Synthetic example showing the structure, transparency and decision output a buyer should expect. No customer information is used.
Assessment basis: questionnaire + public evidence + sample cryptographic inventory.
Public TLS findings exist, but internal authentication, API signing, application libraries and vendor cryptography are not yet evidenced. A verified CBOM requires authorised enterprise discovery.
Retention horizon and current public-key dependencies create potential harvest-now-decrypt-later exposure. Establish governance and prioritise high-lifetime systems.
Controls exist, but evidence is distributed across teams. Map SEBI/RBI/DPDP/CERT-In obligations to owners, artefacts and review dates.
Illustrative synthetic output. Actual reports identify evidence sources, assumptions, methodology version and limitations. Modelled exposure is not a guaranteed penalty or loss forecast.