Enterprise Portfolio & Customer References
Explore how DCDR Consulting delivers high-impact cybersecurity audits, statutory compliance readiness, industrial OT hardening, and defensive workforce training for sovereign government bodies and enterprise leaders.
Critical Infrastructure & Enterprise Customer References
Verifiable case studies demonstrating senior-led delivery across sovereign citizen registries, state electrical grids, smart urban transit telematics, and regulated financial platforms.
National Register of Citizens (NRC) – Assam
The Mandate: Critical citizen data infrastructure and cloud architecture security auditing for the National Register of Citizens (NRC), Government of Assam, protecting sensitive personal identity records.
The Solution: Comprehensive database vulnerability assessments, cloud perimeter penetration testing, zero-trust access control enforcement, and alignment with India DPDP Act 2023 personal data safeguards.
Measurable Outcomes:
- Zero unauthorized data access vectors identified across multi-tiered citizen databases
- Hardened sovereign cloud workloads and implemented cryptographic access barriers
- Instituted continuous vulnerability scanning and audit-ready data governance protocols
Uttarakhand Power Corporation Limited (UPCL)
The Mandate: Industrial cybersecurity review and SCADA network hardening for Uttarakhand Power Corporation Limited (UPCL), defending state-wide electricity transmission and distribution infrastructure.
The Solution: Purdue Model Level 0–3 network segmentation, RTU and PLC protocol vulnerability auditing (Modbus, DNP3, IEC 60870-5-104), and substation remote telemetry security assessments.
Measurable Outcomes:
- Eliminated cross-network bridging between corporate IT and physical electrical control domains
- Established tamper-proof logging and alerting for high-voltage substation switches
- Achieved full alignment with Ministry of Power cybersecurity guidelines and IEC 62443
Delhi Integrated Multi-Modal Transit System (DIMTS)
The Mandate: End-to-end security assessment of intelligent transport systems, Automated Fare Collection (AFC), and real-time public vehicle fleet GPS telematics for DIMTS across Delhi NCR.
The Solution: Hardware and firmware auditing of connected onboard vehicle tracking units (VTUs), secure API penetration testing on fare collection gateways, and transit cloud infrastructure hardening.
Measurable Outcomes:
- Secured mission-critical telematics streaming APIs processing millions of daily transit transactions
- Mitigated device spoofing and unauthorized telemetry injection risks on connected fleet units
- Delivered senior-led remediation support to achieve complete certification before commercial rollout
Himachal Pradesh State Electricity Board (HPSEB)
The Mandate: SCADA perimeter hardening and emergency cyber incident response capability assessment for the Himachal Pradesh State Electricity Board (HPSEB) hydroelectric generating assets.
The Solution: Comprehensive industrial control system (ICS) vulnerability assessments, air-gap integrity verification, and cyber incident simulation drills for grid operations engineers.
Measurable Outcomes:
- Hardened remote telemetry units (RTUs) across mountain hydroelectric generation plants
- Trained plant operations teams on rapid containment playbooks for OT ransomware scenarios
- Established resilient fallback and fail-safe operational procedures during cyber events
Enterprise DPDP Act 2023 Readiness for Major Indian FinTech
The Mandate: A leading digital lending conglomerate with 15M+ active Data Principals required enterprise-wide readiness to comply with India’s DPDP Act 2023 and eliminate Section 33 penalty exposures.
The Solution: Automated discovery of PII across 140+ database instances, bilingual Section 6 itemized consent management architecture, automated DSAR fulfillment pipelines, and virtual DPO governance.
Measurable Outcomes:
- 100% data lineage and audit-ready Record of Processing Activities (RoPA) established
- Reduced DSAR user rights and erasure request fulfillment cycle from 21 days to under 48 hours
- Board and executive liability fully insulated against statutory penalties of up to ₹250 Crores
Dual ISO 27001 & SOC 2 Type II Certification for HealthTech
The Mandate: Fast-growing SaaS provider handling 2M+ Electronic Health Records (EHR) required rapid SOC 2 Type II and ISO 27001:2022 accreditation to close enterprise hospital procurement deals.
The Solution: Implemented automated compliance evidence monitoring, mapped unified controls across both frameworks, established strict access reviews, and guided executive teams through external audits.
Measurable Outcomes:
- Achieved clean SOC 2 Type II attestation with zero auditor exceptions
- ISO/IEC 27001:2022 accredited certificate awarded in 3.5 months
- Secured multi-million dollar hospital contracts with validated compliance posture