KPMG India

KPMG India has a domestic client base of over 2700 companies. Our global approach to service delivery helps provide value-added services to clients. Our service offerings have been designed to provide solutions that are tailored to the current market landscape and clients’ needs. Our services include but are not limited to :

Cyber Assurance

• IT Attestation/Assurance - Includes SOC 1, SOC 2 and SOC 3, AUP, SOC 2 for cloud and SOC 2+ ( integrated with multiple frameworks such as HITRUST, ISO27001, NIST, CSA )
• HITRUST- HITRUST CSF validated assessments
• ERP Security- Review of ERP security, access controls, and data management
• Cloud Assurance - Cloud security assurance, compliance, and attestation services
• IT Internal Audit - Supports clients in controls transformation, IT audits including IT SOX compliance
• Responsible AI - identify IT risks inherent to AI use cases or models
• IT risk and compliance- framework to assist clients from design to implementation to operations. 

Strategy and governance

• Cyber security framework/compliance assessment- assist clients in compliance with NIST CSF, COBIT, ISO and other relevant information security regulatory frameworks
• Cyber Maturity Assessment- board‑level cyber maturity assessment aligned to global standards
• Cyber Strategy and target operating model- Help clients define cyber strategy and a tailored target operating model
• Cyber key performance indicator, metrics and dashboarding- Enable consistent, scalable cyber performance reporting
• Third party security risk management- Assist in third‑party security risk assessment
• Business Resilience- assist clients with Business Continuity Management (BCM) programme

Cyber defence

• Security Testing and Configuration Review- offensive security testing or vulnerability assessment and penetration testing (VAPT) to configuration review
• ERP Security Assessment: ERP security across SAP, Oracle EBS, and MS Dynamic
• Red Team Assessment : Provide an outside‑in view of security across people and technology
• IoT/OT Security Assessment : Review of an organization’s industrial control system security
• Cloud Security Testing : Assessment of technical security posture
• Product Security Assessment : In‑depth review of an organization’s software and hardware products
• Remediation Support for vulnerability management program: remediation strategy to strengthen vulnerability management
• External Attack Surface Management - Focus on external attack surface and provide threat intelligence using KPMG proprietary tools