About Me
I am Suparno, Data Protection and Cybersecurity consultant specializing in the critical intersection of regulatory compliance and third-party risk management.
In today’s day and age, your security is only as strong as the weakest link in your supply chain. This is true even if your business spends millions in security tools. If your supply chain is not assessed by a competent auditor, you are in the dark.
My mission is simple: to help organizations ensure compliance with global privacy and security regulations without sacrificing operational agility.
Through targeted advisory and rigorous assurance services, I enable businesses to proactively identify, assess, and mitigate risks introduced by their supply chain partners. By focusing on preventing breaches at the vendor level, I help businesses transform compliance from a bureaucratic burden into a foundation of trust and resilience.
Let’s ensure your growth isn’t compromised by someone else’s vulnerability.
Feel free to reach out for more information and learn about how I can help.
Why Work With Me?
I offer a rare combination of technical and operational expertise with a risk and compliance mindset to secure your business and personal assets. I blend investigative rigor with practical remediation: fast, evidence‑based responses, actionable advisory services, and clear communication. If you are concerned about regulatory compliance or the security of your organization, I’ll audit your infrastructure and supply chain, share detailed finding reports and advise on corrective and preventive actions to fix the root cause – not just the symptoms.
I can also provide expert analysis to determine the “who, what, when, where, why, and how” of a security incident, along with remediation or the best course of action based on observed adversary tactics, techniques, and procedures.
Credentials
Certification Exams Cleared
- Cleared CISA (ISACA Certification Exam on Information System Audits)
- ISO 27001
- ISO 22301 Lead Implementer (BSI)
- GDPR
- DPDPA
- ITIL-F V3
- CCNA (Cisco Certified Network Associate)
- CCSA (Checkpoint Certified Security Administrator)
- Bachelors Degree in Engineering
Experience
My experience spans over many years in IT consulting and Big Four environments, worked in Data Protection and Cybersecurity Projects where I have extensively:
- Conducted vendor risk assessments and validated security controls against frameworks (ISO 27001, SOC2, GDPR, NIST, PCI-DSS, HIPAA) supporting compliance and audit requests and advising on remediation
- Performed business impact analysis, risk assessments, developed dashboards, automated compliance workflows and assisted in ISO audit engagements