Sarvesh Sharma

At Consultants Factory, I conducted gap analysis against ISO 27001:2022 Annex A controls and documented findings across eight control domains. I also mapped controls across all four Annex A domains and prepared evidence artifacts for internal audit.

I supported risk assessment activities and prepared compliance documentation for audit review. My internship experience gave me practical exposure to cybersecurity compliance and audit work.

On my Windows Log Monitoring & Analysis project, I set up an attacker-victim SOC lab using Windows 10 and Kali Linux VMs. I monitored Windows Security Event Logs, triaged alerts, extracted IOCs, and mapped findings to MITRE ATT&CK techniques.