India’s Ministry of Electronics and Information Technology empanels cloud service offerings for use by government departments, following audit by STQC against defined security and service requirements. SEBI and other regulators also reference MeitY empanelment for regulated entities’ cloud use.
We prepare cloud and SaaS providers for STQC audit and empanelment, using ISO 27001, ISO 27017 and ISO 20000-1 evidence.
Who it is for
- Cloud and SaaS providers targeting government
- Data centre operators
What you gain
- Access to government and regulated-sector cloud demand
How we get you ready
Scoping
Agree the systems, services and criteria in scope, and whether a Type 1 or Type 2 report fits your customers and timeline.
Readiness assessment
Map existing controls to the criteria, identify gaps and design missing controls with owners and evidence.
Remediation
Put policies, tooling and processes in place, and rehearse evidence collection so it is routine, not a scramble.
Assessment coordination
We help you engage STQC for the empanelment audit, prepare the evidence and support you through the assessment and any follow-up actions.
Observation period and report
For Type 2, we monitor controls through the observation window and help you respond to exceptions before the report is issued.