Code Decode Labs

Overview

Code Decode Labs is empanelled by CERT-In as an information security auditing organisation, auditing since 2010 and headquartered in Pune, Maharashtra. It is authorised to carry out security audits for government bodies, regulated entities (RBI, SEBI, IRDAI), and commercial organisations under the CERT-In empanelment programme.

Capability snapshot self-reported by the auditor on 2022-09-28.

Contact Details

Address

A-302-402, ‘Runwal Sanket’, Beside Zudio Store, Ganaraj Chowk, Baner, Pune – 411045 (MAH), India

Phone

+91-9039038004+91-7887801188

Contact persons

Alisha / Yogita

Mr. Suhas Kulkarni

[email protected]

Audit Capabilities

Capability snapshot self-reported to CERT-In. 35 capabilityies explicitly supported.

15 additional capability areas were not reported by the auditor on their last snapshot.

Service lines as listed

• Network Security Audit
• Web Application Security Audit
• Wireless Security Audit
• Compliance Audits (ISO 27001, IEC 62443, IEC 27019, PCI DSS, etc.)
• Finance Sector Audits (Swift, ATMs, API, Payment Gateway etc.)
• Payment Gateway Audit
• OT/Industrial Control Systems (ICS, SCADA, DDCMIS, DCS) Audits
• IT & OT Audit of Power Generation, Power Transmission & Power Distribution
• Cloud Security Audits
• DevOps & DevSecOps Consulting
• Cyber Security Threat Analysis
• V-CISO As A Service (V-CISO)
• Red Teaming, Purple Teaming & Blue Teaming
• Vulnerability Management As A Service (V-MAAS)
• Vulnerability Mitigation & Patch Management
• Website, Server & Firewall Security Testing Audits
• Physical Access Controls & Security Testing
• Cybersecurity Monitoring
• Cyber Incident Management & Defense
• Security Asset Management
• Managed Application Security
• Software Product Security Testing - Threat Assessment
• Black Box & White Box - Vulnerability Assessment & Penetration Testing (VA & PT) : Yes Encryption Security Assessment Audits
• Embedded System Security
• Malware Reverse Engineering & Forensics Testing
• Security Code Review (SCR)
• Business Continuity Management (BCMS)
• Disaster Recovery Planning Management (BCP & DR)
• Incident Response Management – SIEM & SOAR Analytics
• Red Teaming - Security and Response Management
• Cyber Security Awareness Drills
• Information security policy review and assessment against best Security Practices : Yes Security Patching for Applications & Software
• ISP Network & Communication Security Devices Testing
• Block Chain Security & Cyber Analytics
• Mobile Application Security Testing and Development
• e-Commerce Architecture Security
• National Critical Infrastructure & Grid Security
• Cyber Operations & Defense Response Management
• Cyber Infrastructure Operational Security
• Managed Security Services (MSS)
• Building & Maintaining Security Operations Centre (SOC)
• SOC & SIEM Monitoring Review Audits
• SOAR Security Orchestration, Automation and Response Audit & Review
• Independent Verification & Validation for Information Systems Audit - RBI/NABARD/IRDA/NBFC/ SEBI Stock Brokers/DP Compliance audit
• SEBI Cyber Security & Cyber Resilience Framework
• UIDAI – AUA KUA Compliance Security Audit
• Functional Audits (CBS/Treasury/BBPS/CTS/In-House Software) Audits
• VSCC Certificate for SBI – Vendor Site Compliance Certificate
• ISNP Security Audit
• RBI - Cyber Security Framework for Urban Cooperative Banks
• RBI - Guidelines for Payment Aggregators and Payment Gateways
• RBI - Guidelines for Cyber Security in the NBFC Sector
• Scalability and Resiliency Audit
• IS Compliance Audit as per Government Guidelines - IT Acts, CVC, RBI, SEBI, TRAI : Yes IT Risk Assessments
• Formulation of IT policies & Procedures
• Formulation/Review of Cyber Crisis Management Plan (CCMP)
• Data Migration Audit
• ERP Audit (SAP, Oracle etc)
• Source Code Review (SCR)
• Load Testing/Performance Testing
• Functional Testing
• Usability Testing
• Portability Testing
• Inter-operability Testing
• Accessibility Testing
• Configuration & Compatibility Testing
• DDoS Assessment
• IoT Audit
• Social Engineering
• System Audit Report for Data Localization (SAR Audits)
• Cloud Security, Outsourced DC and DR site audits
• Server/Firewall/Database/Email Configuration Review
• CSOC/DLP/FW/IPS/WAF/PIM/SIEM/Security Products Audit
• Cyber Resilience/Business Continuity/Disaster Recovery Audits
• SOC 1, SOC 2, Type I, Type II (SSAE18 & ISAE3402) - Implementation, Compliance Audit & Certification
• Malware Analysis & Reverse Engineering
• NIST & ITU Compliance of Cyber Security Assessment Framework (CSAF)
• Digital Forensics Investigation (Mobile Forensics, Computer Forensics, Audio/Video Forensics, Network Forensics, CDR Analysis, Email Forensics etc.
• Assistance on IT Acts, Cyber Laws, International Data Protection Acts & on Privacy & Data Protection Bill (PDPB) & Regulatory Compliances