126 pages
Website Sitemap
Every page on Cyber Soldiers Lab and Netra, in one place. Pick a section to jump straight to it.
Cyber Soldiers Lab
The company, its products and how to reach us.
Resources and Insights
Whitepapers, guides, webinars and articles from Cyber Soldiers Lab.
Resources hub
Articles and guides
- The State of Compliance and Audit in India 2026
- AI-Powered Compliance Checklist
- Future of Agentic AI in Governance
- ISO 27001:2022 - What Changed and Why It Matters
- SEBI CSCRF: Complete Implementation Guide for Market Intermediaries
- RBI IT Governance Framework: Compliance Checklist for NBFCs
- DPDPA 2023: Practical Implementation for Indian Businesses
- AI Hallucinations: The Hidden Compliance Risk
- Zero-Day Compliance: How Automation Enables Real-Time Audit Readiness
Netra: Platform
The Netra Compliance & Audit OS and its modules.
Netra
Platform modules
- Task Engine (opens in a new tab)
- Compliance Centre (opens in a new tab)
- Policy Hub (opens in a new tab)
- Risk Manager (opens in a new tab)
- Audit Centre (opens in a new tab)
- Third-Party Risk (opens in a new tab)
- Asset Management (opens in a new tab)
- Cloud Management (opens in a new tab)
- Dashboard & Reports (opens in a new tab)
- Netra AI (opens in a new tab)
- Partner Portal (opens in a new tab)
Netra: Solutions
Netra for each sector, role, company size and region.
Solutions and partners
By industry
- All industries (opens in a new tab)
- Banks and Co-operative Banks (opens in a new tab)
- NBFCs (opens in a new tab)
- Fintech and Payments (opens in a new tab)
- Governments, Ministries, Departments and PSUs (opens in a new tab)
- Technology and SaaS (opens in a new tab)
- Healthcare (opens in a new tab)
- MSSPs and Audit Firms (opens in a new tab)
By role
By company size
Netra: Resources and Tools
Guides, answers and finders from Netra.
Legal
How we handle data, and the terms of using our websites.
Netra: Frameworks
The Netra framework library, 37 frameworks grouped by region.
India
- RBI CTRRAF 2026 - Commercial Banks (opens in a new tab)
- RBI CTRRAF 2026 - Small Finance Banks (opens in a new tab)
- RBI CTRRAF 2026 - Payments Banks (opens in a new tab)
- RBI CTRRAF 2026 - All India Financial Institutions (opens in a new tab)
- RBI CTRRAF 2026 - Credit Information Companies (opens in a new tab)
- RBI CTRRAF 2026 - Urban Co-operative Banks (opens in a new tab)
- RBI CTRRAF 2026 - Non-Banking Financial Companies (opens in a new tab)
- NISPG 2019 v5.0 (opens in a new tab)
- CERT-IN Guidelines (opens in a new tab)
- MeitY CSA (Comprehensive Security Audit) (opens in a new tab)
USA
- NIST CSF 1.1 (opens in a new tab)
- NIST CSF 2.0 (opens in a new tab)
- NIST SP 800-53 (opens in a new tab)
- NIST SP 800-171 (opens in a new tab)
- HIPAA Security (opens in a new tab)
- NIST AI RMF 1.0 (opens in a new tab)
- CCPA (opens in a new tab)
- FTC Safeguard Rule (opens in a new tab)
- HITRUST (opens in a new tab)
- NIST-SSDF (opens in a new tab)
- SEC (opens in a new tab)
Europe & UK
Global
- ISO 27001:2022 (Security Controls) (opens in a new tab)
- SOC 2 (opens in a new tab)
- PCI DSS 4.0.1 (opens in a new tab)
- PCI-DSS (opens in a new tab)
- ISO 42001:2023 (opens in a new tab)
- CIS v8 (opens in a new tab)
- CIS v8.1 (opens in a new tab)
- ISO 27701:2019 (opens in a new tab)
- ISO 27001:2022 (Requirements) (opens in a new tab)
Netra: Blog
Practical writing on regulation, audit and third-party risk.
Latest posts
- A vCISO onboarding checklist for the first 90 days with a new client (opens in a new tab)
- A Board and IT Strategy Committee reporting pack for RBI’s 2026 cybersecurity Directions (opens in a new tab)
- SOC 2 report guide for Indian service providers selling to US and global customers (opens in a new tab)
- ISO/IEC 27001:2022 certification in India: the management system, Annex A, the audit stages and what auditors ask for (opens in a new tab)
- The MeitY Comprehensive Security Audit (CSA) checklist: who answers it, how the audit runs and what reviewers expect (opens in a new tab)
- RBI’s 2026 cybersecurity Directions for All India Financial Institutions: what the Board, the CISO and auditors need to show (opens in a new tab)
- RBI’s 2026 cybersecurity Directions for Credit Information Companies: what the Board, the CISO and auditors need to show (opens in a new tab)
- RBI’s 2026 cybersecurity Directions for Payments Banks: what the Board, the CISO and auditors have to show (opens in a new tab)
- RBI’s 2026 cybersecurity Directions for Small Finance Banks: what the Board, the CISO and internal audit have to run (opens in a new tab)
- RBI’s 2026 cybersecurity Directions for NBFCs: which chapter applies to you, and what it asks (opens in a new tab)
- RBI’s 2026 cybersecurity Directions for urban co-operative banks: the four levels, and what each one asks (opens in a new tab)
- CERT-IN 6-hour incident reporting: what your organisation has to be able to show (opens in a new tab)
- DPDP Act compliance in India: a practical checklist before May 2027 (opens in a new tab)
- RBI’s 2026 cybersecurity Directions for commercial banks: what the Board, the CISO and auditors need to know (opens in a new tab)
- Audit readiness checklist: how to walk into an audit with evidence already in place (opens in a new tab)
- How vCISOs and MSSPs can run compliance for many clients without adding headcount (opens in a new tab)
- Third-party risk management: a vendor assessment checklist that survives an audit (opens in a new tab)
- SOC 2 or ISO 27001: which one does your customer actually want? (opens in a new tab)