Resources

GRC RADAR Resources

Compliance Resources

Compliance checklists, guides, and templates for Indian SMEs — free to download, no paywalls, no sign-ups.

Checklist

ISO 27001 Implementation Checklist for Indian SMEs

ISO 27001

A comprehensive checklist covering all Annex A controls, mapped to Indian business contexts. Includes priority ratings and implementation tips for resource-constrained organisations.

Guide

DPDP Act Compliance Guide for SMEs

DPDP Act

Step-by-step guide to building a data protection programme that meets DPDP Act requirements. Covers consent mechanisms, data principal rights, and breach notification procedures.

Checklist

CERT-In 15 Controls — MSME Compliance Checklist

CERT-In

CERT-In’s 15 Elemental Cyber Defense Controls for MSMEs (v1.0, September 2025) as a compliance checklist — with the 6-hour incident-reporting and 180-day log-retention rules built in.

Template

Information Security Policy Template

ISO 27001 / General

A customisable information security policy template tailored for Indian SMEs. Covers acceptable use, access control, incident management, and data classification.

Regulatory Summary

SEBI CSCRF Requirements at a Glance

SEBI CSCRF

A concise summary of SEBI’s Cyber Security and Cyber Resilience Framework requirements for regulated entities, with key deadlines and compliance milestones.

Guide

RBI Cyber & IT Compliance Roadmap

RBI IT Governance

A two-page roadmap for NBFCs and banks under RBI’s 2026 cyber and IT Directions — which chapter applies, the six-hour reporting clocks, and a phased build plan.

Free Resources for Indian SMEs

Every checklist, guide, and template here is free to download — no paywalls, no sign-ups. Follow GRC RADAR for new resources and regulatory updates.