ARC Tech is established by a group of IT experts who have an average of over 25 years of experience in working with Fortune 100 companies, delivering Cybersecurity and Privacy Risk Assurance, Management and Compliance Services within Cloud and On-Premises environments. The organization has extensive and deep knowledge in network security and software project management in Agile, Waterfall and CI/CD model of DevOps environment.. They have practiced Service Management are ITIL certified and are ITIL certified. They have driven projects in leading organizations like IBM, Perot Systems, Nortel, Dell Services and are well-versed with industry best practices. They are experts in legacy systems developed in Assembler/ COBOL using VSAM/ DB2 platform to recent technologies like Java, .Net, SQL Server. These technology mavens spent decades in auditing systems including ISMS, ITSMS, QMS, Cloud Security, and PIMS for top IT companies like Microsoft, Accenture, Oracle, SAP, Capgemini, HP, and other industry leaders like Berkshire Hathway, Deloitte, etc. representing leading certification bodies like BSI, DQS, SGS, and PECB.
About Us
Experience
Our principals have over a decade of experience with Information security certification audits, consulting, management, and training, serving top brands within the following sectors: Banks & Financial Services, Technology, E-Commerce, Retails, Government & Defense Contractors, Telecom, Travel, Tourism and Entertainment among others. It is led by people who have over two decades of international experience running security and technology companies in USA, UK, and India. ARC Tech has a strong team of professionals who have extensive experience in implementing security governance frameworks such as ISO 27001, SOC2, PCI DSS and others. We offer services across multiple spectrums such as: Gap Assessment, Certification Preparation, Internal Audit, Risk Assessment & Development of Risk Assessment Process, Development of Policy, Standards, Procedures & Guidelines, Business Continuity Planning, Compliance Management, Certification Audit etc.
We believe that cybersecurity is not a destination, it is a journey and we partner with our clients to address the dynamic cybersecurity threat landscape.
We believe that cybersecurity is not a destination, it is a journey and we partner with our clients to address the dynamic cybersecurity threat landscape.
Our principals are certified in:
ISO 27001, ISO 27701, ISO 27018, ISO 22301, ISO 20000-1, ISO 9001 and BS 10012
Apart from the above, our experts have also worked with the following standards:
Corporate Governance of Information Technology - ISO 38500, Information Technology Security Techniques - ISO 18028, NIST 800-53, NIST 800-171, 23 NYCRR 500 (NYDFS Cyber security regulations), Health Insurance Portability & Accountability Act – HIPAA, CMMC – Cyber Security Maturity Model, EU - General Data Protection Regulation – GDPR, Payment Card Industry Data Security Standards - PCI-DSS, Federal Information Security Modernization Act – FISMA, USA, Graham Leach Bliley Act – GLBA, Sarbanes Oxley Act - SOX 404, USA, SSAE 18.
Corporate Governance of Information Technology - ISO 38500, Information Technology Security Techniques - ISO 18028, NIST 800-53, NIST 800-171, 23 NYCRR 500 (NYDFS Cyber security regulations), Health Insurance Portability & Accountability Act – HIPAA, CMMC – Cyber Security Maturity Model, EU - General Data Protection Regulation – GDPR, Payment Card Industry Data Security Standards - PCI-DSS, Federal Information Security Modernization Act – FISMA, USA, Graham Leach Bliley Act – GLBA, Sarbanes Oxley Act - SOX 404, USA, SSAE 18.
We provide following services:
Gap Analysis for:
- ISO 27001/ ISO 27701/ ISO 27018/ ISO 27017
- GDPR/ CCPA and other data privacy regulations
- NIST framework
- SOC 2 Type 2
- Cybersecurity Maturity Model Certification (CMMC)
