Position of CISO in India

Many of the companies have already appointed Chief Information Security Officer (CISOs) or are in the process of appointing a CISO. Also, I am sure, time is ripe for the companies to start focusing on imminent threats such as cybersecurity in India in a more focused way. 

Modi is determined to make India a global digital hub. In that pursuit, India can ill afford to have large scale breaches. So, a dedicated position is required to look into the security aspect of the digital world. A CIO has too many things on his hand and a dedicated CISO position would better serve the need of robust IT security and more specifically the cybersecurity.

I have now interacted with various stakeholders in the government and industries. Here is the summary:

Government initiatives

The government is keen to get the cybersecurity puzzle solved by directing its Department of Electronics and Information technology to take the IT security education through its ‘Information Security Education and Awareness’ program that will reach 71 engineering institutes including several of the IITs. 

The government of India wants to create a talent pool of cybersecurity professionals and NASSCOM is heading an Initiative to create a training and certification program for that.

Corporate initiatives

I have had several interactions with several CISOs in India. One thing is certain, all these CISOs recognize the importance of cybersecurity but are little concerned about the lack of clarity in their roles.

Having said these I am sure India will have a large pool of cybersecurity talent in due course of time and also the role of CISO will become important in India.