ComplyGeek is the InfoSec & Governance vertical of Kolte Enterprises Private Limited. It exists to help enterprises convert regulatory exposure into a documented, defensible posture — through implementation, audit, and SLA-driven closure.
Four mandates structure every engagement. Each is measurable, each is named on the engagement letter, and each must close before the engagement does.
End-to-end ISMS, BCMS and PCI DSS programs — designed, documented, and walked through the certification audit. No shelfware policies; every control has an operator and an evidence trail.
Internal audit, surveillance preparation and gap closure. The aim is a certification audit where the certifier finds nothing the practice has not already documented and remediated.
SLA-driven remediation tracking on high / critical findings. Third-party risk registers, vendor security assessments, and incident investigation workflows wired to the board audit committee.
Executive dashboards for the board audit committee. Regulator-facing evidence packs for IRDAI, RBI and PCI DSS QSAs. Customer due-diligence responses on standardised questionnaires.
The practice does not improvise. Every engagement runs the same five-phase playbook — adapted to the framework, but not skipped.
Current-state diagnostic against the target framework. Gap log, prioritised.
Policy & SOP framework, risk register, control architecture, RACI.
Operationalise controls, evidence capture, awareness rollout, tabletop drills.
Pre-certification audit, NC closure log, evidence walk-through with auditor.
Annual surveillance, recertification support, continuous improvement log.
The accreditation set covers the major frameworks ComplyGeek's clients are audited against. Originals available on request.
