Promoting Data Protection · 2018-03-13 · IT-BPM, BFSI, Telecom, industry associations, data...
Transcript of Promoting Data Protection · 2018-03-13 · IT-BPM, BFSI, Telecom, industry associations, data...
Promoting Data Protection
Promoting Data Protection (Broc)_A4_PRINT.indd 1Promoting Data Protection (Broc)_A4_PRINT.indd 1 10/21/2015 4:15:26 PM10/21/2015 4:15:26 PM
About DSCIData Security Council of India (DSCI) is a premier industry body on data protection in India,
setup by NASSCOM®, committed to making the cyberspace safe, secure and trusted by
establishing best practices, standards and initiatives in cyber security and privacy.
DSCI brings together national governments and their agencies, industry sectors including
IT-BPM, BFSI, Telecom, industry associations, data protection authorities and think-tanks for
public advocacy, thought leadership, capacity building and outreach initiatives.
To further its objectives, DSCI engages with governments, regulators, industry associations
and think-tanks on policy matters. To strengthen thought leadership in cyber security and
privacy, DSCI develops best practices and frameworks, publishes studies, surveys and papers.
It builds capacity in security, privacy and cyber forensics through training and certifi cation
program for professionals and law enforcement agencies and engages stakeholders through
various outreach initiatives including events, awards, chapters, consultations and membership
programs. DSCI also endeavors to increase India’s share in the global security product and
services market through global trade development initiatives. These aim to strengthen the
security and privacy culture in the India.
VisionTo be the premier industry body for making cyberspace safe,
secure and trusted.
MissionTo develop capabilities, capacities and norms, in collaboration
with all the stakeholders including the government, required to
advance towards a safer, more secure and trusted cyberspace for enhancing trade and commerce by increasing global data
fl ows and promoting innovation; strengthening national security,
protecting individuals’ rights in cyber space and addressing such
global issues while safeguarding national and industry interests.
Promoting Data Protection (Broc)_A4_PRINT.indd 2Promoting Data Protection (Broc)_A4_PRINT.indd 2 10/21/2015 4:16:19 PM10/21/2015 4:16:19 PM
Promoting Data Protection
Objectives
Engage with governments,
regulators, industry associations
and think tanks on policy matters
through Public Advocacy
Build Capacity
in Security, Privacy and Cyber Forensics through training and »certifi cation of individuals and professionals
in Cybercrime investigations through training of Law Enforcement »Agencies and judiciary
Engage with stakeholders through
various Outreach initiatives
including events, awards,
chapters, consultations and
membership programs
Increase India’s share in the
global security product and
services market through Global Trade Development initiatives
Establish Thought Leadership
through development of best
practices, standards and
frameworks and publication of
studies, surveys and papers
Develop and maintain an
Assurance Ecosystem for
validation of privacy and security
practices implemented by
organizations
Aim at developing Alternate Dispute Resolution system in
data protection
Promoting Data Protection (Broc)_A4_PRINT.indd 3Promoting Data Protection (Broc)_A4_PRINT.indd 3 10/21/2015 4:16:23 PM10/21/2015 4:16:23 PM
485Corporate Members
2,500+ Security and Privacy
professionals
BPM IT Services Telecom SecurityBFSI Others
Corporate Members
201
25
18
0
11
103 127
StakeholdersBoard of Directors
NASSCOM•
Eminent Academicians•
Government•
Independent directors•
Corporate Members
Advisory Groups
Security Assessment Advisory Group (SAAG)•
Privacy Assessment Advisory Group (PAAG)•
Cyber Forensics Forum•
Best Practices Advisory Group•
Encryption Advisory Group•
Special Interest Groups
Global data fl ows•
Common criteria protection profi les•
Privacy assessment ecosystem•
Security & privacy standards•
Governments – India & Foreign
Policy Making Agencies•
Law Enforcement Agencies•
Judiciary •
Regulatory bodies •
Chapters
Ahmedabad | Bengaluru |
Bhubaneshwar | Chandigarh
Chennai | | Coimbatore |
Delhi | Hyderabad | Jaipur |
Kolkata | Mumbai | Pune
Promoting Data Protection (Broc)_A4_PRINT.indd 4Promoting Data Protection (Broc)_A4_PRINT.indd 4 10/21/2015 4:16:23 PM10/21/2015 4:16:23 PM
Promoting Data Protection
Public Advocacy
Engagement with Government of India
Regular interface with various government •
agencies, ministries and departments on policy
discussions
Department of Electronics & IT, Ministry of »Commerce, Central Bureau of Investigation,
Ministry of Home Affairs, National Security
Council Secretariat, Ministry of External
Affairs, Department of Telecommunications,
Department of Personnel & Training, National
Institution for Transforming India Aayog,
State Police organizations and more
Policy and Legislative consultations•
Representation in committees and working groups •
constituted by the Government of India
Facilitation of Public-Private Partnership (PPP) for •
strengthening cyber security posture of the country
Knowledge partner for various Government of •
India initiatives
Programs & Initiatives
Engagement with Foreign Governments & Regulators
Deliberations with European Union (EU) on •
adequacy of India as a secure country for third-
party data transfers which will benefi t businesses
operating in both EU and India by allowing
free fl ow of information between them without
involving administrative burdens and costs
Contribution to global cyber security policies, •
frameworks and guidelines
Representation in committees and working •
groups of international bodies and forums
Trans-border Data Flow
Cyber Security
Privacy
IT (Amendment)
Act
Cloud Computing
Encryption
Internet governance
Policy Enablement Areas
Promoting Data Protection (Broc)_A4_PRINT.indd 5Promoting Data Protection (Broc)_A4_PRINT.indd 5 10/21/2015 4:16:23 PM10/21/2015 4:16:23 PM
Thought Leadership
Development of Best Practices, Frameworks, Standards and Assessment
DSCI Security Framework (DSF©) is a best practices document that promotes dynamism •
in data security within organizations
DSCI Privacy Framework (DPF©) is a best practices document to help build organizational •
competence in privacy protection
DSCI Assessment Framework (DAF©)•
DSCI Assessment Framework – Security ( DAF-S©) it is assessing maturity in different »disciplines of security of an organization
DSCI Assessment Framework – Privacy ( DAF-P©) it is assessing maturity of different »aspects of privacy implementation and initiatives of an organization
DSCI Privacy Ecosystem Development
It is a comprehensive privacy program based on a well-defi ned privacy policy•
Privacy program implementation across the organization, with appropriate monitoring & •
oversight mechanisms to check non-compliances and performance
Provides framework for designing and implementing
such a privacy program in an organization
Designed to assess organization’s privacy initiatives
which can be used by external or internal assessors to
certify successful implementation
The Certifi cation scheme for organization is based on •
the independent third-party privacy assessments carried
out by DSCI-authorized Assessment Organizations
(AOs) based on DAF-P© & DPF©
It aims to help organizations demonstrate implementation •
of a sound privacy program,enhance trust and provide
assurance to data subjects, regulators and clients
DPF©
DAF-P©
DSCI Privacy Certifi cate (DPC©)
Promoting Data Protection (Broc)_A4_PRINT.indd 6Promoting Data Protection (Broc)_A4_PRINT.indd 6 10/21/2015 4:16:46 PM10/21/2015 4:16:46 PM
Promoting Data Protection
Development of Research, Policy and White-Papers DSCI is involved in rigorous
research in the area of data protection and cyber security, both at the national and global-
level. Our research is widely infl uential among the security and privacy community.
Undertaking Studies & Surveys
Every year, DSCI conducts a variety of studies and surveys, on the industry’s security, technical
and regulatory challenges at national and global level, to provide the community with robust
research and insights.
e-Security Index for India•
National Information Security Policy and guidelines •
Reference Architecture Report•
Security Consideration in Software Procurement by Government agencies in India•
State of Data Security and Privacy in the Banking, Financial Services and Insurance, •
IT-BPM, Telecom, etc.
Security Thought leadership Program•
Industry Benchmarking Program•
Contribution in the Development of International Standards through SC 27
sub-committee at the ISO in collaboration with Bureau of Indian Standards (BIS)
Promoting Data Protection (Broc)_A4_PRINT.indd 7Promoting Data Protection (Broc)_A4_PRINT.indd 7 10/21/2015 4:16:46 PM10/21/2015 4:16:46 PM
Corporate Membership
Over 500 organizations from various industry sectors benefi t from our Corporate
Membership Program. Their association with DSCI, helps members gain recognition for
their contribution in the areas of security and privacy.
Flagship events
NASSCOM – DSCI Annual Information Security Summit (AISS) •
DSCI Best Practices Meet (BPM)•
Community Engagement
With chapters across 12 cities in India, DSCI endeavors to involve security and privacy
professionals in these cities and encourage engagement and dialogue through regular chapter
meets. DSCI has a pan-India presence of 2,500 such professionals
Awareness & Outreach
Ahmedabad
Jaipur
PuneMumbai
Hyderabad
Chennai
Bhubaneshwar
Kolkata
Chandigarh
Delhi & NCR
Bengaluru
Coimbatore
Promoting Data Protection (Broc)_A4_PRINT.indd 8Promoting Data Protection (Broc)_A4_PRINT.indd 8 10/21/2015 4:16:47 PM10/21/2015 4:16:47 PM
Promoting Data Protection
Industry-specifi c Events
Focused Roundtables & Workshops
Citizen-centric Awareness Programs
In order to help educate the public around data protection, a series of citizen-centric awareness
programs are planned
DSCI Excellence Awards
Corporates: Organizations and individuals who demonstrate a high-level of preparedness,
and excel in the area of Information Security and Privacy, are awarded this under the Corporate
Segment
Law Enforcement Agencies: State police and investigation agencies, which demonstrate
capacity-building of police offi cers in investigating cybercrimes, and individual offi cers who
excel in cybercrime investigation, are given this annual recognition.
Capacity Building on Cybercrime
Cyber Labs Seven
Cyber Labs provide
training in cybercrime
and forensics. Over
45,000 law enforcement
offi cers, members of the
judiciary,military, public
prosecutors & PSUs
trained so far.
Development of
Standard Operating
Procedures in the
form of Cybercrime
Investigation
Manual
Standardization of
the training program
through Cybercrime
Training Material for
Investigators
(Level I & II)
Promoting Data Protection (Broc)_A4_PRINT.indd 9Promoting Data Protection (Broc)_A4_PRINT.indd 9 10/21/2015 4:16:47 PM10/21/2015 4:16:47 PM
DSCI Certifi cations Program
Certifi ed Cyber Forensics Professional
– India CCFP-In is intended for digital
forensics managers, consultants &
investigators
Launched in 2014 in collaboration »with (ISC)2
Localized the CCFP-In for India to »meet specifi c needs of the Indian
forensics community.
For Individuals
DSCI Certifi ed Privacy Lead Assessor
(DCPLA©) is intended for privacy
assessors, implementers & managers
Three-day program (Classroom »training & examination)
DSCI Certifi ed Privacy Professionals
(DCPP©)is intended for aspiring privacy
professionals
Preparation based on Privacy »Body of Knowledge (PBoK)
& examination
PRIVACY
CYBER FORENSICS
Promoting Data Protection (Broc)_A4_PRINT.indd 10Promoting Data Protection (Broc)_A4_PRINT.indd 10 10/21/2015 4:16:47 PM10/21/2015 4:16:47 PM
Promoting Data Protection
Security Product Development
Enable growth
of cyber security
product companies
in India
Support promotion of
security products in
international markets
through conferences,
meetings and
delegations
Encourage participation
of the Indian industry in
defi ning technical security
standards and collaborative
protection profi les that are
important for development
of security products
Facilitate creation
of a conducive
market environment
for adoption of
indigenous cyber
security products
Encouraging
discussion on a
common platform
through forums
Promoting Data Protection (Broc)_A4_PRINT.indd 11Promoting Data Protection (Broc)_A4_PRINT.indd 11 10/21/2015 4:16:47 PM10/21/2015 4:16:47 PM
L: Niryat Bhawan, 3rd Floor, Rao Tula Ram Marg, New Delhi - 110057, India
P: +91-11-26155071 | F: +91-11-26155070 | E: [email protected] | W: www.dsci.in
DATA SECURITY COUNCIL OF INDIA
FOLLOW US
Data Security
Council of India
DSCI_Connect DSCI.Connect DSCIvideo
Promoting Data Protection (Broc)_A4_PRINT.indd 12Promoting Data Protection (Broc)_A4_PRINT.indd 12 10/21/2015 4:16:47 PM10/21/2015 4:16:47 PM