carry out security audits for government bodies, regulated entities (RBI, SEBI, IRDAI), and commercial organisations under the CERT-In empanelment programme.

Capability snapshot self-reported by the auditor on 2024-11-18.

Contact Details

Address
The Ruby, Level 9, North West Wing, 29, Senapati Bapat Marg, Dadar West, Mumbai, 400028
Contact person
Mr. Ashish Gangrade / Mr. Virendra Singhi

Audit Capabilities

Capability snapshot self-reported to CERT-In. 21 capabilityies explicitly supported.

Supported

  • Compliance audits (ISO 27001, PCI, IEC 62443, SOC 2, etc.)
  • Finance sector audits (SWIFT, ATM, CBS, API, payment gateway)
  • API security testing
  • Mobile application security testing
  • Web application security audit
  • Wireless security audit
  • ICS / OT / SCADA audits
  • Network security audit
  • Cloud security audits
  • UIDAI AUA / KUA audit
  • Data privacy / DPDP / GDPR audit
  • Source code review / SAST / SCA
  • Red team assessment
  • Social engineering / phishing simulation
  • Vulnerability assessment and penetration testing
  • Security architecture review
  • Digital forensics / incident response
  • Risk / maturity / gap assessment
  • IS policies, procedures and ISMS consulting
  • Security awareness training
  • Information systems audit (general / comprehensive)

29 additional capability areas were not reported by the auditor on their last snapshot.

Service lines as listed

  • Network Security Audit
  • Web-application Security Audit
  • Mobile (Android & iOS) Applications Security Audit
  • Internal Application Security Audit
  • API Security Testing
  • Wireless Security Audit
  • Compliance Audits (ISO 27001, IEC 62443, IEC 27019, PCI, etc.)
  • Finance Sector Audits (Swift, ATMs, API, Payment Gateway etc.)
  • ICS/OT Audits
  • Cloud Security Audits
  • Source Code Review
  • ITGC Audit
  • Information Security Maturity Assessments
  • Red Teaming Exercise
  • Phishing Simulation Exercise
  • Information Security Awareness Training
  • Cyber Crisis Management and Drills
  • Regulatory Audits (RBI, SEBI, IRDAI, PFRDA, UIDAI)
  • Internal Audits, IT and IS Audits
  • Third Party Risk Assessments
  • System Audit Report (SAR)
  • Digital Personal Data Protection Audit
  • Cyber Forensic, Incident Response & Root Cause Analysis
  • Software Asset Management (SAM) Review
  • IT Asset Management (ITAM) Review
  • Software License Management (SLM) Review
  • Enterprise Security Architecture Review

Source: CERT-In empanelment list. Entries are self-reported and may change — verify with the auditor before engagement.

Looking for more CERT-In empanelled firms? View all 236 auditors →