INDUCTUS GCC GCC Advisory Partner Strategic guidance for compliance, governance, and GCC growth in India FOUNDATION Build the right GCC before you build the footprint Advisory should shape the center before implementation begins, connecting strategic intent to a workable operating model. Strategy GCC strategy and feasibility assessment Model Location and operating model advisory Governance Governance framework design and compliance assessment Scale Workforce, operating, and long-term growth planning 02 WHY ADVISORY GCC advisory turns complexity into accountable decisions Local execution becomes clearer when policies, risks, reporting, and ownership are translated into decisions leaders can act on. 03 GOVERNANCE 3.0 GCC 3.0 needs governance beyond basic operational controls A resilient center connects compliance, protection, control, accountability, and responsible growth. 04 FRAMEWORK SELECTION Use the right framework for the risk, industry, and jurisdiction Applicability depends on the company’s industry, jurisdictions, and operations. FRAMEWORK PRIMARY LENS ISO 27001 Information security management COSO Internal control and enterprise risk management COBIT IT governance and management SOC 2 Controls relevant to security and other applicable trust service criteria Data protection requirements Assess applicable Indian and international privacy laws 05 RESILIENCE Risk management makes the GCC resilient by design Regulatory and compliance risks Periodic risk assessments and documented policies. Data security and privacy risks Clear accountability for data protection. Operational disruptions Regular control reviews help manage disruptions. Third-party and vendor risks Clear accountability across external dependencies. Financial reporting risks Documented policies support reporting controls. Intellectual property risks Employee training safeguards sensitive work. 06 OPERATING RHY THM Five moves from fragmented controls to a living governance model Governance is a cycle: establish the right foundation, then keep it responsive as the GCC, its risks, and its environment change. Assess Identify applicable regulations, business risks, and control gaps. Design Define structures, policies, decision rights, and responsibilities. Implement Establish controls, reporting systems, and procedures. Monitor Review performance, audit, and track emerging risks. Improve Update policies, strengthen controls, and adapt to change. 07 TRUST ARCHITECTURE Trust is built across data, technology, and human judgment Access Appropriate data access controls Flow Secure data storage and transfer practices Protect Intellectual property safeguards Respond Cybersecurity monitoring and incident response Govern Responsible AI policies and human oversight Enable Regular staff awareness and training 08 INDUCTUS GCC Inductus GCC helps enterprises build, scale, and optimize Inductus GCC acts as a strategic GCC enabler for Global Capability Centers and Shared Service Centers in India, supporting the choices that shape the center over time. Build GCC strategy and advisory Operating model selection Govern Governance and operational planning Compliance and risk considerations Scale Setup and implementation support Long-term optimization and scalability 09 NEXT STEP Strengthen Your GCC with Strategic Advisory Discover how a gcc advisory partner can help your organization strengthen compliance, improve governance, and build a more resilient Global Capability Center.