ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data...

36

Transcript of ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data...

Page 1: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure
Page 2: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

ABOUT US

Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure and trusted by establishing best practices, standards and initiatives in cyber security and privacy. DSCI brings together national governments and their agencies, industry sectors including IT-BPM, BFSI, Telecom, industry associations, data protection authorities and think tanks for public advocacy, thought leadership, capacity building and outreach initiatives.

To further its objectives, DSCI engages with governments, regulators, industry associations and think tanks on policy matters. To strengthen thought leadership in cyber security and privacy, DSCI develops best practices and frameworks, publishes studies, surveys and papers. It builds capacity in security, privacy and cyber forensics through training and certification program for professionals and law enforcement agencies and engages stakeholders through various outreach initiatives including events, awards, chapters, consultations and membership programs. DSCI also endeavours to increase India’s share in the global security product and services market through global trade development initiatives. These aim to strengthen the security and privacy culture in the India.

Page 3: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

CONTENTS

Corporate Governance

26DSCI innews

27

Board of Directors

06

Blog, Podcasts and Social Media

29

DSCI Stakeholders

07

Programs & Initiatives

11

ChairmanMessage

04CEO

Message

05

Page 4: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

In 2015-2016, DSCI made significant progress in various areas, notably in enhancing thought leadership by contributing to the development of international security standards and igniting discussions to make India a hub of cyber security product and services; capacity building of law enforcement officers in cybercrime and cyber forensics and lastly, in undertaking strategic projects with key government institutions and serving as a platform for cyber security and best practices.

I am glad to share the overwhelming response received from the industry on the ISO/IEC/ JTC 1/SC 27 Working Group Meeting jointly hosted by DSCI and the Bureau of Indian Standards (BIS). This meeting on information security standards was held for the first time in India and witnessed over 300 experts (including 85 from India) who deliberated on crafting international standards on Privacy, Security and Risk management in Internet of Things (IoT), Cloud Computing and other contemporary technologies. Riding high on its success, our work with the Cyber Security Task Force too has been widely supported by the industry and equally encouraged by government organisations.

A pivotal year, 2015-16 saw the strengthening of our platforms and the deepening of engagement with our corporate members and other key stakeholders. The focus for 2016-17 is to ensure that our programs and initiatives create unerring conditions for furthering the DSCI vision.

The board is strongly committed to seeing DSCI grow manifold, as its activities take centre stage in cyber security and related matters in India. On behalf of the entire Board of Directors, I thank DSCI stakeholders, for their confidence in us, which helps fuel the momentum towards continuous strengthening of cyber security, and in turn, national security.

At this juncture, I wish to share that Rama Vedashree, Former VP – ITeS at NASSCOM, has been appointed CEO, DSCI w.e.f 1 June 2016.

CHAIRMAN MESSAGE

G K PillaiChairman, DSCI

DSCI’s contribution to building a strong cyber security landscape in the country has continued to grow. This year’s annual report captures the ongoing priorities of the cyber security and privacy agenda and the resultant numerous activities across businesses and government organisations.

A key development this year for DSCI has been with regard to its leadership. We were glad to welcome Nandkumar Saravade as CEO, to carry forward the DSCI vision and lead the strategic direction and growth of the organisation.

From guiding public and private institutions to ensuring cyber security and data protection, to producing integral research and insights via collaborations; from serving as the focal point in India for all matters in the domains of Privacy, Internet Governance, Trans-border data flow, Cybercrime, Cyber Forensics and Cloud security to building the cyber community by organising engaging workshops and meetings, DSCI continues to serve diverse sectors of the Indian economy in tackling myriad cyber security issues.

4 DSCI | Data Protection Outlook 2015-16

Page 5: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Nandkumar SaravadeCEO, DSCI

CEOMESSAGE

sectoral engagement approach helped us connect with user-organisations in particular, and understand the intrinsic issues and challenges faced by them. A positive sign in this direction has been an increased level of feedback and collaboration for our initiatives throughout the year.

A highlight of our thought leadership initiative has been co-hosting of the ISO/IEC/ JTC 1/SC 27 Working Group Meeting in India on the adoption of international security standards and best practices in the industry, which saw enthusiastic participation of 300 experts from 33 countries including 85 experts from the Indian industry. The Indian delegation proposed formulation of two new standards – ‘Privacy in Smart Cities’ and ‘Privacy in Smartphone Applications,’ a development which was much appreciated by the global delegates.

Catalysing the growth of the privacy profession in the country is central to our objective in capacity building. Launched in 2014, the DSCI Certified Privacy Professional (DCPP ©) certification program was widely endorsed and appreciated by the industry. With over 400 enrolments last year for DCPP©, we forged an association with education institutes which aims at making privacy an integral part of the curriculum studied by students across the country.

The year was remarkable for our outreach activities as well. The NASSCOM-DSCI 10th Annual Information Security Summit (AISS) held in New Delhi and the Best Practices Meet (BPM) organised in Bengaluru served as definitive platforms for cyber security-related discussions on global policy perspectives, industry issues and national views. To promote excellence in the practice of security, the DSCI Excellence Awards 2015, recognized and feted organisations and individuals in the Corporate, Law Enforcement and Cyber Security Product and Services categories, who demonstrated outstanding results in proactive and innovative security and privacy initiatives to help their organisations address real risks and build resilience.

Our work ensured continuous engagement with the government including Department of Commerce (DoC), Department of Electronics and Information Technology (DeitY), National Cyber Security Coordinator and Ministry of External Affairs on key policy issues including trans-border dataflow, privacy, intermediary liabilities, Internet governance, Internet of Things, trade issues of e-Commerce sector, cloud computing and others.

As we embark upon a challenging yet exciting journey towards the ambitious goals of building a world-class cyber security industry, we strive to collaborate with existing and emerging stakeholders to comprehensively chart out the future course of programs and initiatives, to make them more impactful. Thus, your sustained support of DSCI will be paramount to achieve greater heights.

We look forward to your walking with us in this journey.

It has been an honour to lead DSCI in the past year and work collaboratively with key stakeholders such as the industry and government, and others spanning the cyber ecosystem. The aim has been to align DSCI objectives to the critical cyber security agenda of these stakeholders, for the common benefit of creating a safe and secure cyberspace. I am glad to report that the year under review was a momentous one for the entire industry in the cyber security domain as, at the NASSCOM’s 25 year anniversary celebration, the Hon’ble Prime Minister of India, Shri Narendra Modi emphasised on making India a hub of cyber security products and services. His exhortation led to the establishment of the Cyber Security Task Force, thus setting the ball rolling towards strategizing the growth of the Indian Cyber Security products and services market. The crystallising vison of CSTF is to create USD 35 billion market for the Indian industry, one million cyber security jobs and 1000 Cyber Security start-ups in the country.

At the organisational level, one of our key priorities during the year, was to expand our engagement with member organisations. Our focussed and

5DSCI | Data Protection Outlook 2015-16

Page 6: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

BOARD OFDIRECTORSDSCI Board has seven Directors, of which four are Independent Directors. During the year 2015-16, the Board elected Gopal Pillai as the Chairman of Board of Directors.

B.V.R. Mohan Reddy, joined the Board in place of R. Chandrashekharan, Chairman, NASSCOM and B. J. Srinath, DG, Cert-In, DeitY joined as Nominee Director from the government in place of Dr. Gulshan Rai.

Two Directors representing NASSCOM – the present Chairman and President

One Government nominated Director

Four Independent Directors including Chairman, DSCI

The present composition of the Board is as below,

The Board of Directors, as on 31 March 2016, are:G. K. Pillai, Chairman, DSCI

B.V.R. Mohan Reddy, Chairman, NASSCOM

R. Chandershekhar, President, NASSCOM

Prof. N. Balakrishnan, Independent Director

B.J. Srinath, Government nominated Director and Director General, CERT – In, DeitY

A.S. Ramasastri, Independent Director

Raman Roy, Independent Director

G. K. Pillai B.V.R. Mohan Reddy R. Chandershekhar

Prof. N. Balakrishnan B.J. Srinath A.S. Ramasastri Raman Roy

6 DSCI | Data Protection Outlook 2015-16

Page 7: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

DSCISTAKEHOLDERSDSCI understands stakeholders’ needs, prevailing dynamics and encompasses these in its varied initiatives, programs and outreach activities. Creating stakeholder value is a key priority area for us.

Our programs and strategic activities are guided by the Board of Directors. To better reflect the ever-changing cyberspace, we engage closely security and privacy experts from the industry and government, consult member companies, and chapter members set up for global data flows, encryption policy, and cyber forensics, besides the specially constituted steering committees and programme committees. This consultative process helps us meet the aspirations of our stakeholders and contribute in industry development.

Stakeholders, including Board Members, critically review DSCI progress on policy and its consultation papers, besides enhancing security and privacy awareness in their respective organisations and regions. We now thrive on the strong relationships developed with our stakeholders over the years.

IT-BPM BFSI Telecom

Healthcare e-Commerce Oil and Energy

DSCI stakeholders – industry sectors representation

Government

Stakeholder group Types of engagement undertaken

Consultation on policy, regulatory and matters related to standards

Strategic projects

Participation in key government working groups, delegations and events

Convening government-industry policy discussions

Issues relevant to stakeholder group

Secure India in the cyber space

Development of regulations, policies and standards for the benefit of the industry

Enhance India’s role in the global platforms on issues in the domain of trans-border data flows, cyber security, privacy, internet governance and related matters

PPP model of engagement in key areas

Encouraging Research and Development (R&D)

Building capacity in cybercrime investigation

Criminal Justice System (Police, Public Prosecutors and Judiciary)

Trainings and workshops across India through seven cyber labs to strengthen the investigation capabilities in cyber forensics

Special sessions on cybercrime awareness in tier II cities in India

Cybercrime investigation capabilities and capacity

Speedier trials for cybercrimes

7DSCI | Data Protection Outlook 2015-16

Page 8: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Stakeholder group Types of engagement undertaken

Industry & industry associations

Policy enablement

Partnership and participation in national-level initiatives

Building a formal industry level mechanism

Industry advisory

Participation in international standard development process

Surveys, studies and reports

Deliberation and discussions through participation in industry forums, roundtables and exclusive events

Industry development through improving organisations security posture by helping them build forward leaning defense

Help organisations demonstrate implementation of a sound privacy program, enhance trust and provide assurance to data subjects, regulators and clients

Research and innovation

International organisations

DSCI participation in key international forums

Partnering for reports and publications

Establish global Internet principles, evolve global norms and treaties for complex subjects such as cybercrime, cyber security, privacy, intellectual property, while also respecting the sovereign rights of nations

Bridge the digital divide among nations

Academia & students DSCI Internship Program

Skills & Capacity Development Programs

University awareness workshops

Involving academia for enhanced knowledge-based research

Inclusion of Privacy and Security , as key focus areas of the curriculum in the Indian education system

Apprising the future workforce of employment opportunities in the cyberspace

Corporate members Contribution to our programs and initiatives

Exclusive access to roundtables with key stakeholders

Participation in flagship DSCI events and other initiatives

Invitation to Policy inputs and consultations

Partnerships for surveys, studies and reports

Best practices for setting up organizations that are cyber resilient

Industry collaboration and advisory

Policy with respect to data protection, cyber security and information security

Contribution to international standards

Chapter members Regular chapter meetings

Opportunity for participation in national and international initiatives

Ongoing changes in the cyber landscape in the domains of privacy, security, technology, cloud and trans-border data flows

Media Connect the media to thought leaders for varied viewpoints

Press releases & one-to-one press interactions

Press enquiries

Impact of cybercrimes on Indian economy

Growth of an indigenous cyber security ecosystem

Cyber security vis-à-vis Digital India and Make in India

Issues relevant to stakeholder group

8 DSCI | Data Protection Outlook 2015-16

Page 9: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

In 2015-16, we continued to work in close collaboration with the industry to address the key challenges faced by them in building and strengthening their cyber security infrastructure and establishing best practices, frameworks and guidelines. Through meetings, workshops, and expert professional guidance, DSCI shared expertise on significant specific cyber security issues faced by member organisations, as well as chapter members. Some pertinent issues addressed included advisories on Information security implementation and strategy, performance criteria for SIEM solution, email security, implementation of next-gen security architecture, and security and privacy consideration of analytics and the use of Google Maps by energy companies.

As part of the DSCI Corporate membership program, sessions on cybercrime, cyber laws and incident response management were organised at the premises of various banks and insurance companies including State Bank of India, HDFC Bank, Reliance Insurance and Kotak Mahindra Bank. These sessions provided Information security and Incident response teams with an insight into the emerging trends in cybercrimes, existing legislation and integrating computer forensics into the incident response system.

Our collaboration extended across organisations, to include new start-ups, small to medium enterprises and large corporates across industry sectors.

Securing organisations and individuals in the cyberspace Our corporate members and chapters

We have structured the membership program to be comprehensive, so that it converges with the organisational goal for making their internal security practices and structure more robust and resilient and the larger goal of making the cyberspace safe, secure and trusted. We would like to offer the industry in India, a voice that can shape the future of cyberspace in India.

Nandkumar Saravade, CEO, DSCI

“ “Opportunities to engage with government bodies

and regulators

Member focus

Connect with DSCI Cyber Lab for incident response and

investigation

Meeting demands

Gainful networking for exchange of experiences and

knowledge-sharing through DSCI chapters, and participation in events

Building community

490 Corporate Members*

*For a complete listing of our corporate members, please refer to page 29

Industry sector Year 2015- 16

BPM 131

IT Services 211

Telecom 08

BFSI 27

Security 22

Others 91

9DSCI | Data Protection Outlook 2015-16

Page 10: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

During the past year, our Chapters organised meetings on various facets of cyber security and privacy. Our regional presence encompasses a strong community of more than 4,000 security and privacy professionals spread across 12 cities of Delhi, Mumbai, Pune, Kolkata, Bengaluru, Hyderabad, Chennai, Bhubaneshwar, Ahmedabad, Chandigarh, Jaipur and Coimbatore.

Regional engagement to strengthen the national cyber ecosystem DSCI Chapters

Chapter

Ahmedabad Anchor: Abhilash V. Sonwane, Elitecore Technologies Pvt. Ltd.

Bengaluru Anchor: Srinivas Poosarla, Infosys Co-anchor: V. Rajesh Kumar, HCL Technologies Ltd.

Bhubaneshwar Anchor: Souvik Ganguly, Tata Consultancy Services

Chandigarh Anchor: Divya Bansal, PEC University of Technology

Chennai Anchor: Roop Chander, Independent Consultant

Coimbatore Anchor: Balaji Raju, AES Technologies Co-Anchor: Ravichandran, Nilgiris Chemical Stoneware

Delhi & NCR Anchor: K S Ponia, Tech Mahindra- Noida Region

Hyderabad Anchor: Leela Krishna, Broadridge Financial Solutions India Pvt. Ltd.

Kolkata Anchor: Partha Sengupta, ITC Co-anchor: Anupam Agarwal, TCS and Somak Shome, SREI

Mumbai Anchor: Burgess Cooper, Ernst & Young Co- Anchor: Venkatesh Subramaniam

Anchor/ Co-Anchor

10 DSCI | Data Protection Outlook 2015-16

Pune Anchor: Dr Arvind Tilak, Ascent Intellimation Pvt. Ltd.

Jaipur Anchor: Dr Ajay Data, Data Infosys Ltd.

Page 11: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

PROGRAMS &INITIATIVESAs an industry body, we engage with diverse stakeholders, for activities that spin off from our core strategic objectives. Our engagement covers different aspects to include:

Public Advocacy: DSCI takes a proactive role in ‘policy enablement’ that affects Information and Communications Technology (ICT) engagement and enactment through the Government

Thought Leadership: DSCI undertakes studies and surveys to develop reports on various facets of Data Security, Privacy, Cyber Security and Internet governance in India. These reports highlight the current state and concerns of cyber security, data security and privacy

Outreach Programs: DSCI through its different programs, connects with stakeholders to draw focus on data security, privacy and cyber security concerns and DSCI approach on data protection

Capacity Building: DSCI is actively involved in developing and imparting training and capacity building for various government and corporate entities

11DSCI | Data Protection Outlook 2015-16

Page 12: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Our work in cyber security has led to substantive and sustained engagement with the government to strengthen the cyber security posture in India and promote the country’s interests at various international forums, through engagements with key stakeholders. With the industry, DSCI works on cross-industry information sharing, incident management, awareness, and capacity building, through its various initiatives and programs. A growing focus area has been the creation of an ecosystem to promote the growth of Indigenous security product and services startup companies. Last year, we contributed to the Joint Working Group (JWG) on Public Private Partnership (PPP) on Cyber Security.

DSCI-NASSCOM establish Cyber Security Task Force (CSTF)

To give shape to the honourable PM’s vision of India’s leadership in the emerging field of cyber security by making India a global hub of cyber security products and Services (solutions), DSCI-NASSCOM set-up the Cyber Security Task Force (CSTF) in May 2015. The CSTF’s charter entails due focus on building key recommendations on the four pillars namely industry development, cyber security policy landscape, state-of-the-art ingenious technology solutions and skills development.

The CSTF aspires to build the USD 35 billion cyber security industry by 2025; create a trained base of One million certified and skilled cyber security professionals and build 1000 successful security product companies in India, the important initiative has truly become a pan-India initiative in the cyber security domain by engaging business security leaders from over 150 organizations.

CSTF formed Working Groups in the four areas and several round of discussions and meetings were held in all major cities including Mumbai, Hyderabad, Bangalore, Pune and Chennai. Senior leaders from the government, industry and academia interfaced to draw inputs and chart out actionable recommendations to actualize the aforesaid vision.

Additionally, NASSCOM-DSCI have commissioned a study on building ‘Industry Roadmap for Cyber Security’ for next 10 years to PwC. The study commenced in January 2016 and is expected to be ready soon.

Engagement with SSC NASSCOM on cyber security

DSCI has been working in collaboration with IT-ITeS Sector Skills Council NASSCOM (SSC NASSCOM) to further the objective of creating skilled and certified cyber security professionals. The overarching objective of the endeavour is to address the gap between the rising demand and availability of industry ready cyber personnel. During the first phase of the initiative, DSCI is developing standardized courseware for the ten most upcoming job roles in the cyber domain. During its development, DSCI engaged the industry in the validation process. In December 2015, DSCI and SSC NASSCOM launched a courseware for the role of ‘Security Analyst’. The courseware encompassed a student’s handbook and a facilitator guide.

The courseware for the ten QPs, once ready, shall be rolled out in universities and colleges across the country via SSC NASSCOM channels. It will also be a part of the SSC ecosystem- ‘Train the Trainer’ program that will lead to the creation of ‘Master Trainers in Cyber Security’ in the country, who will be well-equipped to train the potential workforce entrants further.

MoU between DSCI, SSC NASSCOM and SANS on cyber security agenda

In order to accelerate India’s leadership in the global cyber security field, a partnership was established between DSCI, SSC NASSCOM, SANS Institute and Global Information Assurance Certification (GIAC), a SANS affiliate and global leader in cyber security certifications.

The Memorandum of Understanding (MoU) articulating the collaborative objectives of the three organisations was signed in December 2015 in New Delhi. The impetus to initiate such a partnership emerged from the Skills Development Working Group within Cyber Security Task Force to expedite a national roll-out of skill development in the cyber security field.

e-Security Index project by DeitY

In 2014, DeitY awarded the ‘e-Security Index-Phase II’ project to us, to develop a robust model – a framework to measure cyber security preparedness of the country covering various dimensions including government’s policy and strategy, capacity building, cyber defense, standards, critical information infrastructure protection and international co-operation as well as industry efforts.

Execution of this phase is underway. As part of this phase, a robust model is being worked upon for evaluating India’s national and sectoral cyber security preparedness. This model is primarily data-driven, where detailed statistical analysis will help identify significant areas for improving the cyber security posture.

Cyber Security

12 DSCI | Data Protection Outlook 2015-16

Page 13: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

The complexity of international business demands factorization of a maturing business and technological landscape, rapid globalization, increasing value of data and its exchange over e-borders. These, in turn necessitate an examination of data policies, frameworks, practices and standards of the country.

The huge gap in the market share of Indian Information Technology and Business Process Management (IT-BPM) industry in the European Union (EU) at 25% vis-a-vis global market share at 55%, highlights the fact that the industry has been unable to realize its full potential in the EU. The data protection issues are seen as primary reasons for the lack of headway in this market. A key impediment is the EU Data Protection Directive (Directive), which through Article 25, sets out the criteria for assessing adequacy of data protection in the third country and where India is not considered as an ‘adequate’ country. EU allows legal instruments for data transfer, have been criticized heavily as complex and lengthy. Furthermore, the inconsistent implementa-tion and operationalisation increases compliance cost, thereby creating hurdles for the industry.

DSCI and NASSCOM, along with the Department of Commerce (DoC), Government of India and Department of Electronics and Information Technology (DeitY), have been continuously engaged with the EU on the issue of market access for the Indian IT-BPM Industry.

DSCI continued to engage with Department of Commerce (DoC) on the following:

India-EFTA TEPA negotiations: European Free Trade Association (EFTA) had prepared FAQs to help Indian IT-BPM companies to understand data protection regime. DSCI provided its comments on issues related to trans-border data flow as part of EU-EFTA TEPA negotiations. In the current scenario, Switzerland, a member of EFTA, is comparatively liberal than Germany and France; however, its data transfer norms are based on the EU standards

Engagement with Regional Comprehensive Economic Partnership (RCEP): DSCI provided inputs to DoC on cross border issues, Indian industry position on ICT infrastructure, data localization, data protection and privacy-related issues

EU-India Bilateral Trade and Investment Agreement (BTIA): The negotiation between India and EU BTIA on trans-border data flows has been reinvigorated

During the year, a meeting with the delegation of Swiss Parliamentarians was also arranged to exchange thoughts around bilateral trade, security and privacy concerns arising out of data transfers thereof impacting the overall business between the two countries. The Indian side comprising DSCI, NASSCOM and the industry representatives discussed concerns related to stringent requirements of Standard Contractual Clauses (SCCs) from Switzerland and EU countries and drew their attention to the justification for carving out a special agreement between the countries for easy and free-flow data transfers.

The delegation suggested setting up of an informal Working Group comprising stakeholders from both the sides to discuss the issues around data security and privacy on a common platform.

Trans-border Data Flows

Technology Foresight Study for the Financial Sector

To successfully predict future technological development in the financial sector, C-DAC and DSCI had jointly worked on the ‘Technology Foresight Study on Information and Communication Security in the Financial Sector’. The study aims to highlight future scenarios, allied cyber security threats and vulnerabilities, plan solutions and enable policy environment. With consultation from industry, academia and government, the study will now focus on in-depth analysis in the areas of Cloud and Virtualisation, Industrial Control, Big Data, IoT and financial systems. The project completion is expected by August 2016.

BFSI Roundtable

Witnessing the increasing cyber and fraud related risks in the BFSI industry, DSCI convened quarterly roundtable meetings with the Chief Information Security Officers (CISOs) and Heads from Fraud and Risk Management, especially from this sector to deliberate on recent challenges faced by them. Half day Interactive discussions were held with the experts from leading Indian banks on ‘Cyber Security in Banks – Past, Present and Future’ that focused on the need for action at the industry level, and emerging roles of CISOs in the designing of new business models for banks. The roundtable also witnessed leading law enforcement officials sharing their on ground experiences and knowledge on the recent trends in call centre frauds, menace of data leakage and their prevention strategies in the financial industry.

DSCI has introduced these meetings with BFSI sector members to provide them with specific inputs on issues of relevance to them.

13DSCI | Data Protection Outlook 2015-16

Page 14: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Cloud Computing

Cloud computing has massively impacted the global IT landscape. Fast-paced adoption of diverse models of cloud and technologies has made it a definitive game-changer, with cyber security and privacy emerging as a top concern in the domain. To contribute in secure cloud adoption, DSCI engages all stakeholders involved in the cloud evolution from end-users and service providers to academicians. Our work on cloud computing encompasses key outcomes around the critical challenges of regulation, security and privacy and overarching governance issues. We have been actively involved in the study and analysis of the policy direction of governments worldwide, including contributing in the development of international cloud standards and creation of assurance mechanisms and clarification of existing laws.

Empanelment of cloud service providers by DeitY

The Department of Electronics and Information Technology (DeitY) created a model for provisional empanelment of cloud service providers, for governmental department and agencies to better leverage cloud services for their use. A more robust framework is currently work in progress.

Working Group on Cloud Computing

DSCI continued to participate in the Working Group on Cloud Computing set up by DeitY, and contributed to the development of the Working Group recommendations. We have presented industry’s perspective on legal and policy-related issues in cloud computing, including matters related to data localisation in the meetings of the WG.

Workshop on cloud data governance

A workshop was convened by DSCI on Cloud Data Governance and aimed at deliberating issues around data governance and data classification. The workshop focused on deriving outcomes to help government departments and agencies get acquainted with guidelines, international best practices, strategies and techniques in their journey towards cloud adoption. It also synthesized government and industry inputs to work towards formulating a robust framework to help government agencies evaluate and adopt the most appropriate cloud-based solutions.

Besides panel discussions, the uniquely creative format of the workshop encompassed an assessment of policy and guidelines, white-board exercises, a consultation on draft papers , a checklist preparation, and eventually developing a ‘Cloud Decision Matrix’. The workshop, supported by Microsoft, was attended by over 60 key participants from government, defence industry, public sector and consulting organisations.

Our work has strongly advocated a multi-stakeholder model for Internet Governance (IG), which is proportional to the Internet population of nations. We envision a larger role for and by the private sector, standards bodies, civil society and academia in the multi-stakeholder approach. The approach stresses on the fact that the roles and responsibilities of all the stakeholders should be clearly defined and parts of the governance which cannot be run by the government, should be passed on to other stakeholders such as industry, academia, civil society. In this regard, we are engaged in continuous consultation with the government and representation of its views at various global forums including The Institute of Electrical and Electronics Engineers (IEEE), Internet Engineering Task Force (IETF), The World Wide Web Consortium (W3C) International Organization for Standardization (ISO).

Meeting with industry associations

A meeting was convened by DSCI with industry associations to encourage industry participation of Indian organizations on the Internet governance global platforms such as Internet Corporation for Assigned Names and Numbers (ICANN), Internet Governance Forum (IGF), Internet Engineering Task Force (IETF) and Asia-Pacific Regional Regional Internet Governance Fo-rum (AprIGF), besides global standards, protocol development forums to develop the Indian industry’s position on IG matters.

WITSA, Cyber Security and NetMundial initiative on Internet Governance

DSCI along with NASSCOM provided inputs and comments for WITSA’s Policy Principles Working Group (WG) on cyber security, privacy and data protection. We also provided our inputs on NETMundial Terms of Reference (ToR), to discuss principles for governance of the internet.

Internet Governance

14 DSCI | Data Protection Outlook 2015-16

Page 15: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

GoI Policy on the Internet of Things

Our team provided inputs on the draft Internet of Things (IoT) policy issued by the Government of India. As part of the inputs, we underlined the importance of security, privacy and safety in IoT design and implementation, and the need to build institutional capacities to work on these issues through the establishment of a Center of Excellence.

Inputs were also provided on National Telecom M2M roadmap focusing on a legal regime for security risks, making M2M free from regulator reach, privacy issues alignment with global efforts of harmonizing privacy rule for cross-border data transfer and adoption of international standards.

Internet of Things

Inputs on IANA Stewardship Transition Coordination Group (ICG) Draft Proposal

The draft proposal, although detailed in many aspects, fails to address contentious issues that were primary reasons for initiation of the stewardship transition process. We firmly believe that any change to the current ecosystem should address basic principles like stability, security, scalability, reliability and smooth operation of the Internet, while enhancing the multi-stakeholder model. DSCI gave inputs on the draft proposal. The proposal has been finalized and shared with NTIA for implementation.

Read

Inputs on TRAI consultation

DSCI drafted and submitted its responses to Telecom Regulatory Authority of India (TRAI) Consultation Paper on Regulatory Framework for Over-The-Top (OTT) Players. The responses, were against question numbers six and seven in particular, pertaining to security and privacy concerns. We are of the view that security concerns should be viewed from a risk view point and not only cover communication services, but an entire gamut of services over the internet. We shared our comments with justifications on how should OTT players’ offering application services ensure security, safety and privacy of the consumers, besides ensuring protection of consumer interest.

Read

Inputs to DoC on RCEP Trade Discussion on e-Commerce

The eighth round of negotiation for Regional Comprehensive Economic Partnership (RCEP) trade agreement was held in June 2015, where discussions took place on provisions to harmonize e-commerce regulations and intellectual property provisions, among others. DSCI, through DoC provided inputs on security, cybercrime penalty provisions and privacy aspects in IT (Amendment) Act, 2008, Indian Penal Code and other regulatory regimes affecting the e-commerce industry.

e-Commerce and WTO

DSCI participated in the meeting convened with DoC to discuss issues related to the e-commerce industry and proposal presented by the US, EU and Japan at the World Trade Organization (WTO). Pertinent issues discussed included efforts to facilitate the growth of e-commence in India, FDI, taxation, localization of servers, access of data in cloud, cross-border data flow and data protection. The aspect of e-commerce has regulatory and policy implications on the IT services industry that does not support data localization. Based on a request by DoC, we prepared and submitted its response to NASSCOM, for the proposals being discussed at WTO, as part of a joint submission.

Issues of e-Commerce Industry

15DSCI | Data Protection Outlook 2015-16

Page 16: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Increasing technological advancements are creating new challenges from a data privacy perspective. The advent and adoption of big data, social media, cloud computing, Internet of Things (IoT), smart cities and other aspects have been reshaping the realms of data collection and its usage. We have successfully brought these issues into the mainstream, and elevated the level of privacy-related debates in the Indian context, and contributed to a burgeoning global discussion. In order to address the industry’s concern, DSCI has been continuously engaging with various government departments, particularly the Department of Personnel and Training (DoPT), for a comprehensive privacy bill considering the recommendations made by the Justice A.P. Shah Report published in 2012.

Paper on Privacy Protection Provision under IT (Amendment) Act

A paper highlighting the privacy protection provisions under IT (Amendment) Act, 2008, was submitted to the Department of Commerce (DoC). It was based on the recommendations proposed under Justice A.P. Shah ‘Group of Experts on Privacy Report’ and emphasized on the need to enact a comprehensive framework for privacy in the form of a ‘Privacy Law’ in the country. The paper discusses recommended features for a privacy law including the implications for adequacy requirements stipulated by EU, proposed privacy principles and a regulatory framework for privacy.

Analysis of EU-US Privacy Shield and Aadhar Act submitted to DoC

An analysis on EU-US Privacy shield framework and Aadhar Act was submitted to the DoC. The document discusses the chang-es announced in the recent Privacy Shield agreement, including the critical obligations on the US companies, redress of rights/ recourse of EU citizens, US Department of Commerce and Federal Trade Commission Oversight and Enforcement, limits on US Government access, strengthening of US legal framework and potential impact on India. The analysis of the new Aadhar law elaborates important definitions, provisions and observations on various provisions of the Act.

DSCI Training and Certifications

DSCI currently runs two certification programs – DSCI Certified Privacy Lead Assessor (DCPLA©) and DSCI Certified Privacy professionals (DCPP©). A great step forward in forfeiting DSCI-academic collaboration has been the adoption of the DSCI Privacy Framework (DPF©) by the University of Madras, as part of their syllabi in MSc Cyber Forensics and Information Security. To protect privacy of personal information from unauthorized use, disclosure, modification or misuse, DSCI has conceptualized its approach towards privacy in the DPF© which is based on the global privacy best practices and frameworks. The teaching of this coursework to students aims to enable students to understand, approach and implement enhanced data privacy protection.

Privacy Protection

325 professionals DCPLA© certified

375 professionals trained

125 organisations 23 total batches

Making organisations privacy-proof: DSCI Certified Privacy Lead Assessor (DCPLA©) Program

Eight batches of the three-day DCPLA© training and certification program were organised in the major cities of India including Delhi, Bengaluru, Chennai and Mumbai during the year.

The DCPLA© program aims to create a pool of assessors who are equipped with necessary tools and skills to undertake privacy assessments of organisations, in line with DSCI requirements. The assessors, including those from Assessment Organizations (AOs), are trained and certified by DSCI as DSCI Certified Privacy Lead Assessor (DCPLA©).

16 DSCI | Data Protection Outlook 2015-16

Page 17: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

400 registered

27 Honorary certifications

Development of standards at ISO

International Organization for Standardization (ISO) and the International Electro-technical Commission (IEC) form the specialised system for worldwide standardisation. ISO/IEC/JTC 1/ SC27, a joint technical committee of the international standards bodies – ISO and IEC on Information Technology (IT) security techniques, conducts regular meetings across the world with currently 51 countries, as ‘Participating Members, that play an active role in the work of technical committees or Working Groups (WG), along with a few countries as ‘Observer’ members. India is one of the participating members.

As part of these, participating countries also have the right to vote in all standards-related official ballots. The representatives of the country work on the preparation and development of the international standards and provide feedback to their national organizations. Through the Bureau of Indian Standards (BIS), we have been participating and encouraging industry participation in the WGs since 2012. Subsequent to the meeting in Hong Kong in 2014, DSCI along with the industry representation, participated in the meeting held in Malaysia in May 2015 and hosted the next WG meeting in India under the aegis of BIS.

ISO/IEC/JTC1 SC27 Working Groups Meeting in Jaipur

In collaboration with the Bureau of Indian Standards, DSCI hosted the ISO/IEC/JTC1 SC27 WGs meeting in Jaipur from 26-30 October 2015. This key set of WGs convened in India for the first time, and provided a great opportunity for the leading Indian companies to demonstrate and gain expertise in security, contribute to standard setting in strategically relevant areas, apart from long-term networking opportunities.

The five-day event helped project India’s thought leadership in the security domain, with the convergence of more than 300 experts from 33 countries. Over85 experts represented India and deliberated on international standards on privacy, security and risk management in IoT, cloud computing and other contemporary technologies, besides updating a few existing standards. Experts collaborated and discussed the development of standards encompassing generic methods, techniques and guidelines to address both security and privacy issues in the below five areas:

ISO/IEC JTC 1/SC 27/WG 1 Information Security Management Systems

ISO/IEC JTC 1/SC 27/WG 2 Cryptography and Security Mechanisms

ISO/IEC JTC 1/SC 27/WG 3 Security Evaluation, Testing and Specification

ISO/IEC JTC 1/SC 27/WG 4 Security Controls and Services

ISO/IEC JTC 1/SC 27/WG 5 Identity Management & Privacy Technologies

International Standards

Building the privacy profession: DSCI Certified Privacy Professional (DCPP©)

The focus on developing a strong workforce for privacy in the country, has gained momentum with the DSCI Certified Privacy Professional (DCPP©) Certification program by garnering a great response from the student community and industry, alike. The Privacy Body of Knowledge (PBoK) has been appreciated for its succinct coverage of privacy concepts, updates on the prevalent privacy landscape in India and major economies and technology aspects that impact privacy. Lawyers, compliance officers, information security auditors and graduates have registered for the program to enhance their understanding and knowledge on privacy - as security or privacy professionals. This past year has also seen increased engagement between industry-academia in promoting the DCPP© certification.

17DSCI | Data Protection Outlook 2015-16

Page 18: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

These standards, some enforceable by clients and others de-facto standards for operations are sooner or later adopted by organizations across the world.

The delegation from India participated actively in the WG meetings and proceedings. In particular, the Indian delegation proposed two new standards on Privacy – ‘Privacy in Smartphone Applications for Developers’ and ‘Privacy in Smart Cities’. These got readily accepted and study periods have been formed to initiate work on both. A few experts from the Indian delegation opted for designated positions such as co-editor of certain study drafts, rapporteur and co-rapporteur for cyber resilience and cyber insurance standards, among others. Overall, the Indian delegation successfully created a positive impact in all the WGs and going forward, it is expected to contribute significantly in ISO SC27 standards development. Consequently, the Bureau of Indian Standards has again proposed to host a meeting in India in 2018.

Influencing international debates in cyberspace Our global engagements

India 85 UK 18 Japan 35 China 17 Germany 22 France 17 South Korea 18

I am extremely delightful to see an event being organized on international standards in the area of information security. Standards have been bringing much business impact in various industry including telecom and ICT, but as the threats are expanding each day, standards or making of standards in the cyber security is a much daunting and complex task, hence and harmonized and collaborative efforts from various sectors and bodies are required to address the emerging technologies in this area. I am glad an assertive step in this area has already been started.

““- Dr Gulshan Rai, National Cyber Security Coordinator,

Government of India

Countries with highest representation at ISO/IEC/JTCI SC27 meeting in Jaipur

Inputs to NSCS on India-US Cyber Dialogue

Deputy NSA, India led the Indian delegation, at the India-US Cyber Dialogue. Our inputs to NSCS on the matters such as export control regime, trans-border data flow, data localization, MLAT reform, and increasing regulatory intent to make service providers liable.

Meeting with Federal Trade Commission, US

Increasing fraudulent telemarketing activities using VoIP, are becoming rampant and pose a noticeable challenge for the thriving reputation of the Indian Business Process Management (BPM) industry, as most of these illegitimate call centre activities in the US, are apparently found to be originating from India.

To address the growing threat of deceptive and unlawful telemarketing, Federal Trade Commission, USA and DSCI hosted a joint workshop for the second time in New Delhi post receiving valuable inputs from large Indian IT- BPM organisations, industry last year on plan to guide industry, LEAs and government regulators to adopt a comprehensive and strategic approach to address this challenge, the second meeting was convened to formulate the way forward to curb the menace and uphold India’s reputation as a country with fair business practices.

Key meetings in the United States

CEO, DSCI interacted with the U.S.-India Business Council (USIBC), Information Technology and Innovation Foundation (ITIF), Federal Trade Commission (FTC), United States Trade Representative (USTR), Department of Commerce, Indian embassy, CSIS and other bodies to discuss diverse policy issues concerning India including data localization, encryption policy, privacy bill, security and safety testing of ICT products, draft IoT policy and Internet governance.

18 DSCI | Data Protection Outlook 2015-16

Page 19: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Interaction with Lockheed Martin

An exclusive interaction with James E Catterton Jr., Technical Director Global Access Solutions Division, Cyber Solutions, Lockheed Martin was convened on the topic of Cyber Kill Chain. He described in detail the Lockheed Martin Cyber Kill Chain framework and how it enables a proactive response to persistent threats by identifying and preventing cyber intrusions activity. The interaction was attended by user and cyber security product member companies.

Hague Security Delta Delegation meeting

In collaboration with the Netherlands Embassy, DSCI hosted a delegation from the Hague Security Delta, Europe’s largest Cyber Security Cluster. J S Deepak, Secretary IT, who delivered keynote address, accentuated the importance of cyber security in the overall Digital India agenda and the crucial role played by such engagements. The event saw participation from varied sectors and domains which culminated with fruitful interactions between the two sides.

NTUs’ CENS cyber security workshop in Singapore

Our team participated in a panel discussion on ‘Emerging Issues, Trends, Technologies and Threats in 2015 and Beyond’ and highlighted the cyber security landscape in India, focus on challenges and threats in the prevailing geo-political landscape, and developments in India in the recent years (including NASSCOM Cyber Security Task Force). Participants were also updated on the official positions of the Industry and Indian government (in public domain) on various matters in cyber security, privacy, Internet governance and cyber laws.

DSCI has ceaselessly worked to support and build the capacity and capabilities of Indian Law Enforcement in cybercrime investigation and cyber forensics through its Cyber labs initiative. It also undertook the initiative of development and publishing of resource material on cybercrime investigation.

Cyber Lab activites

In 2015-16, over 1500 police officers were trained under a standard program on cybercrime investigation in the seven Cyber Labs across India. Apart from the five-day training programs, DSCI Cyber Labs also conducted short courses (two-three days) and trained 2,621 officials from the police, military forces and other government departments.

Keeping up pace with cyber threats Cybercrime investigation and cyber forensics

Five-day programs

Three-day programs

Short Course

Supported LEA in cyber investigation cases

1581

149

2472

509

Cyber Lab trainings April 2015-March 2016 Till date, more than 55,000 personnel from Law enforcement, prosecution department, Judiciary and other departments have been trained in cybercrime investigations and cyber forensics.

To standardize the operating procedures for cybercrime investigation, DSCI developed and published the Cybercrime Investigation Manual and Level 1 training material based on its experience of operating the Cyber Labs and working with

19DSCI | Data Protection Outlook 2015-16

Page 20: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

the police in handling many cybercrimes over the last few years. The Level-2 Cybercrime Training Material was developed and released incorporating the latest developments in the realms of law and technology. Subject matter experts including leading cybercrime investigators from several state police units, National Police Academy (NPA) and the Crime Branch of India (CBI) have contributed in developing the resource material. The content has been vetted by CBI, and several state police cybercrime units, thereby enhancing the credibility of the training material.

Cybercrime Awareness Workshops

DSCI with the support of DeitY, and in association state police of Kerala, Odisha Jharkhand and Nagpur held two-day awareness workshops on combating cybercrimes. . These workshops witnessed participation from police officers, public prosecutors and judiciary.

Roundtable with e-Commerce intermediaries

DSCI assisted NASSCOM to organize a meeting of the e-commerce leaders with the Karnataka State Police in February 2016. Mr Pratap Reddy, IPS, Addl. DGP, CID Karnataka chaired the meeting. More such meetings at other locations are planned.

Participation in (ISC)2 workshop

DSCI participated in the Test Pulling workshop organized by (ISC)2 for their digital forensics certification - CCFP in Washington DC in April 2015.

Special session

DSCI organized a special session on ‘Critical Information Infrastructure (CII) and case studies with embedded device forensics’ led by Dr.Sujeet Shenoi, Professor from University of Tusla, Oklahoma, USA at the DSCI Bangalore Cyber Lab in December 2015.

Outreach and awareness7th Best Practices Meet

The seventh edition of the annual DSCI Best Practices Meet (BPM) in Bengaluru between 9-10 July, saw enthusiastic participation from over 350 professionals. The conference was inaugurated by K K Natarajan, CEO, MindTree. Highlights of the agenda included workshops on Cyber Insurance, Management of Legal Risks in IT-enabled businesses, breakfast sessions on day two discussing wearables and their relevance to an enterprise’, besides engrossing track sessions, policy updates and plenary sessions.

300 delegates 50 speakers 22 sponsors & exhibitors

India Meets for Security: NASSCOM-DSCI Annual Information Security Summit (AISS) 2015

NASSCOM-DSCI Annual Information Security Summit has emerged as the definitive cyber security conference in the country. The 10th edition was held in New Delhi and witnessed participation by over 600 delegates and 163 eminent speakers representing diverse perspectives. The event was inaugurated by

20 DSCI | Data Protection Outlook 2015-16

Page 21: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Challenges in the cyberspace cannot be handled alone. It requires a continuous multi-stakeholder, collaborative and knowledge-sharing approach. The immense knowledge-exchange opportunity provided by this Summit is truly unique. It is meets the contemporary needs and requirements of the cyber security and privacy professionals and business leaders.

“- Dr. Arvind Gupta, Dy. NSA and Secretary NSCS, Government of India

5

12

52

4

Workshops

Keynotes

Sessions

Breakfast meets

700+ Delegates 163 Speakers

33 Sponsors & Exhibitors

Key highlights this year include, focussed sessions on contemporary trends and evolutions in cyber security and privacy through roundtables, workshops and breakfast meets, and policy issues through track and plenary sessions. The Summit included features like Excellence Awards to honour the organizations and individuals, innovative ideas briefing at the DSCI innovation Box-Most Innovative Idea of the year competition, poster competition for students, product displays at the exhibition stalls and several key notes. Some of the thought-provoking topics covered in the Summit were cyber security and privacy policy, security architecture, SCADA security, big data, smart cities, security automation, Internet of Everything, APTs, Reverse Engineering, Cyber Forensics, Robotics and cyber security industry development. The event concluded with a motivational talk by Devdutt Patnaik - renowned author, speaker, illustrator and a mythologist.

Testing Security Practices Against the Best: DSCI Excellence Awards 2015With the mission to create trustworthiness of Indian companies as global sourcing service providers, and to assure clients across the world of India as a secure destination for outsourcing, the Excellence Awards have been widely acknowledged. Instituted in 2011 and renowned for its value, DSCI Excellence Awards constitute independent judges from the industry and academia, with PricewaterhouseCoop-ers (PwC) as the Process Partner.

Traditionally categorized into two segments, namely Corporate and Law Enforcement, a new, third segment - Products, and two new categories, were added this year. The new ‘Product Segment’ entailed the ‘Award for Emerging Information Security Product Company’ and ‘Innovation Box’. The two new categories included the ‘Award for Raising Security Awareness’ within the Corporate Segment and the ‘Award for Prosecution of Cases Using Technological Aids’, in the LEA segment. With this, the awards had a total of 19 categories.

Chief Guest Alok Joshi, Chairman, NTRO presented the awards to the winners in various segments. DSCI Excellence awards were conferred upon the winners’ at the NASSCOM-DSCI Annual Information Security Summit.

21DSCI | Data Protection Outlook 2015-16

Page 22: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Ganesh Natarajan, Vice Chairman and CEO, Zensar TechnologiesBakul Dholakia, Director General of International Management Institute, DelhiLt General (Retd) Davinder Kumar, scholar, soldier and a thinker, formerly CEO & Manag-ing Director of Tata Advanced Systems LtdK Ramkumar, Executive Director on the Board ofICICI Bank and is the President of ICICI Foundation

Jury - Corporate

Loknath Behera, Director General of Police, Kerala PolicePratap Reddy, Additional Commission-er of Police – West Zone. Bengaluru, KarnatakaVakul Sharma, Advocate, Supreme Court

Krishna Sastry Pendyala Head-Fraud Management & Digital Forensics, Enterprise Security & Risk Management Group, TCS

Jury - Law Enforcement

Abhay Karandikar, Professor, Dept. of Electrical Engineering, IIT-BombaySandeep Singhal, MD, Nexus India Capital Advisors Saurabh Srivastava, Co-founder and Former Chairman, NASSCOM

Dr Siva Sivasubramaniam, CISO, AirtelT V Mohandas Pai, Chairperson, Manipal Global Education Services Pvt. Ltd and Co-founder, AARIN Capital

Jury - Products

Bank Vijaya Bank – Public Sector Axis Bank – Private SectorTelecom Bharti Airtel Ltd.e-Governance UIDAIe-Commerce Make My Trip India Private Ltd.IT Services- Large L&T Infotech IT Services- MSME Hughes Systique Pvt. Ltd.BPM- Large EXL ServicesBPM- MSME Broadridge Financial Solutions (India) Private LimitedEnergy Cairn India Ltd.

Outsourcing Sector iGate Global Solutions Ltd.Other Sectors Vodafone India Pvt. Ltd.

HDFC Bank Ltd.

Privacy Leader of the Year Satyanandan Atyam – Bharti AXA General Insurance Ltd.Security Leader of the Year Amutha Arunachalam – UIDAI(e-Governance Sector) Security Leader of the Year Manju Sood – ONGC(Energy Sector) Security Leader of the Year Bhavani Shankar R V – iGATE Global Solutions Ltd.(IT- Sector) Security Leader of the Year Sameer Ratolikar - HDFC Bank Ltd.(Banking Sector) Security Leader of the Year Sharad Sadadekar – HDFC Standard Life Insurance Co. Ltd.(Insurance Sector) Security Leader of the Year Uday Deshpande – Tata Motors Ltd.(Manufacturing Sector)

DSCI Excellence Award for Security in Organization

Winners of DSCI Excellence Awards 2015 in the Corporate Segment

DSCI Excellence Award for Privacy in Organization

DSCI Excellence Award for Raising Security Awareness

DSCI Excellence Industry Leader Awards

22 DSCI | Data Protection Outlook 2015-16

Page 23: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Emerging Information Security Product Company

DSCI Innovation Box – Most Innovative Idea of the Year

Indusface Pvt. Ltd.

Net Vigil Software Pvt. Ltd.

DSCI Excellence Award for Security Product and Companies

Securing the Future: Third Hyderabad Security Conference (HySec)

Recognized widely as an annual confluence of the security community in the Hyderabad region, the Third Hyderabad Security Conference 2015 was held in September. The conference theme, ‘Making Sense of the Threat Landscape: Securing the Future’, ensured broad sectoral participation from Hyderabad and surrounding areas, with more than 200 information security professionals. Anurag Sharma, IPS, DGP, Telangana inaugurated the event. In his inaugural address stressed on the essential need for building reliable models of collaboration in cyber security. The conference successfully garnered rich and diverse perspectives on topics ranging from cyber warfare to next-gen security architecture. Panel sessions addressed latest trends and opportunities, besides issues and challenges to help delegates map the threat landscape across businesses.

Encouraging privacy-fluency among the public: Data Privacy Day 2016

With the aim of sensitizing individuals and disseminating information on privacy practices and principles, DSCI celebrated International ‘Data Privacy Day’, on and around January 28, 2016. For the sixth year in a row, DSCI organised various activities for the privacy and security community, and larger public. It is an integral component of the data privacy wave in the country that DSCI has spearheaded.

Read more

Data Privacy Day 2015 | Highlights

200 privacy and security professionals

CEO, DSCI message to the privacy community

Adoption of Privacy-themed wallpaper in over 8 lac screens from over 150 organisations

Online quiz

Slogan contest over Twitter

India Cyber Cop of the Year for Excellence in Cybercrime Investigation

Capacity Building of Law Enforcement Agencies

M.D. Sharath, Deputy Superintendent of Police, Cybercrime Police Station, CID Karnataka Police

Dr Triveni Singh, Additional Superintendent of Police, Special Task Force, UP Police

CBI Academy, Ghaziabad

Winners of DSCI Excellence Awards 2014 in the Law Enforcement Segment

23DSCI | Data Protection Outlook 2015-16

Page 24: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

The Indian cyber security product forum is aimed at creating a conducive ecosystem for the development and sustainable growth of cyber security product and services organisations. DSCI has spearheaded diverse initiatives in various aspects through collaboration and engagement with key stakeholders. It has been encouraging movement between the public and private sectors to share expertise and innovation and bring newer ideas to the market.

Cyber Security Summit 2015

DSCI organized Cyber Security Summit on the side-lines of the NASSCOM Product Conclave 2015. Cyber Security Summit brought various stakeholders of this ecosystem together, on a common platform to discuss and deliberate on how to make the ecosystem more encouraging and conducive for the emerging companies. Over 80 delegates from cyber security product companies, user companies and investors participated in the Summit. Rajendra Pawar, Chairman and co-founder NIIT Technologies and Chairman Cyber Security Task Force emphasized on the importance of Cyber security product development and being recognized as a critical element under the national level security initiatives in India. He underscored that a mature ecosystem for security product development contributes to strengthening the cyber security posture of the country.

Advancing indigenous cyber products | Cyber Security Product Forum

Igniting discussions: partnered & participated events Session on Cyber Security – Risk, Response & Opportunity at NILF: A session on ‘Cyber Security – Risk, Response &

Opportunity’ was included in the agenda of NASSCOM India Leadership Forum. While ongoing disruptions including Social, Media, Analytics and Cloud (SMAC) and the Internet of Things (IoT) are bringing significant benefits to society, the increasing privacy & security concerns and multi-dimensional cyber threats are impacting the bottom lines of organizations. The session discussed the threat landscape saliently, the right approach to deal with it and the business opportunity for Indian IT companies and start-ups to extend their expertise to the cyber security problem.

DSCI-PetroFed Workshop on SCADA Security: DSCI in association with PetroFed organized a workshop on Supervisory Control and Data Acquisition (SCADA) Security for organizations in the Oil & Energy sector. The workshop witnessed enthusiastic participation from over 90 delegates with sessions encompassing SCADA fundamentals, implementation and operation; Instrumentation Security and Advanced SCADA Security. The discussions centred on increasing risks associated with the cyber world and concluded upon the pressing need of finding a solution to cyber threats, besides suggesting various tools for the same.

Cyber awareness initiative for academia in association with Mumbai police As a part of its efforts to educate the public and private sector partners about the internet and cyber security,

NASSCOM-DSCI announced the ‘Cyber Awareness Month’ initiative in collaboration with Mumbai Police. The initiative is aimed at building preventive measures to counter the increasing threats of cyber security through the notion of ‘Precaution is better than Cure’. As a precursor to this initiative, NASSCOM also held a workshop for academia in the city today, featuring notable speakers including Prashant Mali, Advocate, Harish Shetty, Psychiatrist, Sundeep Ballare, Mumbai Cyber Lab, DSCI, and Yogesh Thanage, Pune Cyber Lab, DSCI as well as officers from the Cybercrime Cell of Mumbai Police.

BFSI Roundtable Conference 2015

Witnessing the increasing cyber and fraud related risks in the BFSI industry, DSCI convened a roundtable meetings with the Chief Information Security Officers (CISOs) and Heads from the Fraud and Risk Management, especially from this sector to deliberate on recent challenges faced by them. Half day Interactive discussions were held with the experts from leading Indian banks on “Cyber Security in Banks – Past, Present and Future” that focused on the need for action at the industry level, and emerging roles of CISOs in the designing of new business models for banks. The roundtable also witnessed leading law enforcement officials sharing their on ground experiences and knowledge on the recent trends in call centre frauds, menace of data leakage and their prevention strategies in the financial industry.

DSCI conducts these meetings with the BFSI sector every quarter.

Corporate Membership Program-Sessions on Cybercrimes, Cyber Laws & Incident Response: As part of the DSCI Corporate membership program, sessions on cybercrime, cyber laws & incident response management was organized at the premises of various banks and insurance companies including State Bank of India, HDFC Bank, Reliance Insurance and Kotak Mahindra Bank. These sessions provided Information security and Incident response teams with an insight into the emerging trends in cybercrimes, existing legislation and integrating computer forensics into the incident response system.

24 DSCI | Data Protection Outlook 2015-16

Page 25: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

DSCI-Microsoft Security Symposium Held in Mumbai, the half-day symposium was marked by four plenary session. These divulged in the areas of coordinated

and collaborative security, an architectural paradigm for securing mobility and BYOD, security imperatives in public, private and hybrid cloud, besides exploring the security transformation to Digital India.

DSCI-Blue Coat Roundtable on Redesigning the Security Architecture for Next-gen Threats The meeting deliberated on areas including scalability and complexity of protection, visualization of advanced cyber threats,

complication of encrypted traffic management, advanced detection & response, next generation web security management, monitoring & forensics on the Encrypted Network, Security service model for cloud productivity and efficiency in advanced protection.

DSCI RSA Roundtable on Architectural approaches in Managing Identity and Access The meeting deliberated on the contemporary and evolving aspects of Identity and Access Management, and how they are

enabling extreme level of business flexibility as witnessed by trends of mobility, Bring Your Own Unsecure Device (BYOUD) and Cloud.

DSCI-RSA Roundtable on Security Operations The meeting deliberated on advanced security threats and security monitoring techniques, big data security data collection,

management and analytics with full network and log based visibility and automated threat intelligence.

Presented whitepaper on ‘Cyber Security Framework for Citizen Centric Services’ at 19th National Conference on e-Governance organized by the Department of Administrative Reforms and Public Grievances (DARPG), Department of Electronics and Information Technology and Maharashtra State Government

Download whitepaper

Presented whitepaper –on ‘International and Regional Responses to the Cybersecurity Challenges’ at the 18 Asian Security Conference 2016 organized by IDSA

Download whitepaper

CEO, DSCI delivered a keynote on Information Security and its convergence with fraud and corruption prevention at the ‘VII Anniversary of Vigilance Study Circle Bengaluru Chapter’.

CEO, DSCI delivered a keynote on ‘Imperatives of Building Digital Forensics as a Profession in India’ at WG 11.9 International Conference on Digital Forensics.

CEO, DSCI delivered a lecture at Dynamic CISO Summit at Mumbai CEO on ‘Security and Privacy Imperatives making Enterprises and Nations Digital’ at Security Summit hosted by CISO Academy –Dynamic CISO.

Participated at Brookings India Roundtable on ‘Nuclear Security in the Digital Age’ held under Chatham House Rule by Brookings

Panel Discussion on ‘Securing Transformation to Digital India’ on the occasion of Digital India Launch Program Maharashtra

Panel Discussion at a workshop on ‘Protection of Critical IT Infrastructure and Information from Cyber Threat’ organised by Goods and Services Tax Network (GSTN)

25DSCI | Data Protection Outlook 2015-16

Page 26: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

CORPORATE GOVERNANCEDSCI adopts and follows foremost principles of Corporate Governance and risk management. These principles comprehensively include ensuring compliance with regulatory requirements and achieving the highest standards of transparency, accountability and integrity in respect to all its transactions.

To protect and advance the same, DSCI has established clear processes and structured roles and responsibilities for people at various levels. A robust internal information systems ensures appropriate information flow to facilitate monitoring as well as adherence to processes in a timely manner.

To validate the appropriateness and effectiveness of its work as an industry association, DSCI works with the industry for support and feedback. DSCI remains connected to the industry through its 12 Chapters and 4000 members which represent various industry verticals. To streamline and particularly minimize costs in project execution, the process ensures adherence to project management principles which include project requirement definition, project resource management, project budgeting and expenditure and deliverables management. Tasks related to project budgeting, vendor selection and billing are carried out with prior approval of the management.

In continuation with the structure of the Board of Directors, under the leadership of Mr. G.K. Pillai, Chairman of Board of Directors, DSCI met quarterly to discuss its work and perpetuating a successful growth plan.

Integral to accommodating the expanding scope of our work and catering to the security and privacy needs of India, is the DSCI executive team which consist of eighteen full-time employees. The executive team will progressively continue its efforts towards a self-sustaining model.

The Board of Directors of DSCI appointed S.R. Batliboi & Associates LLP as statutory auditors, for the year under review. The management of DSCI is contended with DSCI’s efforts last year and is confident that DSCI, is and will remain a focal point for all data protection matters in India.

26 DSCI | Data Protection Outlook 2015-16

Page 27: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

DSCI INTHE NEWSDSCI saw widespread coverage of its initiatives and events in a variety of local and national media publications.

Rahul Sharma, DSCIDATAQUEST Read

Net Neutrality, Zero Rating, OTTs & TRAI

Vinayak Godse, DSCIBusiness Insider India Read

No place too safe? India’s Data Security Scenario

Vinayak Godse, DSCIBusiness Insider India Read

Is Facebook’s encryption key a threat to India’s national security

Nandkumar Saravade Read

Interview: CyberSec Task Force: ‘A Significant Move’ – CEO, DSCI

Aditya Bhatia, DSCIitVARnews Read

Interview: About DSCI

Nandkumar Saravade, DSCIBusiness Standard Read

Interview: ‘Cyber security business to be worth $40 bn by 2025’ – CEO, DSCI

Rahul Sharma, DSCIORF Cyber Monitor Read

Article: Shared Govern-ance: NASSCOM and the India Cyber Security Task Force

Vinayak Godse, DSCIPetroFed Journal Read

Article: Role of Analytics in Security of Operation Technologies

Nandkumar Saravade, DSCIChannelWorld Read

Interview: DSCI, NASS-COM Architecting Security for Digital Transformation

Articles & Interviews

27DSCI | Data Protection Outlook 2015-16

Page 28: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

28 DSCI | Data Protection Outlook 2015-16

Page 29: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

BLOG, PODCAST & SOCIAL MEDIA

DSCI announced its internship program for undergraduate and post-graduate students in engineering, management and law streams. DSCI has identified projects of national importance. Every internship project is led and mentored by DSCI team members.

The DSCI Blog acts as a central resource for thought leaders to converge virtually and sustain a meaningful dialogues on various interconnected aspects of cyber security, and data protection. To encourage thought leadership, we accept original articles and blog posts, round the year from professionals in the information security and related domains.

Access here: blogs.dsci.in

Blog

Launched in 2016 after a successful 10th AISS, you can now listen to our podcasts on pertinent issues in the cyberspace. Avid podcasters can now stay updated with our weekly podcasts.

Access here: podcast.dsci.in

Podcast

Our social networks have over the past year become a tool for communication, collaboration and dissemination of information. We engage with our stakeholders on a regular basis to keep them updated on the latest happenings at DSCI.

Visitor demographics- 67% Senior Managers in InfoSec

4.45% Highest engagement rate

1500+ unique visitors per month on Twitter

3,900 tweets since inception

LinkedIn – Our most active platform

Social Media

Internship Program

2800+ followers 1900+ followers 4500+ likes

29DSCI | Data Protection Outlook 2015-16

Page 30: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

CORPORATE MEMBERS

Organisation Organisation Organisation

Indian Oil Corporation LimiedICICI BankBank of IndiaHDFC BankKotak Mahindra BankOil and Natural Gas CorporationIDFC State Bank of IndiaAxis BankRBL BankMahindra ComvivaAdvanced Micro Devices (AMD)Allahabad BankVijaya BankBharat Petroleum Corporation LimitedTata CommunicationReliance Life InsuranceState bank of HyderabadMCX Central Bank of IndiaDBS BankWorld Vision Hero MotoCorpPunjab National BankFIS Global Business Solutions India Pvt.LtdHDFC Life Insurance

Hindustan Petroleum Corporation LimitedOriental Bank of CommerceGAIL WebsenseBharat Electronics LimitedICICI PrudentialGE IndiaYes BankPayTm Bhartiya Reserve bankBharti AxaVodafoneAir Works India Engineering Pvt. Ltd.Secure Matrix Global Pvt Ltd.SysTools Software Pvt. Ltd.Stellar Information Technology Pvt. Ltd.3M India Sans InstituteDataCard IndiaNII Consulting Practo Qualys Security Tech Services Pvt. LtdCyberfort TechnologiesTechnology Incubation Center (CIU)Orbis Financial

CallHealth Services Pvt. Ltd.Argali Knowledge Services Pvt. Ltd.

Web Access (I) Pvt. Ltd.

Inteliment Technologies (India) Pvt. Ltd.

NOUS Infosystems Pvt. Ltd.

Verizon Data Services India Pvt. Ltd.

H5 Asia Pacific Pvt. Ltd.

Barclays Shared Services

Topsource Global Solutions

IONIDEA

Bebo Technologies Pvt. Ltd.

Kaavian Systems Pvt. Ltd.

Netmagic Solutions Pvt. Ltd.

CYIENT

Xpanxion International Pvt. Ltd.

Mynd Solutions Pvt. Ltd.

Cognizant Technology Solutions

RM Education Solutions India Pvt. Ltd.

Tally Solutions Pvt. Ltd.

30 DSCI | Data Protection Outlook 2015-16

Page 31: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Organisation Organisation Organisation

ValueLabs

Hexaware Technologies

Liqvid eLearning Services Pvt. Ltd.

Mindtech

Butler Technical Services India Pvt. Ltd.

Couth Infotech Pvt. Ltd.

Datamatics Global Services Limited

Geometric Limited

Robert Bosch Engineering and Business Solutions Limited

Accel Frontline Limited

Absolutdata Research and Analytics Pvt. Ltd.

Yamaha Motor Solutions India Pvt. Ltd.

Aurionpro Solutions Limited

Blue Star Infotech Limited

Sun Life India Service Centre Pvt. Ltd.

AABSYS Information Technology Pvt. Ltd.

AXA Business Services Pvt. Ltd.

Karvy Global Services Limited

Sony India Software Center Pvt. Ltd.

Smart Cube India Pvt. Ltd

Yodlee Infotech Pvt. Ltd.

HCL Technologies

Limtex Infotech Limited

Arctern Consulting Pvt. Ltd.

Graycell Technologies Exports

Cybertech Systems and Software Ltd.

Magic Software Pvt. Ltd.

Sella Synergy India Pvt. Ltd.

Lister Technologies Pvt. Ltd.

Viteous Capital Market Services Limited

Snap-On Business Solutions India Pvt. Ltd.

Thomson Corporation (International) Pvt. Ltd.

Integra Software Services Pvt. Ltd.

PTC Software (India) Pvt. Ltd.

Morgan Stanley

Vidyatech Solutions Pvt. Ltd.

Infosys Technologies Limited

Ciena India Pvt. Ltd.

Amdocs Development Centre India Pvt. Ltd.

Mresult Services Pvt. Ltd.

Soft Prodigy System Solutions Pvt. Ltd.

CI. Com (P) Ltd.

Midland Credit Management India Pvt. Ltd.

Inlogic Bizcom Pvt. Ltd.

Arrk Solutions Pvt. Ltd.

R Systems International Limited

Pradot Technologies Private Limited

Sapient Corporation

Microland

KPIT Cummins Infosystems Limited

GNFC Limited

Abattis Consulting Pvt. Ltd.

Suma Soft Pvt. Ltd.

Onward Technologies Limited

Data Infosys Limited

Firstsource Solutions Limited

Tech Mahindra Limited

Cisco Systems India Pvt. Ltd.

Indus Valley Partners (India) Pvt. Ltd.

Novartis Healthcare Pvt. Ltd.

Infosoft Global Pvt. Ltd.

Hi-Tech Outsourcing Services

Telemune Software Solutions Pvt. Ltd.

Insoft.Com Pvt. Ltd.

Pan Business Lists Pvt. Ltd.

Tata Consultancy Services Limited

Acclaris Business Solutions Pvt. Ltd.

Sankhyaa Learning Pvt. Ltd.

Volvo India Pvt. Ltd.

DBOI Global Services Pvt. Ltd.

Williams Lea India

Botree Software International Pvt. Ltd.

Saama Technologies (India) Pvt. Ltd.

EXL Service

Mcafee Software (I) Pvt. Ltd.

Accenture Services Pvt. Ltd.

FNF Business Process Outsourcing Services India Pvt. Ltd.

Sun Knowledge Pvt. Ltd.

United Health Group Information

Deloitte

Nucleus Software Exports

SAI BPO Services Ltd. (SBL)

Wipro Limited

Novell Sotware Development India Pvt. Ltd.

Capgemini Business Services (I) Ltd

ADP Pvt. Ltd.

Ntrust Infotech Pvt. Ltd.

Unitforce Technologies Consulting Pvt. Ltd.

IBM India

MINDCREST (INDIA) Pvt. Ltd.

ELOGIC Technologies Pvt. Ltd.

Infosys BPO Limited

31DSCI | Data Protection Outlook 2015-16

Page 32: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Organisation Organisation Organisation

GlobeOp Financial Services (India) Pvt. Ltd.

Kumaran Systems Pvt. Ltd.

CA (India) Technologies Pvt. Ltd.

QuisLex Legal Services Pvt. Ltd.

KPMG

Maintec Technologies Pvt. Ltd.

Gujarat Informatics Limited

CSC

Amrut Software Pvt. Ltd.

Ivy Comptech Pvt. Ltd.

ASE Structure Design Pvt. Ltd.

IDS INFOTECH LTD.

Wells Fargo India Solutions Pvt. Ltd.

Aptech Limited

Seal Infotech Pvt. Ltd.

First Aadvantage Pvt. Ltd.

Centre For Development of Advanced Computing (C-DAC)

PricewaterhouseCoopers Pvt. Ltd.

Avaya India Pvt. Ltd.

Changepond Technologies

Cygnet Infotech Pvt. Ltd.

Newage Software and Solutions

Oracle India Pvt.Ltd.

WNS Global Services Pvt. Ltd.

Unisys Global Services India

Bahwan Cybertek Pvt Ltd.

Cambridge Technology Enterprises Limited

Systems Valley Pvt. Ltd.

Ajuba Solutions (India) Pvt. Ltd.

D&B Transunion Analytic and Design Services India Pvt. Ltd.

IIC Technologies Pvt. Ltd.

Aujas Networks Pvt. Ltd.

Virtusa

Nomura Services India Pvt. Ltd.

NTT Data Global Delivery Services Limited

Mjunction Services Limited

INDUSA Infotech Services Pvt. Ltd.

INFOPRO India. Ltd.

Accretive Health Pvt. Ltd.

Misys Software Solutions (I) Pvt. Ltd.

NIIT Technologies Limited

Protiviti Consulting Pvt. Ltd.

Aditya Birla Minacs

Sapple Systems Pvt. Ltd.

Motif India Infotech Pvt. Ltd.

HSBC Electronic Data Processing India Pvt. Ltd.

Metacube Software Pvt. Ltd.

Saigun

HyTech Professionals India Pvt. Ltd.

Aricent Technologies (Holdings) Limited

Imtemse Technologies Limted

SunTec Business Solutions

Technoforte Sofware Pvt. Ltd.

Pratham Software Pvt. Ltd.

Allegis Services India Pvt. Ltd.

EMC Data Storage India Pvt. Ltd.

Broadridge Financial Solutions (India) Pvt. Ltd.

Sonata Software

Rishabh Software Pvt. Ltd.

NIIT Limited

Infozech Software Ltd.

Support.com India Pvt. Ltd.

Net Vigil Software Pvt. Ltd.

Genpact

Hinduja Global Solutions Limited

Microsoft Corporation (India) Pvt. Ltd.

Convergys India Services

Anibrain Digital Technologies Pvt. Ltd.

J.P. Morgan Services India Pvt. Ltd.

Aufait Technologies Pvt. Ltd.

Northern Operating Services Pvt. Ltd.

Timken Engg. and Research Company

PHi Business Solution Limited

XSYSYS Technologies Pvt. Ltd.

IDG Venures India Advisor Pvt. Ltd.

Aegis Limited

Appoint Software Solutions Pvt. Ltd.

Drishti-Soft Solutions Pvt. Ltd.

IBS Software Services Pvt. Ltd.

Best of Breed Software Solutions India Pvt. Ltd.

L&T Infotech

Attra Infotech Pvt. Ltd.

iNautix Technologies India Pvt. Ltd.

BUSY Infotech Pvt Ltd.

JK Technosoft Ltd.

Sundaram Infotech Solutions Limited

Hackett Group (India) Limited

Cactus Communciations Pvt. Ltd.

Hughes Systique India Pvt. Ltd.

Infrasoft Technologies Limited

Verisign Services India

CIBERsites India Pvt. Ltd.

Fidelity Business Services India Pvt. Ltd.

CGI Information Systems and

32 DSCI | Data Protection Outlook 2015-16

Page 33: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Organisation Organisation Organisation

Management Consultants Pvt. Ltd.

ConnectM Technology Solutions Pvt. Ltd.

Ideas Inc Management Pvt. Ltd.

Interra Information Technologies (I) Pvt. Ltd.

Indiagames Limited

CtrlS Datacenters Limited

iInterchange Systems Pvt. Ltd.

Evalueserve.Com Pvt. Ltd.

BNP Paribas India Solutions Pvt. Ltd.

Magus Customer Dialog Pvt. Ltd.

SSP India Pvt. Ltd.

InfoBeans Systems India Pvt. Ltd.

Net Solutions

Magnasoft Consulting India Pvt.Ltd.

MphasiS Limited

Institute for Development & Research in Banking Technology (IDRBT)

Texas Instruments India Pvt Ltd.

Rightway Solution (India) Pvt. Ltd.

Infinity Infotech Parks Limited

Pitney Bowes Software India Pvt. Ltd.

Pinnacle Infotech Solutions

Orbital Outsourcing Services

NetApp India Pvt. Ltd.

ASM Technologies Limited

Octaware Technologies Pvt. Ltd.

SLK Software Services Pvt. Ltd.

Makemytrip India Pvt. Ltd.

Object Edge India Services Pvt Ltd.

Rolta India Limited

Legasis Services Pvt. Ltd.

Qualtech Consultants Pvt. Ltd.

MEDMA Infomatix Pvt. Ltd.

Nihilent Technologies Pvt. Ltd.

Sopra India Pvt. Ltd.

Tavant Technologies

Ugam Solutions

Hewlett Packard India Sales Limited

Scope International Pvt. Ltd.

Vaneera Hi-Tech

Sasken Communication Technologies Limited

Sigma Infosolutions Limited

SunGard Solutions (India) Pvt. Ltd.

7Seas Technologies Limited

Quest Informatics Pvt. Ltd.

Techies India Inc.

Symbol Technologies

SPAN Infotech (India) Pvt. Ltd.

Capita India Pvt. Ltd.

Future Focus Infotech Pvt. Ltd.

Take Solutions Ltd.

Paripoorna Software Solution Service Pvt. Ltd.

Atoss India Origin Pvt. Ltd.

ADOBE Systems India Pvt. Ltd.

eBay India Pvt. Ltd.

Software Technology Parks of India

3i Infotech

Apollo Health Street Limited

UST Global (US Technology International Pvt Ltd.)

Fiserv India Pvt. Ltd.

ITC Infotech India Limited

Swiss RE Shared Services (India) Pvt. Ltd.

Bechtel India Pvt. Ltd.

ZOHO Development Center India Pvt. Ltd.

COLT Technology Services India Pvt. Ltd.

Zensar Technologies Limited

Ascenders Technologies Pvt. Ltd.

Sanovi Technologies (India) Pvt. Ltd.

HTC Global Services (India) Pvt. Ltd

nhance Engineering Solutions Pvt.Ltd.

Talisma Corporation Pvt. Ltd.

State Government of Victoria, Australia

CSS Corp Pvt. Ltd.

Societe Generale Global Solutions Center

Infinite Computer Solutions

Softage Information Technology Limited

Financial Technologies (I) Limited

Tieto Software technologies Pvt. Ltd.

FIRST AMERICAN (INDIA) Pvt. Ltd.

Dimentrix Technologies Pvt. Ltd.

Netscout Systems Inc.

Advanced Business Intelligence and Analytics Pvt. Ltd.

Nishith Desai Associates

Cognet HR Solutions Pvt. Ltd.

Maven Systems Pvt. Ltd.

Panamax Infotech Limited

Dell International Services India Pvt. Ltd.

eMids Technologies Pvt. Ltd.

Electronic Arts Games (India) Pvt. Ltd.

Concentrix BPO Pvt. Ltd.

Chella Software Pvt. Ltd.

4i Apps Solutions Pvt. Ltd.

33DSCI | Data Protection Outlook 2015-16

Page 34: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Organisation Organisation Organisation

AvioHeliTronics InfoSystems Pvt. Ltd.

UBS (India) Pvt. Ltd.

VFS Global Services Pvt. Ltd.

Trigyn Technologies Limited

Rance Computer Pvt. Ltd.

Orkash Services Pvt. Ltd.

Medimanage Insurance Broking Pvt. Ltd.

Lexington Soft Pvt. Ltd.

Indus Net Technologies

Huawei Technologies India Pvt. Ltd.

Franklin Templeton International Services (India) Pvt. Ltd.

Envestment Asset Management India Pvt. Ltd.

Equinox Software & Services Pvt. Ltd.

ExcellenceTech (A Division of Kariwala Industries Ltd)

e-Zest Solutions Limited

Ford Business Service Center Pvt. Ltd.

Winsoft Technologies India Pvt. Ltd.

Persistent Systems Limited

Aspire Systems (India) Pvt. Ltd.

Innobuzz Knowledge Solutions Pvt. Ltd.

Data Resolve Technologies Pvt. Ltd.

Xplore-Tech Services Pvt. Ltd.

Plintron

Sans Institute

Target Corporation India Private Limited

Innodata Isogen

InterGlobe Technologies

Invesco (Hyderabad) Pvt. Ltd.

Indiabulls

Higher One Financial Technology Pvt. Ltd.

AKS Information Technology Services Pvt. Ltd.

Redspark Technologies Pvt. Ltd.

FixNix Infosec Solutions Pvt. Ltd.

Birlasoft (India) Limited

National Payments Corporation of India

HONCHO Commercial Pvt. Ltd.

eCore-Agile Security Services Pvt. Ltd.

Cnergyis Infotech India Pvt. Ltd.

Panoramic Universal Limited

SDG Software India Pvt. Ltd.

Manipal Global Education services Pvt. Ltd.

Karvy Data Management Services Limited

HCM Info Systems

Avantha Business Solutions Limited

SISA Information Security Pvt. Ltd.

Cegura Technology Solutions Pvt. Ltd.

Sears IT & Management Services| (India) Pvt. Ltd.

Future Calls Technologies Pvt. Ltd.

SecPod Technologies Pvt. Ltd.

Kaalbi Technologies Pvt. Ltd.

Data Resolve Technologies Pvt. Ltd.

JIJI Technologies Pvt. Ltd.

Tesco HSC

Guru Gowri Krupa Technologies Pvt. Ltd.

YaraGo Software Pvt. Ltd.

Shriram Value Services Pvt. Ltd.

ERP BOSS

Alsbridge Advisory Pvt. Ltd.

Allerin Tech Pvt. Ltd.

Opton Infocom Pvt. Ltd.

Flipkart Internet Pvt. Ltd.

Payoda Technologies Pvt Ltd.

Congruent Solutions

Quadrisk Advisors Pvt. Ltd.

S Capital Solutions Pvt. Ltd.

CyberEye Research Labs & Security Solutions Pvt. Ltd.

SAG Infotech Pvt. Ltd.

Wegilant Net Solutions Pvt. Ltd.

Axis Veriforte Services Pvt. Ltd.

Altimetrik India Pvt. Ltd.

TECHSYS Solutions Pvt. Ltd.

Elagoon Business Solutions Pvt. Ltd.

CipherCloud

CDK Global (India) Pvt. Ltd.

Sony India Software Centre

Amaze Infotainment Pvt. Ltd.

Rudrabhishek Infosystems Pvt. Ltd.

iAccept Softwares Pvt. Ltd.

Orion Security Solutions Pvt. Ltd.

Parablu Systems Private Limited

Codelogicx Technologies Pvt. Ltd.

INNEFU Labs Pvt. Ltd.

MothersonSumi Infotech & Designs Limited

Simeio Development Center Pvt. Ltd.

Aspire Software Consultancy Pvt. Ltd.

Abzooba India Infotech Pvt. Ltd.

Rackbank Datacenters Pvt. Ltd.

Appexigo Technologies Pvt. Ltd.

34 DSCI | Data Protection Outlook 2015-16

Page 35: ABOUT US...ABOUT US Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure

Organisation Organisation Organisation

Netmonastery Network Security Pvt. Ltd.

TechIndia Infoway Pvt. Ltd.

SQS India BFSI Limited

Credit Information Bureau (India) Ltd.

Unisys Global Services - India

Clickcubes Technologies Pvt. Ltd.

DST Worldwide Services

Venture Infotek Global Pvt. Ltd.

Hyperquality India Pvt. Ltd.

Ontrack Systems Limited

Eperium Business Solutions India Pvt. Ltd.

Olive E-Business Pvt. Ltd.

e-Emphasys Infotech Pvt. Ltd.

Software Associates

Barry-Wehmiller Intl. Resources Pvt. Ltd.

Synygy India Pvt. Ltd.

Symphony Services (I) Pvt. Ltd.

MetLife Global Operations Support

Center Pvt. Ltd.

Symbiosys Technologies

Applied Materials India Pvt. Ltd.

Helios and Matheson Information Technology Limited

ITCube Solutions Pvt. Ltd.

Kensoft Infotech Limited

Steria (India) Limited

Tibco Software India Pvt. Ltd.

Pawaa Software

Fusion Outsourcing Software Pvt. Ltd.

NDS Technologies Pvt. Ltd.

CPA Global Support Services India Pvt. Ltd.

Adweb Techno-Trade Pvt. Ltd.

Compserv Consultants Pvt. Ltd.

Etisalat Software Solutions Pvt. Ltd.

Jeevan Technologies India Pvt. Ltd.

iYogi Technical Services Pvt. Ltd.

IGS Imaging Services India Pvt. Ltd.

Vinove Software & Services Pvt. Ltd.

Cnergyis Infotech India Pvt. Ltd.

Ascent Informatics (India) Pvt. Ltd.

Telerad Tech Pvt. Ltd.

i3 Software Pvt. Ltd.

e-Nxt Financials Limited

Webrosoft Solutions Pvt. Ltd.

Sisa Information Security Pvt. Ltd.

Fluxonix Security Solutions Pvt. Ltd.

Stern Advisory (India) Pvt. Ltd.

NIHON Technology Pvt. Ltd.

Xiarch Solutions Pvt. Ltd.

Smart Chip Limited

Vinove Software & Services Pvt. Ltd.

Cnergyis Infotech India Pvt. Ltd.

Ascent Informatics (India) Pvt. Ltd.

Telerad Tech Pvt. Ltd.

Webrosoft Solutions Pvt. Ltd.

SISA Information Security Pvt. Ltd.

FLUXONIX Security Solutions Pvt. Ltd.

Stern Advisory (India) Pvt. Ltd.

35DSCI | Data Protection Outlook 2015-16