packets.build00 RISE 360 · Resilient Indian Startups Ecosystem
Growing Indian companies, digitally resilient by default
RISE 360 is a movement to take growing companies in India to Resilience Elevator L1: the baseline customers and regulators keep asking for, kept live instead of proved once a year.
L1 · The baseline
Reach L1 in three months
What customers and regulators keep asking for, kept live instead of proved once a year. RISE 360 takes you here within three months of onboarding.
RISE 360 reaches here01 What RISE 360 is
What RISE 360 is
360 stands for the first 360 companies, and for full coverage of security, privacy and resilience. The movement is run by packets, which owns and runs a control tower for each company: one place for governance policies, security practices and compliance proofs.
- 360companies in the first cohort
- 360°coverage of security, privacy and resilience
Autonomous agents
Autonomous agents do the collecting and checking.
A Forward Deployed Expert
A Forward Deployed Expert works with your team on what needs a person.
02 The Resilience Elevator
The Resilience Elevator
The Resilience Elevator has three levels, L1, L2 and L3, and each is defined by the controls in place. RISE 360 takes a company to L1 within three months of its onboarding date. L2 is a choice made together by the company and packets, as the company grows.
L3
Defined by the controls in place.
L2
A choice made together by the company and packets, as the company grows.
L1
The baseline customers and regulators keep asking for.
RISE 360 · within 3 months of onboarding
A certificate
One moment
DATED · AUDIT DAYDescribes where a company stood on the day it was signed.
An L1 attestation
Live
Live now
A live representation of your controls, reviewed by an independent assessor.
An L1 attestation is a live representation of your controls, reviewed by an independent assessor. It is not a certificate. Read more about the Resilience Elevator.
03 The thought behind it
Why an elevator, not a checklist
Growing companies are told to be compliant before they are ready, and to prove it once a year. Security turns into a project that ends, and the proof is out of date the day it is signed. We believe in a different way to climb.
- 1
Resilience is built in levels. A team of ten and a team of five hundred need different controls, so each level is defined by the controls in place, not by a badge on a wall.
- 2
Start with what prevents the most common losses. L1 is that baseline, small enough to reach within three months.
- 3
The right path has to be the easy path. Autonomous agents collect and check. A Forward Deployed Expert does what needs a person. People take the easy road, so we make it the safe one.
- 4
Proof has to be live. A continuous attestation shows your controls as they are today, reviewed by an independent assessor, not as they were on audit day.
- 5
Going up is a choice. You move to L2 and L3 when your growth, your customers or your regulators ask for it, and not before.
04 What L1 covers
What L1 covers
Ten areas of everyday work. Each is a small set of controls, and each control is checked against evidence from your own systems.
01
Access and identity
Only the right people get in, and only for as long as they should.
- Two-step sign-in on email, code, cloud and admin tools
- Leavers lose access the same day
- Admin access reviewed on a schedule
02
Awareness
People know what to watch for and how to raise a flag.
- Training at joining and every year
- One-step reporting of suspicious messages
- A second check before payment details change
03
Devices
Every laptop and phone that touches work is known and protected.
- A list of devices and who has them
- Encryption, screen lock and updates enforced
- Remote lock or wipe when one is lost
04
Data and privacy
You know where personal data lives and how it is handled.
- A map of the data you hold
- Encryption at rest and in transit
- Steps for access, deletion and breach notification
05
Suppliers
The companies you depend on are listed, owned and checked.
- A supplier list with an owner for each
- A security check and a data agreement for critical suppliers
06
Incidents and recovery
When something goes wrong, you know who acts and how you recover.
- Scheduled backups with a recorded restore test
- An incident plan with contacts
- Alerts that reach a named person
07
Change and releases
What you ship is reviewed and scanned before it reaches customers.
- A second person reviews code
- Secret and dependency scanning
- A penetration test
08
Evidence
Every control has proof from your own systems, on a schedule.
- Evidence collected for each control
- A written scope of what is covered
09
AI governance
AI tools are in use on purpose, with clear limits.
- A list of the AI tools in use
- A rule on what data may go into them
10
Ownership and risk
Someone owns security, and the risks are written down.
- A named security owner
- A risk list and a system list
- Short, dated, approved policies
05 How it works
From your tools to an attested L1.
We connect your systems, find the gaps, close them with you, and verify the result. You reach L1 within 3 months of your onboarding date.
001
Connect your tools
Our autonomous agents read your cloud, code, identity and device tools, compare them with the L1 controls, collect the evidence and find the gaps.
Your tools. One control tower.002
Fix the gaps
A Forward Deployed Expert works with your team to put the controls in place and close the gaps, most important first.
The gaps. Closed in order.003
Verify
An independent assessor reviews the evidence. You receive an attestation at L1. It is continuous: it updates when your controls or your evidence change.
The evidence. Verified.004
Share and keep it
Show your attestation to customers in the trust portal. Keep L1 active by continuing your plan. When you are ready, move to L2 on the Resilience Elevator.
Shared. Kept. Growing.
06 Progress
360 places in the first cohort.
Real companies only, counted once each.
360 windows · one place each
07 Questions
Questions
01Who can apply?
Growing Indian companies, starting with startups. Anyone can apply. The first 360 are selected.
02How do I apply?
Play Kite Club at play.packets.build and apply there.
03How long does it take to reach L1?
Within 3 months of your onboarding date.
04Is this a certification?
No. An attestation is a live statement of where your company stands now. A certificate describes one moment. We say attested, never certified.
05Do I need ISO 27001 or SOC 2?
Not to reach L1. They are an optional side road when you need them.
06What happens after L1?
You keep L1 active, and you can choose to move to L2 with us. The Resilience Elevator explains each level.
07What does it cost?
The conditions for selected companies are shown where you apply, at play.packets.build.
08What about my data?
Read our privacy policy.