Case Study: Jyotipunja Phase 1 Technical Audit

Work delivered through Gurkha Technology. Where a number was not published, this page does not invent one.

Case details

Client	Jyotipunja Savings and Credit Cooperative Ltd. (named).
Industry	Savings and credit cooperative, Nepal
Location	Nepal
Problem	Technical operations depended on vendors and APIs. Leadership needed an independent view of SLAs and integration security before further spend — not another Facebook page.
Starting point	Structured consulting agreement for Phase 1 only.
Strategy	Audit before build: vendor SLAs, API integration security, then a training module so the internal team could operate the findings.
Implementation	Phase 1 technical infrastructure audit. SLA review. API security evaluation. Dedicated technical training for staff.
Timeline	Phase 1 engagement under the consulting agreement.
Outcomes (as published)	Written audit and training delivery. No public vulnerability list (that would be irresponsible). No invented “% risk reduction.”
Arjan’s role	Lead consultant: audit, security review, training.
Team	Gurkha Technology. Cooperative IT stakeholders.
Evidence	Engagement deliverables under NDA-style constraints. Findings stay with the client.

Audit before adding tools. Vendor SLAs decide how reliable member-facing services can be.
Treat every API integration as part of the security surface, especially where member or payment data flows.
Pair the audit with staff training so findings are acted on, not filed.
Phase the engagement. A defined Phase 1 lets leadership decide on further spend with evidence.