'Security Budget Should Concentrate On Apps, Customer Sensitive Data'

Nina Godbole of CISA talks about the important aspects of security in an informative interaction with Biztech2.0.

What is your take on security in times of recession?

During an economic slowdown, budgets are tight and project initiatives are not taken forward very enthusiastically. In such a scenario, organisations should take an inward look at their security functions, security best practices and see which current practices can be consolidated. Also, they should see how they can reap maximum benefits from existing resources rather than embarking on something new, which could be difficult.

What areas of security should the IT budget be concentrated on?

The IT budget should be concentrated on the security of applications and customer-sensitive data. These areas are of concern as a lot of outsourcing is taking place in countries such as India, Brazil and China.

What has the impact of the economic slowdown been on IT initiatives?

A lot of security technology projects are taking a backseat, some are on hold while others are progressing very slowly. If projects are given a green signal, then the budgets have been slashed. Any approval decisions regarding the adoption of new technology solutions are being kept on the backburner. The Indian industry is not in the mood to initiate new projects. People are in the wait-and-watch phase till the economic situation improves.

How important is end-point security?

End-point security, according to me, is about protecting vulnerable points and networks and also being aware of the fact that there is a mobile workforce. The traditional definitions of an office are melting. Offices are no longer seen as four walls that surround employees and people are now computing on the move and doing their work away from office while on the move. This trend brings to light a lot of vulnerability points and therefore, security becomes that much more important.

How far have remote security services succeeded in the market?

Remote security services are already being offered in many organisations. In my view, there is a bright future for such services as we no longer live in a brick-and-mortar world and the demand is going to be much more; we have to realise that we are not always dealing with a physically deployed workforce in a particular location.

What are the major security concerns vertical-wise?

The healthcare and banking segments are two glaring examples of verticals where security is a major concern. If I were to name the verticals in order, then the list would begin with the BFSI sector followed by healthcare and hospitality. Healthcare and hospitality are two areas where personal sensitive data gets handled and the BFSI sector is where financial data is stored and hence, it is a showcase for security.

Which are the primary security issues being faced by enterprises?

The security awareness in India is not as nascent today as it was five years back nor is it as mature as it is elsewhere in the developed world. For instance, if you take the European sector, it is very traditional and orthodox and hence, very strict about security and privacy. Such awareness has still not become a part of the sensibilities of Indian firms. Those working with partners in different geographies of the world have a deeper sense of security because of customer pressure. For domestic businesses, this is an area where they are lagging behind. Not having the awareness is one issue, while not having the right agenda with regards to the management and position of security functions within an organisation is another aspect.