Business priorities are driving digital transformation

1. Pradeep Vasudevan
Country Leader, Security Software,
IBM India-South Asia
Simplifying data
privacy and protection

2. Data and apps
Data is a shared
resource for users
and apps
Infrastructure
Servers and networks
disturbed across hybrid
cloud environments
Users and endpoints
Accessing from
anywhere using
any device
Business
priorities are
driving digital
transformation
IBM Security / © 2023 IBM Corporation

3. Data is a by-product of digital transformation
Explosive Data
Growth
2.5 Billion GB
data created every
single day
Rapidly Increasing
Data Breaches
150%+
growth in data theft
Time to identify and
contain a breach
Days to identify and
contain a data
breach
3
IBM Security / © 2023 IBM Corporation

4. A data breach is
inevitable…
Its not a matter of IF you will
be breached…
Its a matter of WHEN you
will be breached.
4

5. Evolving Compliance
Requirements
125+
countries globally have
put in place legislation to
secure the protection of
data
At the same time, compliance laws are getting stringent
*Representative view – actual numbers may vary significantly
5
IBM Security / © 2023 IBM Corporation

6. India is bringing Digital Personal Data Protection (DPDP) Act
2023
6
An Act to provide for the processing of digital personal data in a manner that recognises both
the right of individuals to protect their personal data and the need to process such personal
data for lawful purposes and for matters connected therewith or incidental thereto.
Applies to:
- personal data collected in digital form
- collected in non-digital form then digitized
Does not apply to:
- Personal and domestic purpose
- Made publicly available
Penalties: 500 Crores
*The India map is used purely for representative purposes only. Any mis-representation is inadvertent and regretted.
IBM Security / © 2023 IBM Corporation

7. Data journey and DPDP processes and controls
7
•Notice
•Consent/ Guardian
Consent with purpose
Data
Collection
▪Self Service
▪Data protection
– data in rest
– data in motion
▪3rd
parties/ processors
▪ PII discovery and
classification
Data
Processing • Data protection from
unauthorize access
• Data encryption
• Data minimization
• Retention and
erasure
Data Storage
•Compliance with
DPDP
•Special obligation
•Data audits
•Data breach
notification
Compliance
Breach of obligation of Data
Fiduciary to security safeguard
to prevent a breach
Breach of the obligation to
notify the Board or the data
principle of a breach
Breach of additional obligations
related to children
Breach of additional obligations
of Significant Data Fiduciary
Other breach of obligations of
the DPDP
Breach of duties of Data
Principle
Up to Rs. 250 crore Up to Rs. 200 crore Up to Rs. 200 crore Up to Rs. 150 crore Up to Rs. 50 – 100 crore Up to Rs. 10000/-
IBM Security / © 2023 IBM Corporation

8. 1. How do you minimize the impact of
data breach?
2. How do you address the local
compliance requirements?
3. How do you protect your
crown jewels?
8

9. IBM Security Guardium helps customers simplify data privacy and
protection
Discover and classify
your sensitive data
across on-premise
and cloud data stores
Analyze and
assess risk with
contextual insights and
advanced analytics
Simplify data privacy
and security
compliance, auditing,
and reporting
Discover Respond Simplify
Analyze
Respond to threats in
real-time and send
actionable alerts to
security operations
systems
IBM Security Guardium
Protect sensitive data
through encryption,
access policies, and
data activity
monitoring
Protect
9
50%
increase in data
classification
accuracy
42%
decreased time
remediating data
security issues
89%
reduced time
spent preparing
for an audit
67%
increase in discovering data
source vulnerabilities and
misconfigurations
43%
increase in data
threat detection
accuracy

10. Clients see results with
Guardium Data Protection
IBM Security Guardium by the numbers
Reduced probability of a breach by 40%
Increased automation saves 79 hours
during database analysis
Effort required to complete an audit
decreased by 75%
Voice of the customer
“When we use IBM Security Guardium in our database
analysis we are able to create reports and custom
tables in a matter of minutes.”
“I was able to short cut all the manual work we used
to have to do for an audit. The compliance templates
provided by IBM Security Guardium saved me a lot of
time and kept the auditors happy.”
IT security engineer,
Energy and Utilities