Work we can show you.

The retailer wanted hardware failure to stop being an unplanned event. Its production and non-production servers needed cover for hardware risk, with one accountable partner behind it. NetScale runs an SLA-backed infrastructure service contract for those servers: engineering skills and spare parts available on site whenever a fault needs them. A dedicated engineer is on site full time as the first level of escalation. Spares are held against the SLA, on site or at NetScale’s central location in Bengaluru, whichever suits the estate.

Every commitment is written into the contract: response within 15 minutes, remote support within 6 hours and on-site support within 2 hours. Restoration is in the contract too: production servers back in service within 6 hours from call to resolution and non-production servers by the next business day.

Each asset has its own coverage start date under the one agreement.

A global brand was setting up a new technology company as a separate operation on its existing campus. It needed the office to work from the first day, with room to double its headcount later. NetScale designed and delivers the whole environment as one service. The network is a high-availability next-generation firewall pair with threat protection, cloud-managed switches and Wi-Fi 6 access points, and structured Cat6A cabling. The office has IP cameras with on-site recording, card-based door access with attendance and a video-conferencing meeting room. Workplace IT is Microsoft 365 for email and collaboration with device management, endpoint protection and detection, and email security against phishing and account takeover.

Everything sits on one monthly fee under a 36-month managed service, so the company carries no upfront infrastructure spend. Delivery of the full environment is scheduled at three months from order.

The managed service covers end-user IT, servers and hardware, network, physical security and IT assets. Two engineers are on site from 11 AM to 11 PM, Monday to Friday, backed by remote third-level escalation. Incidents, service requests and changes are handled through the service. Engineers work with the OEMs on escalations and coordinate the company’s other IT vendors. A named service desk, service head and account manager form the escalation path.

Capacity was sized so the network, firewall and licences extend to the planned second phase without redesign.

The bank’s Bengaluru technology team needed its workstations re-equipped as the business changed hands. Everything had to be sourced, delivered and working without pulling the team’s own engineers away from the transition. NetScale supplied the full set of workstation hardware from one OEM family: large-format monitors and Thunderbolt docking stations for every seat, professional headsets, keyboards and mice, plus a printer and a meeting display.

NetScale’s engineers installed and configured every item, ran and tied the cabling for each desk, and stayed on site for one month after the rollout to settle the environment. Every asset carries its OEM warranty and is serviced under the OEM’s warranty policy. Mass roll-outs beyond the agreed set and preventive maintenance sit outside the scope.

The company asked NetScale to find the security weaknesses on the laptops its people use every day, and to say what would fix them. Findings were measured against its ISO 27001 and DPDP obligations. NetScale engineers checked a sample of laptops across departments at operating-system and hardware level, by script and by hand, then re-verified every critical and high finding before writing it up.

The company received a device-by-device findings register, a risk ranking, and a fix plan with actions sequenced as immediate, within one week and within two weeks. The report also set a security posture score. It recommended that security audits and vulnerability testing return to a regular cycle, since the last audit was about a year old.

The review found critical, high and medium risks on the sample. The critical ones were laptops with no disk encryption, open USB ports and users with full administrator rights. Endpoint protection was running with the built-in Windows defence switched off, so there was no fall-back. One device had no endpoint protection at all. Beyond the devices, two gaps stood out: no controls against data leakage and no email security gateway.

The client’s IT leadership called it a good and detailed report, and asked for the fix plan to be extended to every system on the network.

The operator collects identity documents, biometric access records, employee data and member payment data. All of it is personal data under the DPDP Act. It engaged NetScale to establish where it stood and to close the gaps. The review traced personal data across onboarding, member management, access control, HR, customer records, CCTV and billing. It scored each area on policy, process, technical safeguards, ownership and evidence.

The work to close the gaps is scoped as a 16-week programme in four phases. Phase one covers ownership, a register of what personal data is held and why, and a consent framework. Phase two covers policies, a breach-response procedure and vendor agreements. Phase three covers technical safeguards, including encryption, multi-factor login, access clean-up and data leakage controls. Phase four closes with staff training, a breach drill and go-live. An outsourced data protection officer follows on retainer, with a named person, a monthly report and queries answered within 24 business hours.

The review found critical gaps in every area and a low overall readiness. There was no register of personal data, no valid consent for identity or biometric data and no way for people to exercise their data rights. No one was accountable for privacy, and there was no grievance officer or breach-notification plan. Systems holding personal data had no encryption or multi-factor login.

Every gap was written up with the Act’s requirement, the current state, a risk rating and the action to close it, so the operator could see what each part of its exposure rested on.

The company had no firewall and no intrusion detection in front of its network, a flat network with no segmentation, and no vulnerability scanning or central logging. Endpoint protection was set up only for basic spam filtering. Nothing controlled who could access what, and password rules were weak, with no multi-factor login. It asked NetScale for a programme that would close the gaps in order.

Delivery is staged, with a service acceptance letter signed off at each stage, and no new hardware supply beyond what the programme names.

NetScale scoped the programme in five components. A security management framework review aligned to ISO 27001:2022 over 15 days. Privileged access review and control across all departments over 30 days, covering administrator rights, USB and Bluetooth. Vulnerability scanning of public-facing systems, VPN, websites and APIs, and penetration testing of critical devices and private infrastructure, 30 days each. And a physical assessment of every site over 120 days, covering the data centre, power, UPS and network cabling.

Each component carries its own deliverable: a maturity assessment and process map, an access review, a vulnerability report with severity ratings, a penetration-test report with proof of concept and a site-by-site infrastructure review.