Presentation given by Arvind Mehrotra, Designation - Executive Vice President & Head – Global Strategic Initiatives, NIIT Technologies Ltd. on August 3rd, 2011 at eWorld Forum (www.eworldforum.net) in the session Information Management and Security

1. Information Management & Security 3rdAugust,2011 Arvind Mehrotra President APAC,NIIT Technologies arvind.mehrotra@niit-tech.com

3. Software Assurance & Security Audit-India

6. National Information Infrastructure Protection Act of 1996 (NIIPA)-US

8. NCRB reported steep rise of 300% in cyber crimes in India(Year 2009)

9. 420 cyber crime cases were reported in India in 2009 of which 233 were related to hacking

10. 75 Million scam emails are sent everyday claiming 2000 victims

11. The average internet crime will cost the victim 128$

12. 25% of cyber crime remains unsolved

14. Distributed

17. Actionable itemsIncidents Structured Process Reporting & Forensics IncidentResponse Key Challenges

19. Competitive Advantage

20. Proactive

21. Risk Driven

23. Health of Business

24. Reactive

25. Meet Regulation

26. On-Premises vs. RETURNS Paradigm Shift New Old EFFORT / TIME

28. Capture events qualified as security incidents from various Applications

29. Display real-time alerts in the incident monitoring console

30. Establish correlation & analysis from different engines

32. Define Risk related to the Business Processes, Regulations.

33. Define Controls for Risk Mitigation

34. Run Period Assessments to evaluate the strength of controls.

36. Firewalls

37. Content scanners

38. Network IDS

39. Network IPS

40. Other sensors

41. Host & DB configuration

42. Patch management

44. Directories

45. Provisioning7 7

47. Key Risk Indicator Management

48. Capital Modeling

49. Service Delivery Risk Management

50. Supply Chain / 3rd Party Risk

51. IT / Info Security Controls Management

52. Regulatory & Standards Gap Assessment

53. Enterprise Threat Assessment

54. Breach & Records Retention Law Analysis

55. Vendor Risk Management

56. Internal Controls Management

57. Regulatory / Standards Management

58. Assessment & Audit Management

59. Policy & Procedure Management

60. Financial Controls Management

61. Incident Management

62. Certification Management

63. Issues Management Assure Easy Solutions

65. Used by Compliance management; Business function managers; Executive management

66. 24*7 Security Monitoring system deployed in bank

67. Custom agents interfaces built for Sybase;Oracle;BACS

69. Questions