control testing , Data Protection, Gdpr, Iso 27001, IT General Controls, AWS, Grc, Cloud fundamentals, IT Risk, Security Operations, risk scoring, evidence collection, vendor reviews, Third-party risk management, NIST CSF, It Audit, security questionnaires, SaaS models, DPDP Act, IT audit management, NIST SP 800-53