C&L October 2017_LR (5)

Vishal Salvi, Infosys
Interview
think that people should realise that's
the change. In fact it was always there
but it is now more fundamental now
that people realise that you know you
are accountable and you need to make
sure that a business case needs to be
presented. It is also about making sure
that you are also accountable to get
maximum return on investment.
What is the importance of
vendors collaboration in
security and how does that
impact the solutions that you
choose within your
organisation or for your
organisation? Isn't
collaboration essential for the
new threats that are emerging
in the enterprises?
Generally speaking, you know
most of the vendors have a closed
approach towards their solutions
and how they would want to bring
them to the market. That definitely
is a problem. Every security vendor
has his own standard and strategy.
And they haven't really been able to
come together and create a common
architecture and a common standard
which the world will benefit. We
obviously have challenges in the
bureaucracy and the processes and
practitioners also. So all these are
loopholes which are exploited by
cyber criminals who don’t have any
processes that are very cohesive.
As practitioners you have to do the
best with what you have. For example,
we invest in engineering, orchestration,
and automation; so there is hope. But
not many organisations are able to do
that. We are able to do it but not many
organisations are able to that and
therefore, there is always a struggle in
terms of depending on an external party
to come and deliver that value.
What are the top 3 things
on your agenda in 2020
as far as security is
concerned?
I think this year has largely been
in terms of investing and building
capabilities. We are actually embarking
on a journey of operational excellence
and making sure that every single
control that has been invested on is
actually delivering the value for the
buck right. There are four important
objectives: The first one is to build a
team which will give assurance to our
clients about security of their data
and business that they are entrusting
on us. The second objective is to
constantly improve the efficiency and
effectiveness of the controls that we
have deployed. The third objective is
to ensure that people remain calm and
composed when you respond to cyber
events and cyber incident that happen
to your organisation so that you not
only contain, but also recover from
them quickly. The fourth objective is to
build a security culture. At Infosys, we
have various tools and methodologies
along with the maturity models
that we have defined, both of which
focus on the improvements as well as
operational excellence, and every year,
we revisit ourselves and constantly
evolve to deliver the value that our
customers expect from us.
October 2017 | CIO&LEADER
19