Srida IT Academy · 15-Day Sprint · 100% Remote
ISO 27001 + DPDPA
Master India’s two must-know compliance frameworks in 15 focused mornings — an information security management system (ISO/IEC 27001) and the Digital Personal Data Protection Act, taught together so one effort covers both.
Starts 2 November 2026 · Mon–Fri · 7:30–8:30 AM IST · all 15 sessions + certificate for ₹7,500
Who it's for
Two frameworks everyone in Indian tech now needs.
The 15-day plan
8 days ISO 27001 · 5 days DPDPA · 2 days to join them up.
Days 1–8
ISO/IEC 27001:2022 — the ISMS
Information security & the ISMS
Why ISO 27001 exists, the standard's structure, and the big picture of an ISMS.
Context, scope & leadership
Clauses 4–5: interested parties, defining scope, leadership and the security policy.
Risk assessment
Clause 6: assets, threats, vulnerabilities — building a risk assessment that holds up.
Risk treatment & the SoA
Treatment options and a Statement of Applicability you can actually defend.
Annex A — organizational & people
The control themes that protect how the organization and its people operate.
Annex A — physical & technological
Physical safeguards and the technical controls that do the heavy lifting.
Support & operation
Clauses 7–8: competence, awareness, documented information and running the ISMS.
Audit & improvement
Clauses 9–10: performance evaluation, internal audit, management review, corrective action.
Days 9–13
DPDPA — India's data protection law
DPDPA overview
Scope, key definitions, and who the Act applies to — in plain language.
Roles & principles
Data Fiduciary, Data Principal, Processor; the lawful basis for processing.
Consent, notices & Consent Manager
How consent and notices must work, and the Consent Manager mechanism.
Rights, grievance & duties
Data Principal rights, grievance redressal, and the duties that bind everyone.
SDF, DPO, breach & penalties
Significant Data Fiduciary, the DPO role, breach notification and the penalty regime.
Days 14–15
Integration & capstone
Mapping DPDPA ↔ ISO 27001 / 27701
One control set, two obligations — build the bridge between security and privacy.
Capstone & next steps
Build a mini ISMS + DPDPA compliance plan for a sample org, and plan your next move.
What you'll be able to do
By day 15.
Fee & certificate
One fee. Everything included.
All 15 live sessions, recordings, and a verifiable certificate on completion. Starts 2 November 2026.
Questions
FAQs
Do I need a background?
No. The sprint is pitched for a mixed audience — we build the context as we go. Some IT or business familiarity helps, but it isn't required.
Is it live?
Yes — live on Zoom, Mon–Fri, 7:30–8:30 AM IST, for 15 sessions from 2 November 2026. Recordings are shared for revision.
What certificate do I get?
A verifiable Srida IT Academy certificate on completion, checkable at sridait.com/verify-certificate. This is a practitioner training sprint — not the externally-accredited ISO Lead Auditor/Implementer exam.
Why ISO 27001 and DPDPA together?
They overlap heavily — most of what DPDPA asks for is already covered by a good ISMS. Learning them together means one effort, two obligations handled.
15 mornings to ISO 27001 + DPDPA.
Starts 2 November 2026. 7:30–8:30 AM IST. Seats are limited.