Tsaaro Consulting

BACKGROUND

Please describe your company and position.

 I am the AVP - Information Security of a financial services company 

Describe what your company does in a single sentence.

Crypto Exchange and Web3 services company

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Tsaaro Consulting to accomplish?
Establish a privacy control framework and readiness for ISO 27701 PIMS certification

SOLUTION

How did you find Tsaaro Consulting?

Referral

Why did you select Tsaaro Consulting over others?

• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Tsaaro Consulting were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

1. Establish Privacy Control Framework aligning to ISO 27701 PIMS standard
2. Establish all the required documentation towards ISO 27701 PIMS, GDPR and DPDPA complaince
3. Assist in the gap assessment, implementing the ISO 27701 standard requirements
4. Assist in the final ISO audits in all the stages until successful certification

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Establishment of privacy control framework
• ISO 27701 certification

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Their project management was good to ensure the timely delivery of milestones. They were super supportive in making extra efforts to keep the project milestones and timelines intact. 

What was your primary form of communication with Tsaaro Consulting?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

1. Tsaaro keeps the Client requirements and needs are top priority
2. Company values are aligned towards the project requirement
3. Team is super enthusiastic to support us through out the project
4. Tsaaro team embaces the challenges and convert them into oppurtunities
5. They go extra mile to deliver the client needs

Are there any areas for improvement or something Tsaaro Consulting could have done differently?

Keeping the same project team members on the project until completion (Couple of them got rotated due to attrition) could have been better, but obviously attrition is not in anyone control

BACKGROUND

Please describe your company and position.

I am the CEO of FourCore

Describe what your company does in a single sentence.

We are a cybersecurity company helping enterprises assess, validate and improve their security posture from the attacker's perspective with automated adversary emulation.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Tsaaro Solutions to accomplish?

ISO27001 Compliance

SOLUTION

How did you find Tsaaro Solutions?

Referral

Why did you select Tsaaro Solutions over others?

• Referred to me
• Company values aligned

How many teammates from Tsaaro Solutions were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• Achieve ISO27001 Compliance 
• Provide a certified auditor for compliance 
• Generate key ISMS documentation 
• Help through the technical audit process 
• Review existing legal and technical documents and processes for compliance

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Tsaaro helped us achieve ISO27001 Cybersecurity Compliance. They provided us with complete legal and technical expertise and made it a smooth process for us to achieve compliance. Because of their effective work, we won multiple contracts pending due to a lack of security compliance. We have gained trust and brand value with our existing customers as well. 

The team at Tsaaro helped us go from zero to compliant in a short period of time with their legal and technical expertise, including our BYOD policies, Cloud Environments (AWS, Azure), and SaaS applications. They designed and trained our team to work with the ISMS policies.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They delivered well on time, and the team was always accessible over email or calls. All the required changes were performed swiftly and with a proper explanation of each policy imparted to our team.

What was your primary form of communication with Tsaaro Solutions?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Along with deep legal expertise, their technical team is extremely competent. They understood our complicated cloud environments well and helped us chart out a BYOD policy for our team.

Are there any areas for improvement or something Tsaaro Solutions could have done differently?

There was nothing they needed to improve on.

BACKGROUND

Please describe your company and your position there.

The lab in which innovative and data-driven solutions are developed to teach people permanent safe and sustainable driving behaviour. That is The RoadsafetyLAB in short. Our mission? Making traffic safer and more sustainable, with the ultimate dream of zero work-related traffic accidents per year Iam working as CTO in the company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Tsaaro Solutions?

We hired Tsaaro Solutions to assist us in application security and device security. Tsaaro provides security implementation including Antivirus Solutions, End-point Protection, Patch Management, DLP, and User and Access Management. Further, Tsaaro performed a Grey-Box VAPT (Vulnerability Assessment and Penetration Test) activity for the Customer Portal and mobile apps. VAPT was conducted to fix the portal's security weaknesses and mitigate identified issues.

SOLUTION

How did you select this vendor and what were the deciding factors?

I have previously worked with Tsaaro on ISO 27001 engagements, and I am very much content with the quality of services that they provided in the past.

Describe the project in detail and walk through the stages of the project.

Tsaaro executed the project in 2 phases. The project's first phase was about configuring endpoint security and device management solutions. The second phase was a VAPT for the web and mobile application applications and a review of the cloud infrastructure posture.

How many resources from the vendor's team worked with you, and what were their positions?

The Tsaaro team assisting us consisted of 3 people. One project manager, one solution advisor, and one VAPT consultant.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Tsaaro first assessed our existing mechanisms, understood our requirements and generated a comprehensive report apprising us of the potential risks to our information security system and suggested remedial measures. This was an excellent approach to the project and helped with successful delivery.

How effective was the workflow between your team and theirs?

It was a pleasure working with the Tsaaro Solutions team. They are very professional and experts in the cybersecurity and data privacy domain. The team was approachable and reported to us every small detail and update on the project.

What did you find most impressive or unique about this company?

Tsaaro has cracked the code of remote support. The guys are active on the mail chains and scheduling meetings. Lastly, these guys are also very affordable, and I really appreciate their fixed-cost model.

Are there any areas for improvement or something they could have done differently?

The turnaround time for the project could have been even shorter.

BACKGROUND

Please describe your company and your position there.

I am the CTO of Moove Connected Mobility which is a company focused on IoT enabled fleet and driver management solutions. It offers various solutions like fleet management, driver management, etc. Our aim is to minimize human intervention in this field through the use of data. We operate in more than 21 countries across Europe with offices in Netherlands and Germany.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Tsaaro Solutions?

We hired Tsaaro Solutions for helping us with ISO 27001:2013 and ISO 27701:2019 certifications. For ISO 27001, we wanted their help with surveillance audit and monitoring the controls established under Information Security Management System. For ISO 27701, we wanted their help with the implementation of Personal Information Management System controls and certification support.

SOLUTION

How did you select this vendor and what were the deciding factors?

We got to know about Tsaaro through one of our references, and then explored the services provided by them. A detailed overview of required services was given by the team, and we were very satisfied by it; hence, we chose to go ahead with Tsaaro.

Describe the project in detail and walk through the stages of the project.

Tsaaro assisted Moove Connected with ISO 27001: 2013 surveillance audit and ISO 27701: 2019 certification. The focus of the project was to maintain the smooth running of Information Security Management System under ISO 27001 and implement Personal Information Management Systems (ISO 27701). Tsaaro helped in adopting the best practices necessary to monitor and analyse the ISO 27001 controls for the smooth running of Information Security Management System.

The team updated and refined our policies and procedures to ensure that a robust security infrastructure has been built at Moove. They also helped in streamlining the ISO documentation. Further, Tsaaro helped us in the end-to-end implementation of Personal Information Management System. They assisted us during the audit and helped us in attaining the certification.

How many resources from the vendor's team worked with you, and what were their positions?

In total, we had assistance of 3 people from team Tsaaro including a Project Manager, a Senior Data Protection Consultant, and a Data Protection Consultant.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The biggest outcome of this project is that Tsaaro has helped us in embedding privacy and security in our product pipeline. Further, they helped us in establishing Personal Information Management System i.e., PIMS w.r.t. ISO 27701 in our organisation. They have continuously been helping us with managing the controls established under Information Management Security System.

How effective was the workflow between your team and theirs?

The weekly update meetings were a part of the Project Plan and were conducted on time. Apart from this, the team was reachable over other communication channels like email, Slack and calls where they responded professionally. This made the workflow seamless and efficient.

What did you find most impressive or unique about this company?

The expertise of the people working at Tsaaro is certainly the most unique factor about the company and that is why they deliver top-notch work.

Are there any areas for improvement or something they could have done differently?

Overall, Tsaaro Solutions' level of service is very high class and our company is very satisfied with their work. Acquaintance with Dutch might be helpful to manage the documents.

BACKGROUND

Please describe your company and your position there.

Incture is one of the leading providers of digital applications, and digital solutions. It is a comprehensive suite of intelligent digital applications and products for SAP customers delivering packaged business value with agility and at scale to address evolving business requirements.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Tsaaro Solutions?

We hired Tsaaro Solutions for ISO 27001:2013 advisory and management of ISO 27001 certification with inclusion of gap assessments, policy reviews, internal audit and vulnerabilities assessment for necessary security standards and industry best practices.

SOLUTION

How did you select this vendor and what were the deciding factors?

We hired Tsaaro based upon a mutual referral and came to know that Tsaaro has been working with some corporate giants all around the globe with a good client satisfaction record. The enormous options in service packages and options for customization of the same also helped us in cutting costs and this was also a plus point for hiring Tsaaro.

Describe the project in detail and walk through the stages of the project.

Tsaaro assisted us in adopting the best practices necessary to obtain the ISO 27001 certification The project started in a phased manner with initially on the review of existing policies and an elaborated gap assessment report which provided recommendations based on the identified gaps for implementing the necessary controls and security standards.

Thereafter, training and awareness sessions were also organized for Management & all Incture Employees. To close any final gaps before external audit, Tsaaro is also assisting Incture with internal audits to highlight any discrepancies.

How many resources from the vendor's team worked with you, and what were their positions?

The Tsaaro team assisting us constituted of 4 people. 1 project manager, 2 senior data protection consultants and 1 solution advisor

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Tsaaro generated a comprehensive gap report apprising us of the potential risks which were there to our information security practices and suggested recommended measures along with internal audit support in highlighting necessary gaps. After the incorporation of suggestions, the process seems to have witnessed an enhancement in its capacity.

How effective was the workflow between your team and theirs?

The people representing Tsaaro were thorough professionals having requisite expertise in their respective fields. The team was reachable at all reasonable moments when required and prioritized client satisfaction over anything. Weekly briefings on the project were another feature which our company liked.

What did you find most impressive or unique about this company?

The most impressive thing about Tsaaro is the professionalism throughout the client engagement and the name which they have carved out for themselves in a short period of their existence.

Are there any areas for improvement or something they could have done differently?

I could not think of anything which might have needed improvement.

BACKGROUND

Please describe your company and your position there.

Buzzoka is a leading Market research company offering its services to everyone, from newly created startups to international companies. Through its solutions, it helps brands run effective campaigns while engaging influencers and ultimately getting the right impressions.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Tsaaro Solutions?

Tsaaro was hired for end-to-end support for the implementation of Information Security Management System (ISMS) for ISO 27001 certification. As a part of the service, Vulnerability Assessments and Penetration Test were also performed. Lastly, Tsaaro helped us build a cookie policy for transparency with our website users.

SOLUTION

How did you select this vendor and what were the deciding factors?

Tsaaro had a dedicated team of experts, with info-sec professionals who already had conducted ISO Audits and helped leading companies with the certification. The trust that came in with vast experience, and specialised nature of services made us choose Tsaaro for our work.

Describe the project in detail and walk through the stages of the project.

The project was divided into different phases, and it started with a detailed Risk Assessment, post which mandatory ISMS policies were documented, and solutions implemented to mitigate the risks identified. An Internal Audit and VAPT were also conducted before the actual audit, and the team supported in answering the auditors and closing the process.

How many resources from the vendor's team worked with you, and what were their positions?

We had their two directors and one senior consultant managing the project.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The Tsaaro team was very proactive and completed project in a very short span of time. The team had complete clarity about the work they were doing, and the same helped in having a smooth process for the certification. The website compliance further helped with reputation of our company with stakeholders in terms of our commitment to privacy and security.

How effective was the workflow between your team and theirs?

The communication channel was very organised, with fixed status update calls within the plan. The same gave an opportunity to discuss any concerns or risk with the project, and eventually helped build trust with the organisation.

What did you find most impressive or unique about this company?

The level of engagement we had with the team was certainly the most impressive factor about Tsaaro Solutions. It is to be noted that the directors themselves monitor the project and the same gives assurance about the quality of the services.

Are there any areas for improvement or something they could have done differently?

Not really. The guys delivered a satisfying experience.

BACKGROUND

Please describe your company and your position there.

Mindvalley provides services in the realm of personal development and how to develop a quality lifestyle. It is a personal transformation platform which is one of its own kind and trains clients through lifelong learnings and provides spiritual guidance. In essence, we teach the art of living a good satisfactory life. I am Abhinaya Narayanasamy, Governance, Risk and Compliance Consultant/Information Privacy Manager at Mindvalley.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Tsaaro Solutions?

Tsaaro provided us with services in the realm of GDPR and PIPL (Malaysian Data Protection Law) Compliance. Additionally, they assisted us in our Record of Processing Activities, Data Protection Impact Assessment and Data Flow Diagram.

SOLUTION

How did you select this vendor and what were the deciding factors?

Tsaaro had reached out to us by way of a promotional email describing their area of work and expertise. The deciding factor was Tsaaro’s rich experience of working extensively in this field and that too with some prestigious organisations. An interview was conducted with the top-level management before the decision to hire.

Describe the project in detail and walk through the stages of the project.

Tsaaro analysed everything from our website to our ISMS, our privacy policy, cookie policy and generated a compliance report stating the level of compliance of our organisation with PIPL and GDPR. They further assisted in making changes to our present systems and policies to go fully-GDPR and PIPL Compliant. RoPA was conducted by Tsaaro to know our organisation’s data security system in a better manner and it suggested changes to the same. Further, a DPIA was also conducted in furtherance of the compliance service.

How many resources from the vendor's team worked with you, and what were their positions?

There were five people in Tsaaro team. A team leader, two senior associates and two associates.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

After all the activities were over, the team provided us with a compliance report and suggested changes so as to go- fully GDPR and PIPL compliant. Changes were suggested to our privacy policy and international data transfer mechanisms.

How effective was the workflow between your team and theirs?

The people representing Tsaaro were thorough professionals having requisite expertise in their respective fields. The team was reachable at all reasonable moments when required and prioritised client satisfaction over anything. Weekly briefings and updates on project was another feature which our company liked. The team stuck a good balance between work quality and deadline. They had a good communication system in place and were available most of the times we required some clarification. They updates us twice in a week on the progress of the project.

What did you find most impressive or unique about this company?

The most impressive thing about Tsaaro is quality service in an affordable price range. The company has done quite well merely in a year.

Are there any areas for improvement or something they could have done differently?

Tsaaro Reports should have more simplistic language.

BACKGROUND

Please describe your company and position.

I am the Information security & Data privacy manager of Alsulaimangroup.com

Describe what your company does in a single sentence.

We are a leading Saudi holding group with over 40 years of experience operating across a plethora of key sectors like Retail, Logistics , Fmcg, Petrolium.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Tsaaro Consulting to accomplish?

• Data Privacy Program

SOLUTION

How did you find Tsaaro Consulting?

• Online Search
• Referral

Why did you select Tsaaro Consulting over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Great culture fit
• Good value for cost

How many teammates from Tsaaro Consulting were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

1.Drafting and helping in the implemenation of Privacy policy.

2.Consent managment .

3.Data subject Rights .

4. Conducting Records of processing (ROPA)

5.Vendor Management.

6.Data privacy awareness.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Their expertise in Consent Management, DSR Management, PIA, and Vendor Risk Management has been invaluable in strengthening our data privacy framework.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

yes, They have delivered the items within the timeline of the project with a quick response from the team. 

we could say one of the best team who delivered the project with good resopnse time .

What was your primary form of communication with Tsaaro Consulting?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Fast responce , Quality deliverables , Organizaiton friendly solutions  and team has indepth methodlogical knowledge and approach of privacy solutoins that helped in compliance.

Are there any areas for improvement or something Tsaaro Consulting could have done differently?

No major challenges

BACKGROUND

Please describe your company and position.

I am the GRC Officer

Describe what your company does in a single sentence.

Technology Company

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Tsaaro Consulting to accomplish?

• Implement BigID

SOLUTION

How did you find Tsaaro Consulting?

staff augmentation

Why did you select Tsaaro Consulting over others?

• Pricing fit our budget
• Company values aligned

How many teammates from Tsaaro Consulting were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

Implementing functional modules of BigID privacy tool.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Tsaaro has a great experienced talents on Data privacy projects. We got support in implementing the privacy controls and functional implementation of the privacy tool. We saw progress of 70% in the initial 2 months for a 3 months project.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes, they are quite proactive and on time.

What was your primary form of communication with Tsaaro Consulting?

Virtual Meeting

What did you find most impressive or unique about this company?

Tsaaro Consulting has experienced talents in data privacy projects. 

Are there any areas for improvement or something Tsaaro Consulting could have done differently?

na

BACKGROUND

Please describe your company and position.

 I am the Security Officer of an automotive company 

Describe what your company does in a single sentence.

SafeDrivePod offers valuable driver behavior insights, minimizes distracted driving and greatly reduces emergency response times

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Tsaaro Solutions to accomplish?

Getting ISO27001 certified

SOLUTION

How did you find Tsaaro Solutions?

Referral

Why did you select Tsaaro Solutions over others?

• Good value for cost
• Referred to me

How many teammates from Tsaaro Solutions were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Tsaaro helped us intensively to not only set up a proper ISMS and prepare for the ISO27001 certification, but also help us maintain it. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We passed the audit with flying colors and are now proudly ISO certified.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Clear planning, communication and meetings on a set interval. 

They deliver what they plan.

What was your primary form of communication with Tsaaro Solutions?

Virtual Meeting

What did you find most impressive or unique about this company?

Internal knowledge share; even when new employees start they know the details when meeting us.

Are there any areas for improvement or something Tsaaro Solutions could have done differently?

No