A 180-person Bengaluru fintech’s Friday after Trend Micro Cloud One Workload Security threw an amber alert on a production EKS node. The cryptominer, the gap, the fix.
How a 280-person Pune NBFC moved 64 business apps under Okta Workforce Identity Cloud in fourteen days to clear a DPDP audit IAM material gap. Priya’s day-in-the-life on a clean walkthrough.
A Mumbai NBFC postmortem: a Saturday amber DLP alert on Palo Alto Prisma Access turned out to be a data scientist exfiltrating the credit scoring model in five chunks.
A 320-person Mumbai cooperative bank’s Sunday cutover from Sophos XG to Check Point Quantum. RBI audit pressure, SmartConsole rule cleanup, branch leased-line failover, and the compliance officer’s two-screenshot question.
IT asset disposal DPDP India: how one Bengaluru SaaS IT head moved 280 retired laptops from a storeroom to a signed certificate in 9 hours.
How USB data theft prevention for Indian companies looks in practice: a Pune pharma IT manager’s 9-hour Monday from EDR alert to signed PO.
A Mumbai life-insurance IT head’s 9-hour Monday. The fears, the CFO pushback, the vendor call, the signed PO at 6:30 PM. Inside an Indian BFSI’s DPDP audit walkthrough.
How to stop data leaks over email in India, with the four controls Indian SMBs actually need, what email DLP costs, and the DPDP penalty you are avoiding.
The DPDP readiness checklist for HR and IT teams Indian companies actually use before the auditor lands. 14 line items, split by who owns what.
By Priya Sharma, Compliance Lead, Sirius Star Last verified 01 June 2026 DPDP Penalties for Indian SMBs: What You Actually Pay When Things Go Wrong The short version The headline cap is Rs.250 crore. The Data Protection Board does not start there for a 30-person company. It starts with proportionality. For an Indian SMB the…