10th Anniversary Edition

ANNUAL REPORT 2018-19

About Us

Data Security Council of India (DSCI) is a premier industry body on data protection in India, setup by NASSCOM®, committed to making the cyberspace safe, secure and trusted by establishing best practices, standards and initiatives in cyber security and privacy. DSCI works together with the Government and their agencies, Law Enforcement Agencies, industry sectors including IT-BPM, BFSI, Critical Information Infrastructure, Telecom, industry associations, data protection authorities and think tanks for public advocacy, thought leadership, capacity building and outreach initiatives.

Vision To be the premier industry body for making cyberspace safe, secure and trusted.

Mission To develop capabilities, capacities and norms, in collaboration with all the stakeholders including the government, required to advance towards a safer, more secure and trusted cyberspace for enhancing trade and commerce by increasing global data ows and promoting innovation; strengthening national security, protecting individuals’ rights in cyber space and addressing such global issues while safeguarding national and industry interests.

Table of Contents

Message from Chairman 06

Message from CEO 07

Board of Directors 09

Our Stakeholders 10 Corporate Members 10 Chapter Community 11

DSCI in 10 years 12

Key Highlights of 2018-19 15 Personal Data Protection Bill 16 Centre for Cybercrime Investigation Training & Research 18 Cybersecurity Centre of Excellence 19 Research Studies & Reports 20 Industry Development 22

Programs & Initiatives 29 Policy Advocacy 30 Data Privacy 32 Capacity Building 35 Awareness & Outreach 38

Our Members 49 Message from Chairman

On its mission to build a strong cyber security ecosystem in the country, DSCI has expanded its charter and scope over the last decade. Being involved with DSCI from last few years, I am witness to the pace and commitment with which it is driving thought leadership for the industry members, engaging government bodies and other stakeholders to establish itself as their premier and trusted partner in the ever-evolving cyber landscape.

2018, marked DSCI’s tenth year and it was extremely special as the industry saw key developments of our continued contribution towards developing cyber capabilities in the country. We built the Centre for Cybercrime Investigation Training and Research (CCTIR) in Bengaluru, in partnership with Criminal Investigation Department (CID), Karnataka and Infosys Foundation, and the Cyber Security Centre of Excellence (CCoE) in Hyderabad, as a joint initiative with Government of Telangana. These focussed centres are set to catalyse skills, innovation and ecosystem development and other imperative areas in cyber forensics & investigation and cyber security respectively.

The next steps in the journey towards developing the cyber security industry, DSCI expanded initiatives, focussed on skills, technology and product development through Use Cases, advocated for positive domestic market policy for new age start-ups, and collaborated with key stakeholders in potential geographies including Europe, Middle East to promote exports.

Privacy protection debates took centre stage in all global discussions swirling enterprises from almost all sectors dependent on technology. From helping and guiding the industry to increase their preparedness on General Data Protection Regulation (GDPR) to advocating India’s data protection narrative, DSCI engaged deeply with the industry and government alike.

In a bid to increase preparedness of the industry, DSCI engaged with both public and private member organisations from diverse sectors. While sharing security and privacy best practices and integral insights to member organisations, it also apprised several boards and senior management on the need to build a robust cyber security and privacy culture in their organisation. Through series of conferences, events and workshops, DSCI continued to play a crucial role in the development of a resilient cyber community.

Amidst the rapid pace of digital transformation and developments taking place in the country, the industry portrays a promising and exciting picture, resonating with DSCI’s vision to enhance India’s preparedness while building opportunities in cyber security and privacy domain. I am condent that in the next phase, DSCI will continue to build, trust and impact the industry with its advocacy. On behalf of the entire board, I wish DSCI members and all stakeholders, a great time ahead.

G. K. Pillai Chairman, DSCI

6 Message from CEO

DSCI was institutionalised in 2008 and it’s a proud moment for us to complete a decade.

In the formative years, DSCI was working to expand its reach to engage with multiple stakeholders from the Government, Industry and global institutions to become the focal body in India for Cyber Security and Privacy. We have traversed a long journey and now scaling our efforts at developing the overall Security and Privacy Industry and make India a global hub. On this course, last year has been an exciting journey for us and the overall community in general. Privacy has always been a prime focus for DSCI and year 2018 saw major developments in this space. First, GDPR was enforced in May and we actively spread awareness to make member organisations compliant with the new regulations. India started gearing up for its own Data Protection Law; and the committee of experts under the chairmanship of Justice B.N. Srikrishna, released a draft Personal Data Protection Bill after yearlong deliberations and consultations. The draft bill incorporates numerous provisions that lay emphasis on demonstration of accountability and re-establishing trust between entities and end consumers in the digital ecosystem. We carried out extensive consultations and solicited feedback from members and stakeholders, and laid forward a comprehensive submission advocating the creation of an overarching law that safeguards the privacy of citizens and facilitates growth of our digital economy fuelled by cross-border data ows.

Taking forward the CSTF vision, DSCI has been working towards growing the Indian Cyber Security Industry to USD 35 billion by 2025. We have been collaborating with global stakeholders throughout the year to showcase the India Advantage and our Cyber Security Product and Services Landscape and capabilities to various delegations, seeking opportunities to elevate Brand India. In the domestic market, we undertook a deep dive in Cyber Security Framework for smart cities and engaging with MoHUA and Pune Smart City. Our year-long efforts in showcasing Indian Security Products and start-ups in Customer and Investor forums, culminated in the launch of “Indian Cyber Security Product Landscape” at AISS.

This year we successfully forged a partnership with Government of Telangana, to setup a Cyber Security Centre of Excellence (CCoE) in Hyderabad, to accelerate Telangana state’s cyber security momentum and position it as one of the leading cyber security hubs in India for fostering innovation, start-up incubation and capacity building.

As part of our Capacity Building initiative, we trained around 1900 professionals through our Cyber Lab. We have setup a Centre for Cybercrime Investigation Training & Research (CCITR) in collaboration with Karnataka State CID and Infosys Foundation. The prime objective of CCITR is to create excellence in investigating cybercrime cases, create forensic SOPs, research, and elevate cybercrime investigations and forensics capabilities in the country.

Skill development has been an important focus area and we launched the project, Cyber Shikshaa, a three-year program, in partnership with Microsoft for skilling women engineering graduates in Cyber Security. Several training programs were launched in Hyderabad, Noida, Patna, Mohali, Srinagar, Bengaluru and Vijayawada in partnership with CDAC, NIELIT and ISEA program of MeitY.

In year 2018, we further scaled our outreach activities by adding two new initiatives, namely FINSEC – Financial Security Conclave focussing on the BFSI sector and IDLS – India Data Leadership Summit to bring diverse themes, narratives and evolution of data to the forefront, along with the 10th Best Practices Meet and our agship event, Annual Information Security Summit. AISS went into its 13th edition which attempted to bring the entire cyber security fraternity together and provide a platform for security led discussions. We also felicitated Industry leaders and organisations for showcasing exemplary work in the security and privacy realm though our Excellence Awards. This year, we continued our member awareness efforts by disseminating timely security advisories, and Threat Intelligence & Malware Analysis awareness building through deep dive workshops.

As a way forward for the coming year, we have exciting yet challenging opportunities to further grow the Industry and step up our cyber readiness. We will be rolling out our Use Case Clearing House (UCCH) initiative which is a platform to brainstorm on various problem statements, nd detailed Use Cases and design solutions. Another interesting development is the partnership between MeitY and DSCI for a Cyber Grand Challenge.

All of this would only be possible with the continued support of our stakeholders and relation with our members to harness our true potential. I would like to sincerely thank you for your support and engagement in all our initiatives, and often guiding us in realizing our vision and meeting your expectations. Rama Vedashree CEO, DSCI

7

Board of Directors DSCI Board has ten Directors, of which seven are Independent Directors and three are Nominee Directors. Four Independent Directors joined in the year 2018-19. Ms. Debjani Ghosh, President of NASSCOM and Mr. Rishad Premji, Chairman of NASSCOM, joined the board as Nominee Directors in the year 2018-2019.

During 2018-19, the Board continued to have Mr. Gopal Pillai as the Chairman of Board of Directors.

The Board of Directors, as on 31 March 2019, is as below:

Mr. G. K. Pillai Chairman, DSCI

Ms. Debjani Ghosh Mr. Rishad Premji President, NASSCOM Prof. N. Balakrishnan Chairman, NASSCOM Honorary Professor, IISc (Nominee Director) (Nominee Director)

Dr. A.S. Ramasastri Mr. Pankaj Kumar Mr. Rajendra S Pawar Director, IDRBT Additional Secretary, MeitY Chairman & Co-Founder, (Nominee Director) NIIT Group & Founder, NIIT University (Joined in 2018)

Mr. Baljinder Singh Mr. Vishal Salvi Global Head of Digital Transformation & Dr. Kailash Katkar MD & CEO, CISO & Head of Global CIO, EXL Quick Heal Technologies Limited Cyber Security Practice - Infosys (Joined in 2018) (Joined in 2018) (Joined in 2018)

9 Our Stakeholders

DSCI understands stakeholder priorities and encompasses these in its varied initiatives, programs and outreach activities.

Our programs and strategic initiatives are guided by the Board of Directors. To better re ect the ever-changing cyberspace, we closely engage security and privacy experts from the Industry and Government, consult member companies, and experts from the chapters spread across various cities in India and Singapore. This consultative process helps us meet the aspirations of our stakeholders and in the overall contribution towards development of the Industry. Corporate Members 440 7 37 58 BFSI Government IT-BPM 4 & Institutions 21 Manufacturing Others 2 5 Pharma 250 40 Education IT Services Security Product 4 & Services SECURITY Telecom 2 Law Firms 8 2 Oil Gas & Energy Ecommerce

10 DSCI Chapters operate in 12 cities representing over 1957 security and privacy professionals from varied Industry sectors. Members conduct regular meetings, organize educational seminars, share knowledge and discover new opportunities. All chapters are driven by voluntary association of individuals and run by an Anchor and Co-anchor.

Chapter Community

30 Chandigarh

355 Delhi & NCR 65 Jaipur

159 Ahemedabad 74 Kolkata 216 Mumbai 233 142 Hyderabad Pune 449 Bangalore 17 179 Coimbatore Chennai 38 Singapore

11 DSCI in 10 years

2008

Cyber Lab, Bengaluru

IT (AMENDMENT) DRAFT UIDAI Framework ACT, 2008 BILL © © Survey, Study DSF & DPF & Research

TRANS BORDER INTERMEDIARY 2012 DATA FLOW GUIDELINES Cybercrime Assessment Cybercrime Investigation Framework Training Material Manual I DAF-S© & DAF-P©

Internet Safety Campaign DATA CLOUD ADEQUACY Pocket Handbook SECURITY Securing on Cybercrime our Cyber Frontiers Investigation

DATA PROTECTION – INTERNET 2016 A P SHAH National GOVERNANCE COMMITTEE Govt. Software Information Procurement Security Policy Guidelines

DIGITAL ENCRYPTION PAYMENTS POLICY CSTF Recommendation Cybercrime Qualication & Roadmap Investigation Packs & Manual II Courseware

PERSONAL DATA Tech PROTECTION BILL Industry Repository Data Privacy Smart City Landscape Security 2019 Center for Cybercrime Investigation Training & Research

Policy Advocacy

KEY HIGHLIGHTS OF 2018-19

Personal Data Protection Bill

Centre for Cybercrime Investigation Training & Research

Cybersecurity Centre of Excellence

Research Studies & Reports

Industry Development Personal Data Protection Bill

The Government of India constituted a committee of Experts under the Chairmanship of Justice B.N. SriKrishna to study various issues relating to data protection in India and draft a law that ensures growth of the digital economy while keeping personal data of citizens secure and protected. DSCI CEO, one of the members in the nine-member committee actively participated and provided inputs to the committee deliberations.

Building upon the work of Justice A.P. Shah Committee, and the re-statement of the fundamental Right to Privacy by the Supreme Court of India in Justice K.S. Puttaswamy v. Union of India, the Bill is a step towards creating a sector-agnostic data protection framework, which calls for all stakeholders to be more responsible and build trust in dealing with personal data.

The committee released a report titled ‘A Free and Fair Digital Economy - Protecting Privacy, Empowering Indians’ and the draft Personal Data Protection Bill, 2018 for public consultation. NASSCOM-DSCI undertook the following initiatives to apprise its members over the key aspects of the bill and solicit inputs.

Organised member consultation meetings in Delhi, Mumbai, Hyderabad and Bangalore

Shared Bill insights at various Policy Roundtables with policy heads from Industry members

Provided a detailed walkthrough and possible implications of the bill to members

Created various collaterals and disseminated within forums for ease of understanding the bill

After extensive member consultations and collecting inputs, NASSCOM-DSCI came up with a comprehensive submission to the consultation paper advocating the creation of an overarching privacy law that safeguards the privacy of Indian residents and facilitates growth of the Indian digital economy.

Image source: PTI

Resources

https://meity.govhttps://meity.gov.in/writereaddata/files/white_paper_on_data_prhttps://meity.gov.in/writer.gov.in/writereaddata/files/white_paper_on_data_protection_in_india_171127_final_v2.pdf.in/writereaddata/files/white_paper_on_data_protection_in_india_171127_final_v2.pdf eaddata/files/white_paper_on_data_protection_in_india_171127_final_v2.pdfotection_in_india_171127_final_v2.pdf

http://meity.gov.in/content/personal-data-protection-bill-2018

http://meityhttp://meity.govhttp://meity.gov.in/writerhttp://meity.gov.in/writereaddata/files/Data_Pr.gov.in/writereaddata/files/Data_Protection_Committee_Report.pdf .in/writereaddata/files/Data_Protection_Committee_Report.pdf eaddata/files/Data_Protection_Committee_Report.pdfotection_Committee_Report.pdf

https://wwwhttps://www.dsci.in/sites/default/files/Personal-Data-Pr.dsci.in/sites/default/files/Personal-Data-Protection-Bill-2018-Highlights.pdfotection-Bill-2018-Highlights.pdf

Image source: indiantelevision.com 16 NASSCOM-DSCI Submission

The draft bill provides a rights-based approach to privacy and establishes a principal-agent relationship between the data principal and the data duciaries. The requirement of free, informed, specic and clear consent is an important mechanism to empower the consumers. The requirements on purpose limitations, collection limitations, and importance given to new age regulatory principles are big positives but present compliance challenges that need to be recognised and addressed. The below points highlight the same.

01 02 03 The provisions restricting the In order to design a consistent From an IT-BPM exports cross-border ow of personal and proportionate regulatory perspective, the current draft data are particularly framework, there is a need to neither provides certainty concerning as these mandate develop conceptual clarity around actual exemptions localisation of all personal data over personal data, sensitive which are necessary from the and provide wide discretion for personal data and critical date the law comes into force classifying personal data as personal data. nor addresses concern that critical data required to be possible future exemptions stored only in India. might reduce the protection available in this Bill to data of persons in foreign jurisdiction being processed in India.

04 05 06 07 Identifying signicant data The turnover based classica- The proposed DPA has a The industry to potentially get duciaries in an objective tion of small entities is not disproportionately wide around six months to opera- manner is likely to present a appropriate. The threshold has mandate. We have recom- tionally gear up for the law. We signicant challenge for the to be broad based to ease mended transparency and have recommended time Data Protection Authority small entities into compliances accountability measures, frames which we believe shall (DPA). This could result in which provide essential including suggestions on set us up for a successful unintended outcomes like protections to the consumers responsive co-regulation. For rollout. disproportionate compliance but do not dampen entrepre- the Government, we have burden and ineffectiveness of neurship and innovation. We suggested measures to the purpose for which the suggested a revised denition. strengthen predictability classication is intended. around rules and provide Accordingly, robust principles visibility to the Parliament on for designation of a signicant the use of State exemptions. data duciary have been suggested to be encoded in the law.

NASSCOM-DSCI have been advocating for a healthy balance between privacy and innovation, given that India is today emerging as a preferred hub for innovation and STEM talent globally. Research has identied that lack of privacy and data protection leads to competition problems, information and rationality problems, externalities, and the lack of properly specied property rights about personal data as important market failure problems which call for an adaptation of legal rules. In our submission, we have iterated that the resultant law, regulations and codes of practices should address these failures without impeding on innovation, ease of doing business and future oppor- tunities of the digital economy.

17 Centre for Cybercrime Investigation Training & Research

Karnataka State in collaboration with Infosys Foundation and DSCI has setup a Centre for Cybercrime Investigation Training & Research (CCITR) at Criminal Investigation Department (CID) Headquarters, Bengaluru. The prime objective of CCITR is to create excellence in inves- tigating Cybercrime cases using Information & Communication Technology as enabler.

The centre was formally inaugurated by the Hon. Chief Minister of Karnataka, Shri H. D. Kumaraswamy along with Shri M. B. Patil, State Home Minister; Shri Praveen Sood, IPS, DGP, CID; Mrs. Sudha Murthy, Chairperson, Infosys Foundation and Ms Rama Vedashree, CEO, DSCI.

As part of this collaboration, Infosys Foundation is funding the capital investment and operational expenditure over a period of ve years. It is one of a kind cyber forensics & training facility in the country in a Public-Private Partnership model.

CCITR Objectives

01 02 03 04

Build capacity of police, Create standard Research related to legal, Improving the investigation prosecution, judiciary in operating procedures technical & procedural & prosecution of handling technology (SOPs) in cybercrime aspects of cybercrime cybercrime cases in investigations investigations investigation Karnataka

CCITR will also feature a sabbatical program offering opportunity for forensics professionals from the industry to contribute and gain experience in real life cases being investigated by Law Enforcement Agencies (LEAs).

18 Cybersecurity Centre of Excellence -Telangana

DSCI is setting up a Cyber Security Centre of Excellence (CCoE) in Hyderabad, in partnership with the Government of Telangana. The vision of the CCoE is to accelerate Telangana state’s cyber security momentum and position it as one of the leading cyber security hubs in India. The CCoE will be serving as a hub for:

Building an Innovation ecosystem at the state 01 level with appropriate partnerships & associations, investment opportunities and Policy engagements

Building and aligning with existing start up 02 incubators

CCoE Mission Capability building at start-up, University and 03 State level for co-creation of products, designing of new services lines, market development, etc.

CCoE Mission

Lead Telangana’s transformation into a Cyber Security hub by creating a conducive ecosystem which nurtures innovation, entrepreneurship and capability building.

The CCoE will fast track development of cyber security products & services and endeavor to build a sustainable cyber security and privacy industry development momentum in the state of Telangana.

19 Research Studies & Reports

To foster Thought Leadership, we undertake research studies and publish reports on contemporary and emerging themes to support our policy advocacy and member and stakeholder engagement.

Our year-long research agenda helps in exchange and dissemination of information vital for developing a strong data protection culture and understanding the state of security preparedness of the industry. This year, DSCI has had a rich repertoire of Research Reports, some in partnership with our members.

The report aims to put spotlight on Indian cybersecurity product companies’ evolution and growth, product offerings, technological capabilities, geographical presence, partnerships and go-to-market strategies, funding landscape, talent, and the way forward. With a base of 175+ companies, the Indian cybersecurity product landscape has begun to create a promising story.

The report has been developed after comprehensive secondary and primary research, and covers the entire ecosystem from established product companies to new age start-ups across various technology areas.

Report link:

https://www.dsci.in/content/indian-cybersecurity-product-landscape

The report developed in partnership with PwC intends to create awareness on the importance of cyber security within smart cities and covers key security initiatives taken across the globe and learnings from these global initiatives. It highlights how Indian smart cities face specic challenges, from security capabilities and awareness to security governance and budget allocation, and the risk landscape for Indian smart cities. The report serves as a preliminary guide for smart city stakeholders to understand the steps that need to be taken to enhance the cyber security posture of smart cities.

Report link:

https://www.dsci.in/content/creating-cyber-secure-smart-cities

20 A joint study was conducted by DSCI & Deloitte to understand the preparedness of organisations based in India with the requirements mandated by the European Union’s (EU) General Data Protection Regulation (GDPR). The objective of this survey was to measure the GDPR readiness process and the overall alignment towards privacy of Indian organisations.

The report details many aspects such as the awareness of the Indian organisations, how GDPR would be applicable to them, how they are preparing for it, and what are the leading practices used by Indian organisations to adhere with the requirements laid down by the regulation.

Report link:

https://www.dsci.in/content/gdpr-preparedness-survey-report

The Secure in India research study jointly undertaken by DSCI & KPMG studies the GCC landscape in India and their cyber security footprint and enablers needed to make India a preferred destination.

The report intends to enable leaders of global organisations make informed decisions on their India-based GCC strategy for cyber security delivery. It provides key recommendations for Cyber GCCs to sustain their competitive advantage and transform into global ‘centres of expertise’.

Report link:

https://www.dsci.in/content/secure-india-leaders-insights-gcc-empowered-global-cybersecurity-delivery

Consumer data is increasingly crossing the organizational boundary due to data being shared across platforms. The report talks about the need for organisations to shift their data privacy objectives from enterprise centric to consumer centric approach.

The report also discusses the evolving data protection approaches laid out in many legislations such as the EU-GDPR, UK Data Protection Bill, 2017, Qatar: Protection of Privacy of Personal Data Act, 2016, etc. that x the onus of protection of personal data throughout its lifecycle on the organisation, covering many instances of processing and mandating security practices to be a part of these processing activities to protect consumer privacy.

Report link:

https://www.dsci.in/content/consumer-data-privacy

21 Industry Development

NASSCOM-DSCI have undertaken an Industry Development initiative to realize the Cyber Security Task Force (CSTF) vision to make India a global hub for Cyber Security. This initiative focusses on domestic market development, growing the Indian cyber security start-up ecosystem, global market development, policy advocacy for Industry growth, and talent and skill development in cyber security.

CSTF Vision $35bn 1000 1mn by Global Market for Product Security India Cyber Security Startups Professionals 2025 Products and Services

22 Use Case Clearing Skill Development House (UCCH)

UCCH is a platform to bring together The objective is to promote Cyber researchers, entrepreneurs, solution Security Skills by implementing training providers, users and policy makers to programs, advocating with the IT brainstorm on various problem Industry for adoption of Qualication statements which would be converted Packs (QPs), running skill-based into detailed Use Cases and released Hackathons, elevating Cyber Security Industry for designing solutions around the Skills at Industry Platforms, and identied areas. conducting deep-dive workshops across DSCI's agship events and Development roundtables. Tracks

Domestic Market Global Markets Policy Advocacy Development Development

The objective is to focus on growing the The objective is to develop and open The objective is to focus on expansion Cyber Security Products & Services new avenues of business for Indian of the Cyber Security Industry by market in the country in order to build a Cyber Security Product & Services advocating favourable policies for the safe and secure industry and nation. industry across potential geographies Indian Product Companies to grow in Few key initiatives are cyber security and regions of the world in sync with the ecosystem, work closely with the policy for states, securing Smart Cities, key stakeholders such as MEA, MeitY, Government and keep Industry players awareness on OT/IT integration International Trade Bodies, and user abreast of various policy developments challenges faced by the CII sector, and organisations. to try and reduce bottlenecks that have more. the propensity to impact growth.

Cyber Security Research Promoting INDIA as the Clusters hub for Cyber Security

The objective is to focus on building a The objective is to execute research The objective is to promote ‘Brand conducive cyber security ecosystem to programs & thought leadership in Cyber India’ as the hub for Cyber Security and spur innovation & fast track Security and Privacy to provide insights privacy globally which include development of products & services. and analysis to the Industry on new showcasing India`s Cyber Security and The track will facilitate partnership markets, new services, product privacy capabilities to the world via among the Industry, Academia & landscape, case studies, etc. global outreach, branding & Start-up for co-creation of products, communication programs for increased designing of new service lines, boost visibility. Cyber Security R&D, innovation and quality human capital for meeting talent requirements.

2 23 Industry Development Initiatives

Cyber Shikshaa

DSCI in partnership with Microsoft, and in association with C-DAC & ISEA of MeitY launched the Project ‘Cyber Shikshaa’ for skilling women engineering graduates in Cyber Security. The project was launched by Mr. Ajay Prakash Sawhney, Secretary, MeitY in the presence of Mr. Anant Maheshwari, President, Microsoft India; Dr. Sanjay Bahl, DG CERT-In and Ms Rama Vedashree, CEO, DSCI.

The three year campaign aims to educate women engineers in the 1st year, from Tier 2 & Tier 3 cities as well as key IT industry hubs, on Cyber Security and provide them with placement assistance. The free program is a four months interactive training course, exclusively for women, with combination of theory, case studies, and practical hands-on projects.

As part of the program, DSCI in the rst year of Cyber Shikshaa conducted training batches for deserving women candidates at various cities such as Srinagar, Patna, Mohali, Vijayawada, Bangalore, Noida and Hyderabad, and placement process is in progress.

Skill Development

DSCI, in association with NASSCOM SSC, mentored Team India at the BRICS 2018 Skills Challenge held in Johannesburg, South Africa, who bagged the 1st runner-up title.

DSCI, in association with EY, conducted a Cyber Security Hackathon at AISS 2018 where 22 teams participated from Academia, Research and Industry verticals.

DSCI, in association with NASSCOM SSC, managed the Cyber Security track at the World Skills Competition – Regional & National rounds.

24 UCCH Workshops

DSCI conceptualised the Use Case Clearing House (UCCH) concept to promote innovation and nurture the product development ecosystem in India. Under this initiative, two workshops were conducted on Data Privacy technologies where participants evaluated privacy technologies, discovered problem statements and explored privacy protection architecture. It witnessed extensive participation from Privacy & Security professionals, entrepreneurs, product organisations, solution providers, researchers, etc. These use cases will be disseminated through the UCCH platform being developed by DSCI.

Few of the identi ed use cases under privacy technologies are data driven analytics, data minimisation, personal data erasure, etc.These use cases will be disseminated through the UCCH platform being developed by DSCI.

Smart Cities Security

As part of Domestic Market development, DSCI highlighted the inadequacy of security solutions in Smart Cities RFPs. We provided guidance on inclusion of cyber security in RFP clauses to the Ministry of Housing and Urban Aairs (MoHUA). DSCI presented to the Bureau of Police Research & Development (BPR&D) ocials on how to secure smart cities and other cyber security parameters to be taken care of.

A roundtable meeting was held with Indian security start-ups highlighting smart city requirements and urging collaboration amongst them to form a solution stack and oer them to System Integrators (SIs). Apart from these, we jointly developed a report with PwC, on ‘Creating Cyber Secure Smart Cities’ which allows stakeholders to understand the risks and steps that need to be taken to enhance the cyber security posture of smart cities.

Smart City Pune

DSCI has been working closely with the Pune Smart City Development Corporation Limited (PSCDCL) for creating a cyber secure Pune smart city. We presented an analysis to PSCDCL on smart city security which highlighted the cyber security products and services requirements, security investment requirements, and cyber security gaps and challenges in Smart Cities.

We have signed a Statement of Intent (SoI) with PSCDCL to help them implement a model smart city cyber security policy, which can be replicated across other cities.

25 Research Reports

Launched Indian Cybersecurity Launched Creating Cyber Secure Launched Secure in India - a Product Landscape report which Smart Cities Report - a DSCI-PwC DSCI-KPMG joint report which showcases the technological joint Thought Leadership report provides key recommendations capabilities, go-to-market strate- which acts as a preliminary guide for Cyber GCCs to sustain their gies, achievements, evolution and for stakeholders to enhance the competitive advantage and trans- progress of Indian cybersecurity cyber security posture of smart form into global 'centres of exper- product companies. cities tise'

India Pavilion at GISEC

DSCI took a delegation of Cyber Security Product Companies and setup an India Pavilion at the Gulf Information Security Expo & Conference (GISEC), Dubai. The prime objective of hosting this delegation and pavilion was to open new business avenues for Indian Security Companies in the Middle East and provide them a platform to showcase their capabilities and technology stack to key decision makers across the globe. This initiative intended to contribute towards building ‘Brand India’ for Cyber Security at global forums.

The delegation included twelve Security Product Companies, namely AKS IT Services, Aujas, AuthBase, BluSapphire, CloudSek, Data Resolve, Innefu, Khika, Klassify, Netmonastery, Odyssey Technologies and ProDmarc.

Delegations

DSCI hosted delegations from several countries and presented on the Cyber Security capabilities of India, Indian Cyber Security Services Industry and India Advantage to enable global market developments, explore collaboration with global bodies, and elevate Brand India.

Vietnam Oman France Hosted a Vietnam delegation Hosted a delegation from Oman and Hosted a Digital Taskforce delegation from comprising of different Vietnam presented on the IT-ITes Landscape of The Mouvement des entreprises de France ministry ofcials from its IT, Telecom India, Cyber Security Framework to (MEDEF) International, the largest employer safeguard Data & Privacy, Indian Cyber federation in France, and presented on and Commerce department, and Security Services Industry, DSCI Cyber Cyber Security Landscape and India presented on Indian Cyber Security Forensics initiatives and Cyber Security Advantage to the senior Industry leaders capabilities and discussed about Skill Development initiatives. from France. India’s security product and service industry readiness.

Cyber Security - Market Growth

As part of domestic market development, DSCI has been working with various stakeholders for funding enablement and stimulating growth by infusing additional revenue in the Indian cyber security industry. INR 13Cr+ USD 23M+ USD 75M+ Funding raised by Indian Funding raised by 13+ Additional revenue in Start-ups through TDB Start-ups via VC Connects 2018 with a growth rate of with DSCI support 25-30% CAGR, leading to a total revenue of USD 450M

26 Workshops Other Initiatives

Product Security SCOPE Start-up Conclave

DSCI organised a workshop on Product DSCI joined hands with SCOPE as the ‘Knowledge Partner’ Security with the objective to bring experts for Start-up Conclave hosted on the theme ‘Synergizing in the area of product security to help Initiatives of CPSEs, Govt. Agencies and Industry dene India as a Destination for Product Champions on Start-ups’. Security Solutions and Services. SMEs from various industry sectors such as DSCI presented on ‘Enabling Start-ups for Vibrant India’ Engineering, Software, Electronics, IT where insights on the overall Indian Tech Start-up consulting, Retail and Healthcare ecosystem, Product Industry Capability Map, etc. were participated. The focus areas included shared. We urged the need for a level playing eld for ‘Build India Brand’ for Product Security, Security Start-ups to participate in procurement increase skilled manpower in Product opportunities of Government and PSEs. We also shared security, thought leadership, and PoV’s on how PSEs can plan for focused initiatives for nurturing cyber future of Product Security. security start-ups and enable ways to provide test beds/platform for proof of concept for solutions of start-ups.

VLSID Conference IoT Security DSCI showcased & exhibited its key initiatives at the 32nd DSCI, in association with Payatu International Conference on VLSI Design & 18th Technologies, conducted an IoT Security International Conference on Embedded systems, on its Awareness Workshop at NASSCOM 10K Industry Development charter, Start-up Initiative, Indian ofce. The workshop was attended by Cyber Security Product Landscape Report and Tech stakeholders of IoT Security ecosystem Capability Repository. The objective was to engage with including product companies, developers & Hardware, Semiconductor & Embedded Systems testers, and IoT Security enthusiasts. The community in India. workshop entailed overview of IoT and Security issues, new attack surfaces in IoT DSCI also presented on ‘Hardware and Security – solutions, IoT issues on popular protocols Opportunities & Risks’ which was chaired by key Industry like MQTT, COAP, BLE, ZIGBEE, and typical and Government leaders. The initiative facilitated discussion hardware issues such as Open Debug and dialogue on Hardware Security among the key ports, Data, Firmware IoT stakeholders of hardware & embedded systems community security-by-design. in India for identifying opportunities, risks and creating roadmap for the security Industry.

GeoSmart India Conference

DSCI associated with GeoSmart India 2019 Conference as Cyber Security a ‘Strategic Partner’ and hosted extensive panel discussion sessions. CEO, DSCI moderated a panel on ‘AI – IOT: Challenges in Public Empowering Vision New India’ which included key industry Sector Enterprises leaders where they focused on the need for achieving digital transformation with focus on Cloud, AI, IoT & Mobility, and the need for digitally and physically developing the DSCI & SCOPE jointly hosted a workshop technology infrastructure for emerging technologies in order ‘Approaching the Cyber Security to spearhead innovation under the guidelines of data Challenges in CII Sector’ for Public Sector privacy and cyber security. enterprise professionals. The workshop was attended by leaders including CXOs, Another session on ‘Safe and Resilient Cities’ focused senior and middle management executives around the various aspects of making smart cities safe and from Public Sector Enterprises to address secure from physical to cyber levels. Cyber Security challenges in managing their Critical Information Infrastructure. The workshop covered areas such as building Cyber Security Strategy, enterprise liabilities due to vulnerabilities, compliance and security interconnectedness, reciprocity strategy during attack emergency, and more.

27

PROGRAMS & INITIATIVES

Policy Advocacy

Data Privacy

Capacity Building

Awareness & Outreach Policy Advocacy

In its Policy Advocacy role, DSCI proactively engages with government and other key stakeholders on policy matters in the realms of Cyber Security, Privacy, Cybercrimes, Internet Governance, Trans-border Data Flows, Payment Security and Skill Building.

At the national level, we often work in association with Ministry of Electronics and Information Technology (MeitY), Department of Commerce, (DoC), Ministry of Home Affairs (MHA), National Security Council Secretariat (NSCS), Ministry of Housing and Urban Affairs (MoHUA), Ministry of Health and Family Welfare, NITI Aayog, Competition Commission, Reserve Bank of India, among a host of other bodies.

Draft Information Technology [Intermediary Guidelines (Amendment)] Rules, 2018

The draft Intermediary Guidelines were framed by the Government in response to the growing menace of fake news. At present, Internet intermediaries enjoy ‘safe harbour’ (protection) from legal action for content posted by users subject to certain requirements. The draft Intermediary Guidelines endeavour to enhance the obligations on Internet intermediaries; for instance, the draft guidelines propose that Internet intermediaries must enable tracing the originator of unlawful content on Internet platforms. This could be problematic for certain messaging platforms which use end-to-end encryption for secure communication.

NASSCOM-DSCI submitted comments on the draft guidelines and the response identied the existing interpretation issues with the Intermediary Guidelines and advocated the limitation of scope of the proposed amendment and removal of disproportionate compliance requirements. Intermediary liability is an important issue for the nation and the draft guidelines have generated much discussion among civil society and Internet companies, with opinions divided even within the Industry.

Regulatory Framework for Over-The-Top (OTT) Communication Services

TRAI released a consultation paper to discuss whether OTT services and those offered by Telecom Service Providers (TSPs) are same or substitutable and whether a regulatory arbitrage exists between TSPs and Internet Platforms and Services which should be addressed through regulation.

Our submission, reiterates that the term ‘OTT’ does not acknowledge the innovation in Internet Platforms and Services at the application layer, their variety of services and product offering. Instead, the term and its usage seem to imply that they are simply methods of serving. In India, we should appropriately refer to OTTs as Internet Platforms and Services in line with the terminology and understanding of Computer Technologists.

The submission also highlighted the fundamental difference between the services provided by OTT service providers and those provided by TSPs, and why they should not be treated on par or as being the same. Implementing interoperability would require the creation of technical standards that would work across applications. The wide variety of Internet Platform communication services already available would make the implementation of mandatory interoperability very challenging.

30 Draft National e-Commerce Policy

Department of Industrial Policy and Promotion (DIPP) released a draft national e-commerce policy envisioning an overarching policy at the National level. DSCI was part of the working group created to debate the different contours of the said policy. The main objective of the draft Policy is to prepare and enable stakeholders to fully benet from the opportunities that would arise from progressive digitalization of the domestic digital economy.

NASSCOM-DSCI analysed the draft, consulted member organizations operating in this space and accordingly prepared inputs which has been submitted to DIPP. In our submission, we highlighted the need to guard against overlap of the policy with existing laws as it may create ambiguity and varying interpretations.

NITI Aayog National Health Stack Scheme

NITI Aayog released a consultation paper for the creation of National Health Stack (NHS) and invited comments. NHS envisages a centralized infrastructure for all citizens of the country in order to streamline the health information and facilitate effective management of the same.

DSCI-NASSCOM analysed the draft, consulted member organizations operating in this space and accordingly prepared inputs which has been submitted to NITI Aayog. We have recommended a comprehensive study of global health programs and state health care models to establish best practices while creating the nal strategy and approach paper for the national health stack scheme.

31 Data Privacy

Data privacy has always been a strong focus area for DSCI and we have been actively working with the Government and Industry, voicing out the required focus, approaches and policies in this domain. Burgeoning digitization and a globalized economy has increased transborder data ows exposing personal data between businesses and individuals across the globe. Technological advancements, such as Big Data, Social Media, Cloud computing, Internet of Things (IoT), Smart Cities have been giving rise to fresh challenges from a data privacy perspective. These developments, both globally and in India, have warranted explicit focus on privacy in our legal and regulatory systems.

Year 2018 witnessed real advancements in the Privacy realm for India. After the landmark decision in 2017 by the Hon. Supreme Court of India granting a fundamental Right to Privacy, the Justice SriKrishna Committee was setup with DSCI CEO as one of the members for drafting a Personal Data Protection Bill for India. The draft bill upon multiple consultations has been submitted by the committee, and DSCI has been brieng its members on provisions of the draft bill and its implications on various Industry segments, and has been tracking it closely as Government prepares for its enactment.

Apart from these, a highlight of other Data Privacy activities are listed below:

EU GDPR Awareness

The European Union’s General Data Protection Regulation (EU GDPR) became fully applicable in May 2018 and represents the biggest change to EU data protection law in more than twenty years. It grabbed headlines as a result of its extra-territorial reach, the various new obligations it imposes upon organizations, and the enhanced enforcement powers given to member state data protection supervisory authorities. In particular, supervisory authorities may levy nes of up to €20 million or 4% of annual global revenue (whichever is higher).

DSCI had been actively engaged in spreading awareness on the required preparedness, its impact and suggested changes to make the Indian industry GDPR compliant. DSCI in association with Deloitte conducted an in-depth survey on the GDPR readiness and awareness levels of the Indian Industry. The survey ndings from 58 respondents show interesting facts such as 60% organisations view GDPR as a source of competitive advantage, 20% of Indian SMEs appointed a DPO and 80% of large Indian rms appointed a DPO. The survey ndings were published in the form of a GDPR Preparedness Survey Report’ which can be accesses here: https://www.dsci.in/content/gdpr-preparedness-survey-report

DSCI with NASSCOM also created a helpdesk to respond member’s basic queries and offer general guidance as they prepare for GDPR compliance and demonstrate accountability. Apart from this, various chapter meets, roundtable discussions, consultation meetings and sessions were conducted to make the Industry ready for GDPR enforcement.

EU-GDPR Awareness

GDPR Workshop for GDPR Guidance GDPR Webinar Workshop with NASSCOM-DSCI DSCI members Material Series the European GDPR Helpdesk Commission

Mumbai, GDPR Mumbai, Delhi NCR, Implementation - Delhi NCR, Bengaluru 20 point Bengaluru action plan

GDPR Applicability matrix

32 India Data Leadership Summit

DSCI hosted the India Data Leadership Summit 2018 with the aim to bring diverse themes, narratives and evolution of data to the forefront. As India is nalising its Data Protection Legislation, the Summit aimed to deliberate on diverse themes of Privacy and Data Protection by various stakeholders. The summit’s key themes centred around global Data Flows, Data Driven Public Governance, Data Diplomacy, Privacy Governance and more.

Ministry of Information & Technology (MeitY), Ministry of External Affairs (MEA), Dept. of Commerce (DoC), several User Enterprises, Civil Society and IT Industry were part of the discussions. The summit was supported by Digital Europe, Google, Facebook, Microsoft, Infosys, TCS and start-ups including Arkka and Klassify.

Privacy Certifications

In an endeavour to increase the base of privacy professionals in the country, DSCI conducts certication programs; namely, DSCI Certied Privacy Lead Assessor (DCPLA©) and DSCI Certied Privacy Professional (DCPP©) certication program.

DSCI Certified Privacy Lead Assessor (DCPLA©) DCPLA© certication aims to equip the potential assessors with necessary knowledge and tools to assess organizations’ privacy implementations in accordance with DSCI Assessment Framework for Privacy (DAF-P©) and DSCI Privacy Framework (DPF©). The training program also intends to explain the intent behind each of the practices dened under the nine practice areas of (DPF©), to help the assessors understand, analyse, investigate and appreciate the various aspects of privacy implementation within organizations.

DSCI conducted 4 DCPLA batches in the year where 110 professionals were trained comprising a wide range of participants from leading banks, IT-BPM industry, consulting & law rms, security & IT companies, etc.

DSCI Certified Privacy Professional (DCPP©) DCPP© is a credentialing program for individuals who want to start and accelerate their career in privacy. It is a pioneer credentialing program which empowers candidates with the requisite knowledge and equips them with the necessary skills in the eld of data privacy. It is an industry standard certication for professionals entering and working in the eld of privacy.

In the year 2018-19, over 100 professionals attempted to secure the DCPP certication credential; with 45 % candidates managing to add it to their privacy repertoire.

33 Privacy in the Indo-Pacific

U.S.-India Business Council (USIBC) hosted a closed-door roundtable meet on ‘Privacy in the Indo-Pacic’ to bring together key decision makers, policy in uencers, and impactful stakeholders from the Government of India, the United States and Japan. The discussion aimed to highlight Asia Pacic Economic Cooperation (APEC) - Cross Border Privacy Regime (CBPR), interoperability, and other options that protect consumer data while promoting innovation, security and data delity.

Along with the CEO, DSCI, the roundtable was presided over by National Cyber Security Coordinator; Joint Secretary, MeitY; other Indian parliamentarians; and representatives from various governments of the US, Japan, EU and Singapore. We shared the NASSCOM-DSCI perspective on Data Protection & Privacy and cross-border data ows for collaboration, innovation and growth.

Data Economy & Ethics

DSCI in collaboration with Infosys organised a roundtable discussion on Data Economy & Ethics. The discussions examined the elements, strategies, policies, and norms shaping the data economy. Different dimensions in the discussion were:

Platform/ Digitization Business Units of Service E-commerce Industry Industry Global tech Industry Product company, start-up building data-centric solutions Player working on IoT, Industrialization 4.0

Data Privacy Commitments in the data ecosys- Legal/policy opinion tem

Data Privacy Day

Data Privacy Day is celebrated on January 28, which serves as an opportunity to further the long-standing goal of robust use and transfer of data in a fashion that is responsible and protected. On this occasion, DSCI sensitized individuals and disseminated privacy practices and principles among the Industry, Members and Academia.

Wallpaper

Privacy Quiz Chapter Meeting

Twitter Chat Privacy Message Posters

As part of member awareness, various chapter meetings were conducted in Bangalore, Delhi, Hyderabad, Mumbai and Pune covering discussions over Data Privacy & Data Protection fundamentals, principles and privacy practices, Personal Data Protection Bill insights, implementing Privacy-by-Design, sharing Privacy trends and exchange of privacy practices.

34 Privacy in the Indo-Pacific Capacity Building

DSCI continued to build capacity of law enforcement, judiciary, armed forces & prosecution departments in handling cybercrime investigations through its Cyber Forensics facility at Bengaluru. Apart from the Centre for Cybercrime Investigation Training & Research (CCITR) initiative, which will be largely serving as a centre for elevating cybercrime management and forensics in Karnataka, DSCI conducted training and advising law enforcement agencies on cyber investigation throughout the year. DSCI also provided a platform for stakeholders including judiciary, industry (IT-BPM, BFSI, oil & gas, energy) and academia to collaborate and created awareness to effectively handle cybercrimes. Personnel Trained from April 2018 to March 2019

12 Karnataka Police Personnel 48 75 Judicial Academy 764 76 Training College, Trivandrum city, Kerela

Indian Armed Forces

Indian Air Force 92 North Eastern Police Academy (NEPA)

Afghan National Army 380 Others 480

Stakeholders Trainee Profiles Number of Personnel trained

Superintendent of Police (SP), DSP, Karnataka Police Personnel Police Inspector (PI), Police Sub-inspector (PSI), Civil Head Constable, Civil Police Con- 764 stable Non-Commissioned Ofcers (NCO), Colonel, Indian Armed Forces Lieutenant Colonel, Captain 76 Squadron Leader, Flight Lieutenant, Master Indian Air Force Warrant Ofcer (MWO), Junior Warrant 75 Ofcer (JWO), Corporal, Sergeant Afghan National Army Armed military ofcers 12

North Eastern Police Academy (NEPA) DSP, Police Inspector, Police Sub-inspector 48

Judicial Academy Judges 380 Training College, DSP, Police Inspector, Police Sub-inspector Trivandrum city, Kerala 92 Senior Ofcers from abroad, National Others Security, DIPP, etc. 480 Total 1927

35 Training Programs

Several 5-day training programs were Two 3-day training programs were Four short courses were conducted on conducted for Police personnel from conducted on ‘Investigation of ‘latest trends in cybercrimes & case Cybercrime, Economic Offences and Cybercrime cases & Cyber Forensics’ studies’ for Non-Commissioned Narcotics (CEN) Police Stations for senior ofcers of the rank of SP, Ofcers, Colonel, Lieutenant Colonel & located across Karnataka State where DSP, PI & PSI and probationary Captain from Corps of Military Police over 300 personnel were trained in 13 detective Sub-Inspectors from (CMP). different batches. Cybercrime Division, CID, Karnataka. An exclusive 1-day training program A short course on ‘Overview of Three 4-day training programs were was organized for CISOs and Cyber Cybercrimes’ for Afghan National conducted on ‘Cybercrime Security Ofcers of Dept. of Defence Army was conducted. Investigation Techniques’ for Production with the help of Ministry of probationary Police Ofcers of the rank Defence. of Sub Inspector and Reserved Sub An exclusive 1-day course was Inspector (RSI) in Karnataka Police conducted on ‘Cybercrime Academy (KPA). A short course on ‘Cybercrime Investigation & successful case Awareness’ was conducted for the studies’ for ofcers from different parts employees of a co-operative bank of Kerala at Police Training College, where ofcials were informed about Thiruvananthapuram. various nancial frauds committed using technology and the ways to handle them.

Workshops

Improving Financial Crimes Investigation

DSCI has built a program for LEAs to equip them with the latest technology trends and skills to address challenges pertaining to digital payment frauds through workshops at various cities. DSCI joined hands with Paytm Payments Bank and conducted two workshops in Kolkata & Mumbai, attended by ofcials involved in cyber investigations.

A Pocket Guidebook on ‘Cybercrime Investigation’ which would act as a quick reference to the Investigating ofcers was also distributed. The pocket book is enriched with the best practices and contextual information required to effectively investigate cybercrimes. The pocket guide was translated in Kannada and further distributed.

A workshop on ‘Roadmap towards building laws, policies, guidelines, practices for securing cyber space’ was conducted for National Security Ofcers of BIMSTEC Countries at Sardar Vallabhbhai Patel National Police Academy, Hyderabad. National Security Ofcers were made to understand the application of cyber laws and best practices to be incorporated to secure cyberspace.

A full day workshop on ‘Important provisions of Information Technology Act 2000 (Amendment 2008) & Admissibility of Electronic Evidence’ was conducted for Karnataka High Court judicial ofcers.

36 Capacity Building Sessions

A session on ‘Cybercrime Investigation Techniques’ and ‘Role of Digital Forensics in Investigation of Cybercrime cases’ was conducted for police ofcers of the ranks of DSP, PI & PSI at North Eastern Police Academy, Meghalaya (NEPA).

Multiple sessions on ‘Electronic Evidence’ were conducted for judges of Karnataka Judicial Academy (KJA).

A session on ‘Cybercrime Awareness’ was conducted for Indian Air Force Officers with the rank of Sqn Ldr, Flt Lt, MWO, JWO, Corporal & Sergeant.

A session on ‘Live cases of cybercrime investigation, IT Act 2000 (Amendment 2008) and Digital Forensics’ was conducted for the senior executives of one of India's leading PSUs in engineering and manufacturing.

Two sessions on ‘Search & Seizure of Digital Evidence’ and ‘Demonstration of Digital Forensics tools’ was conducted for Karnataka Lokayukta Ofcials.

An exclusive session on ‘Digital Forensics in crime Investigation – myths and realities’ was held at Digital World of Global Policing Summit (DIGIPOL), Hyderabad, Telangana.

37 Awareness & Outreach

DSCI organizes regular events, conferences, workshops and roundtable meetings to interact and engage with various stakeholders. Creating awareness and deliberation on contemporary issues of Security and Privacy through campaigns and programs forms a key part of our outreach efforts. DSCI Membership Program as well as its Chapters foster a network of Security and Privacy professionals sharing their views through our platform. We actively provide key inputs to the media on all dimensions of data protection, privacy and cyber security and related topics. Our event platforms serve to inform and educate end users and different target segments on contemporary issues pertaining to DSCI’s domain of work.

Annual Information Security Summit

The 13th edition of Annual Information Security Summit (AISS) 2018 was inaugurated by Rishad Premji, Chief Strategy Ofcer & Member of the Board, Wipro limited and Chairman, NASSCOM and Chief Guest, Ajay Sawhney, Secretary, Ministry of Electronics & Information Technology, Government of India.

EVENT HIGHLIGHTS 160+ 900+ 65+ SPEAKERS DELEGATES SPONSORS, PARTNERS & EXHIBITORS

06 01 04 INDUSTRY HANDS-ON BREAKFAST WORKSHOPS WORKSHOP SESSIONS

02 66 06 LUNCHEON SESSIONS ROUNDTABLES / CLOSED MEETINGS DOOR SESSIONS

The summit witnessed a congregation of speakers and delegates from a varied mix of Industry, Government, LEA, Academia and Start-ups and hosted 66+ sessions consisting of a rich blend of topics relevant to the contemporary realm of Cyber Security and Data Protection.

KEY TOPICS

Data Protection Digital Identities DevSecOps Smart City Security

Cloud Security Distributed Ledger Cognitive Security Threat Intelligence technology

Advanced Fraud Multi Cloud Mobile Device Network Security Detection Parallization Security

38 AISS 2018 was crafted to make it an experience for the Cyber Security fraternity. Apart from the tech based sessions, it involved a lot more.

Community Roundtable Townhall with Meetups Discussions CERT-In Report Launch

Exhibition Pavilion DSCI Security EXPERIENCE @ AISS 2018 Show

Excellence Debates Awards Fireside Hackathon Innovation Chat Box

2 39 DSCI Excellence Awards

DSCI successfully hosted the 8th edition of its Excellence Awards for Corporate, Product and Law Enforcement Segments at AISS 2018. Dr. Gulshan Rai, National Cyber Security Coordinator, Govt. of India was the Chief Guest and Debjani Ghosh, President, NASSCOM along with the honourable jury, felicitated the winners.

DSCI received 238 nominations this year and 23 winners were awarded at the ceremony. Apart from the categories, Innovation Box – Most Innovative Product of the Year, Hackathon and BRICS Future Skills winners were also awarded for winning their respective contests.

ESTEEMED JURY PANEL

Corporate Segment

Pramod Bhasin Kersi Tavadia Neelam Dhawan (Chair of Jury) Founder, Genpact CIO, BSE Board member at Chairman, CLIX Capital Services Royal Philips Ex-CEO, GE Capital, Asia & India Netherlands and ICICI Bank

Prakash Kumar Vijay Sethi CEO, GSTN CIO, Hero MotoCorp

Product Segment

Rajendra S Pawar (Chair of Jury) Anand Pande Baljinder Singh Chairman & Co-Founder, CISO, GSTN Global Head of Digital NIIT Group & Founder, Transformation & NIIT University Global CIO, EXL

Sameer Ratolikar Dr. Sanjay Bahl Vikram Gupta Executive VP & Director General, Founder & CISO, HDFC Bank CERT-In Managing Partner, IvyCap Ventures Advisors Private Limited

LEA Segment

Loknath Behera, IPS Pratap Reddy, Vakul Sharma IPS DGP, Kerala Police Addl. DGP, Advocate, Karnataka Police Supreme Court

40 WINNERS

Corporate Segment

Best Security Practices in Organization

IT-ITES/BPM IT-ITES/BPM BANKING SECTOR CII SECTOR SECTOR (LARGE) SECTOR (SME) IDFC Bank BSE Ltd. Infosys Quatrro Processing Services Private Ltd.

ENERGY SECTOR INSURANCE SECTOR E-COMMERCE SECTOR

Hindustan Petroleum Max Life Insurance Co. Ltd MakeMyTrip India Pvt Ltd Corporation Ltd.

Special Jury Recognition

SECURITY PRACTICES IN SECURITY PRACTICES IN SMALL FINANCE BANK DATA CENTRES Ujjivan Netmagic

Industry Leaders

Security Leader of the Year

SHARAD SADADEKAR RAVINDRANATH HIROLKAR BRIJESH DATTA HDFC Life EXL Service Reliance Jio Infocomm Ltd. (BFSI) (IT) (CII) Privacy Leader of the Year

VASANTH PAI Tech Mahindra Best Privacy Practices in Organization

IT-ITES/BPM SECTOR

MetLife Global Operations Support Center

41 Cyber Security Evangelists

CYBER SECURITY CYBER SECURITY RAISING SECURITY SERVICES EDUCATION AWARENESS Aujas Networks Pvt. Ltd. IIT Kharagpur HDFC Bank Ltd.

Product Segment

Security Product Company of the Year

Innefu Labs NetMonastery

Innovation Box: Most Innovative Product of the Year

SecurelyShare Software Pvt. Ltd.

LEA Segment

Capacity Building of Law Enforcement Agencies

State Cybercrime Cell, Bhopal, Madhya Pradesh Police India Cyber Cop of the Year

A.K. Saha, Police Inspector, Cybercrime Police Station, Kolkata City

42

Financial Security Conclave – FINSEC

Data DSCI hosted the maiden edition of its Financial Security Protection Conclave – FINSEC in Mumbai. The two-day conference & Privacy Digital focussed on creating a robust cyber security and privacy Platformization Payments Security agenda for the BFSI vertical to spur innovation, create capabilities and ensure a resilient ecosystem. At FINSEC, over 50 speakers and 300 participants deliberated on contemporary Token Financial and emerging technology trends, security and privacy Economy Security Architecture challenges in the nancial security domain and shared best practices and learnings.

On the side lines, DSCI released a report on ‘Consumer Data Fintech privacy’ and also shared insights on the efforts being taken for Innovation KEY THEMES Blockchain Cyber Security Industry Building. Four industry workshops were conducted around Fraud Management in the nancial sector, Threat Hunting, Securing mobile apps & client identity in Digital Economy and building a business-driven Financial SOC. Deception & Threat Authentication Hunting

Analytics -AI, Machine Microservices Learning, & Open API Deep Learning Financial Economy Frauds & Forensics 09 280+ 62 36 Sponsors, Partners Delegates Speakers Sessions & Exhibitors

2 44 Best Practices Meet

The 10th edition of DSCI’s technology-centric event – Best Practices Meet (BPM) was successfully held with the underlying theme ‘Platformization of Security’. The two-day event endeavoured to explore in greater detail the rapidly emerging paradigm of Platformization, which is becoming central to the digitized world and is fundamentally altering the way Security is being viewed, understood and implemented across industry verticals and enterprises.

BPM hosted two hands-on workshops on Malware Investigation & Memory Forensics, and on Exploit Kit with Ransomware, and over 26 sessions presided by more than 50 speakers. The meet was attended by over 300 professionals from various NASSCOM and DSCI member organisations and professionals from leading IT companies, banks, GICs, academia and start-ups. Few other highlights include the launch of a thought leadership report ‘Secure in India’ with KPMG, an exclusive session for women professionals for promoting ‘Women in Security’ initiative with Target.

11 280+ 60 31 06 Sponsors, Partners Delegates Speakers Sessions Workshops & Exhibitors

2 45 Other Initiatives

CIPL & IAPP sessions on Data Privacy CEO, DSCI presented a special session at the Centre for Information Policy Leadership (CIPL), a preeminent global information policy think tank located in Washington, DC, London and Brussels, on the Draft Indian Data Protection Law wherein she shared its key elements, current status in the legislative process and the potential impact of the future law on organisations. Several corporates from the UK, having operations in India, participated in this brieng.

She also presented at the International Association of Privacy Professionals (IAPP) Data Protection Intensive: UK 2019 conference where she shared insights on the current Data Privacy framework in India and highlighted the salient features of the Draft Personal Data Protection Bill, its possible implications, and key differences from EU-GDPR.

Navigating the Digital Age - The Definitive Cyber Security Guide

DSCI partnered with Palo Alto Networks in bringing out the India edition of ‘Navigating the Digital Age - The Denitive Cyber Security Guide’ for Directors and Ofcers. Several CISOs from the Industry and NASSCOM & DSCI members contributed towards this book. DSCI CEO contributed an article titled ‘How Data Grids will power the economy and in uence our future’ in the global edition of this book which is also featured in the India edition. Get the book here: https://www.securityroundtable.org/navigating-the-digital-age-2nd-edition/

AI Vision, Policy and Strategic Partnership with Govt. of India DSCI participated in a panel discussion at AICRA Global AI Summit & Awards 2019. The topic of discussion was ‘AI vision, Policy and Strategic Partnership with Govt. of India’. The panel discussed on various areas such as Govt. initiatives for AI start-ups, Policy & drafts for AI ecosystem, and emphasised on the challenges in strategic partnership with industry. It also proposed to incorporate some incentive plan from Govt. for AI start-ups and also initiative AI integration in higher education.

National Senior Officers Conclave DSCI Cyber Lab conducted a Cybercrime session at National Senior Ofcers Conclave hosted by Indian Air Force. Senior ofcers from different states were briefed over the latest threat vectors affecting the public, Government departments & Corporates. Another session on Cybercrime attacks occurring at individual, corporate, national & global level, and Cybercrime investigation covered through cases studies was also conducted.

Digital Evidence & Handling DSCI Cyber Lab undertook a session on ‘E-Investigation’ for senior ofcers from the Commercial Tax Department at Indian Institute of Management Bengaluru (IIMB). Over 40 senior ofcers were sensitized about the fragile nature of Digital Evidence & its handling. iCISA training programme DSCI conducted a session covering Data Privacy concepts, issues and implications and Assessment of Data Privacy in e-Governance at the 143rd International Training Programme on ‘Auditing in IT Environment’ of the International Centre for Information Systems and Audit (iCISA) attended by 36 participants from 25 countries.

46 Roundtable Meetings

Redefining Visibility for Modern Hybrid Infrastructure

DSCI with Qualys hosted a roundtable discussion with the key objective to drive industry and community focus on infrastructure security challenges from assets which are invisible, partially visible or are even in shadow, preparing against the growing threat of sophisticated malwares, automating security operations and bringing balance to security and privacy.

Discussions were carried out to understand challenges and gain visibility over Hybrid assets, rationalizing IT assets, consolidation of security efforts across On-Prem, Cloud and mobile assets, and establishing compliance as an outcome of security strategy.

Digital Cooperation by NITI Aayog UN Panel

DSCI participated in a roundtable discussion hosted by NITI Aayog with the objective to advance dialogue on strengthening international cooperation in the Digital Age. DSCI reinforced the need for strengthening awareness of end consumers with regard to Digital platforms & Digital transactions and the concerted efforts that are required to build capacities and skills in this area for empowered cyberspace.

The panel, set up by the United Nations Secretary General was attended by senior ofcials and leaders from different ofces and ministries of the Government.

Data Privacy for the SMB Sector DSCI conducted Data Privacy roundtable meetings for the SMB sector in Vadodara and Ahmedabad at the NASSCOM SME Initiative. DSCI addressed delegates on privacy nuances, expectations, obligations and liabilities of businesses towards privacy. Various topics such as Privacy laws, GDPR liabilities and the approaches, skillsets, practices and precautions required for privacy implementation were discussed at large.

Policy Roundtable Meet

DSCI participated in a roundtable meeting hosted by Microsoft, over the current policy environment and future directions. The audience which comprised of policy heads from Industry members, were briefed on the current regulatory landscape impacting the IT Industry. DSCI also shared insights on the Data Protection Bill as well as multiple other areas with respect to IT policy and regulations.

Managing Digital Risk

DSCI in collaboration with RSA conducted a roundtable discussion on Managing Digital Risk. The key areas discussed were managing risks arising from both internal and external threats, managing state sponsored cyber risks on critical infrastructure, User and Entity Behaviour Analytics (UEBA) to understand internal and external users, and more.

2 47 Member Engagement

DSCI continuously engages with its members and stakeholders to provide consultations and updates on policies, practices and the latest in data protection and security. DSCI chapter members conduct various chapter meets for further engagement and spreading awareness among members. Below mentioned are few areas where we engaged round the year.

Topics Covered Sectors Involved

Threat Hunting & Data Analytics

Myths and Realities of Cyber Security in IIoT

Re-architecting security to combat today’s threats Oil & Gas IT-BPM Banking Power Energy Advance Threat Hunting and Intelligence sharing

Live cases of cybercrime investigation, IT Act 2000 (Amendment 2008) and Digital Forensics

Changing Paradigm of IT, IIoT and Digital Payment Security Critical Information Government & Changing paradigm of IIoT and OT Security PSUs Infrastructure Institutions

Chapter Meets

GDPR Preparation and Taking stock of Data Readiness Protection Developments Blockchain for Security

The meeting discussed the approach to An open house on Data Protection & The meeting covered the fundamentals be taken towards GDPR readiness, Privacy was hosted to cater to some of of Blockchain technology, associated applicability of GDPR as a Data the major developments in the global myths and realities and the different use Controller or Processor, possible privacy space, Draft Personal Data cases this technology nds in the realm roadblocks and their solutions. Protection Bill and key ndings of the of Cyber Security. It was attended by DSCI-Deloitte GDPR Preparedness professionals from the Industry & Various requirements and guidelines for Report 2018. Academia and few government organizations related to aappointment, delegates. roles and responsibilities of the Data Protection Ofcer, data breach notication, performing Data Protection Impact Assessments, Right to Data portability and binding Corporate Rules for Data controllers and processors were also discussed with the attendees.

Data Privacy Day Bangalore Hyderabad (Bangalore, Delhi, Hyderabad, Mumbai and Pune) The overall agenda of the meetups In the meeting, members were Participants from various DSCI included disseminating knowledge of briefed over NASSCOM-DSCI’s member organisations attended the Data Privacy & Data Protection Industry growth agenda and roadmap meeting where they were briefed over fundamentals, principles and privacy to develop the Cyber Security Blockchain technology and its practices among the members. Apart Industry charter. Additionally, Intel various applications for Cyber from it, various other discussions representatives briefed delegates Security. included Key Data Protection about FIDO (Fast ID Online) and legislations of 2018 and their Paladion Networks discussed over respective implications, Personal MDR (Managed Detection & Data Protection Bill insights, Response) – a scaled up solution to implementing Privacy-by-Design, MSSP (Managed Security Service sharing Privacy trends and exchange Providers). of privacy practices.

48 OUR MEMBERS DSCI Members

3M India Mastercard Aditya Birla Management Corporation Pvt. Ltd. MetLife Adweb Technologies Pvt Ltd Multi Commodity Exchange of India Ltd. Allahabad Bank Netcore Solutions Amway Netmonastery Network Security Pvt. Ltd. Anlyz Llc NHPC Ltd. Ansal University NII Consulting Axis Bank National Internet Exchange of India (nixi) Bank of India NUKG Business Solutions Pvt. Ltd. Bharat Earth Movers Limited (BEML) Ogee Technologies Private Limited Bharat Electronics Ltd. Oil and Natural Gas Corporation Limited (ONGC) Bharat Heavy Electricals Limited Oil India Ltd. Bharat Petroleum Corporation Limited One 97 Communications Limited Block Armour Private Limited Optum Global Solutions (India) Private Limited Blue Star Engineering & Electronics Limited Orbis Financial Brainyard India Private Limited Panacea Infosec Private Limited Bombay Stock Exchange Ltd. (BSE) PayPal Bulwark Cyber X Punjab National Bank Canara Bank QOS Technology Pvt Ltd Central Bank of India Quick Heal Technologies Limited Con ex Data Room Pvt. Ltd. QuNu Labs Pvt. Ltd. Curaksha RBL/Ratnakar Bank Limited Cyber Intelligence Unit Vidhik Educational Evam Paramarsh Samiti Reliance Jio Infocomm Ltd. Data Resolve Technologies Pvt. Ltd. Reserve Bank Information Technology Private Limited DataCard India Risk Quotient Consultancy Pvt. Ltd. Dbaux Technologies Private Limited SANS Institute DBS Bank Ltd. SBI Cards (SBI Business Process Management Services Pvt. Ltd.) Deep Armor Technologies Private Limited SBI Life Insurance Dr CBS Cyber Security Services LLP Security Brigade InfoSec Private Limited Equitas Small Finance Bank Ltd. Securwires Technologies and Services LLP Esperto Consultants Private Limited Shapoorji Pallonji and Company Private Limited Espresso Technologies Pvt. Ltd. SKP Business Consulting LLP FIS Global Business Solutions India Pvt. Ltd State Bank of India GAIL (India) Limited Sumeru Software Solutions Pvt. Ltd. GCC Services India Private Limited Sun Pharmaceutical Industries Ltd. GE Digital SWIFT India HDFC Bank Ltd. SysTools Software Private Limited Hero Motocorp Tasec Limited Hindustan Petroleum Corporation Limited Tata Power Delhi Distribution Ltd. ICICI Bank Ltd. Technology Nexus Secured Business Solutions AB ICICI Prudential Topxight Research Labs India Pvt. Ltd. IDFC First Bank Ujjivan Small Finance Bank Limited iMetrix Solutions Private Limited UL India Ltd. IndusInd Bank Vijaya Bank Info Credit Services Private Limited Visa Consolidated Support Services (India) Pvt. Ltd. InfoMagnum IT Solutions Vodafone Innefu Labs Private Limited World Vision India Kotak Mahindra Bank Xceedance Consulting India Private Limited L&T Limited Yes Bank Ltd. LIC of India Zeotap India Pvt. Ltd. Lucideus Technologies Ltd.

50 NASSCOM-DSCI Members

3I Infotech Ltd Blue Star Infotech Limited 4I Apps Solutions Pvt Ltd BNP Paribas India Solutions Private Limited 7Seas Technologies Limited BNY Mellon International Operations (India) Pvt. Ltd. Aabsys Information Technology Pvt. Ltd. Botree Software International Private Limited Abzooba India Infotech Private Limited Broadridge Financial Solutions (India) Pvt Ltd Accenture Services Pvt. Ltd. Busy Infotech Pvt. Ltd. Acclaris Business Solutions Pvt. Ltd. CA (India) Technologies Pvt. Ltd. Add Technologies (India) Ltd. Cactus Communcations Pvt. Ltd. Adobe Systems India Private Limited Callens Solutions ADP Private Limited Cambridge Technology Enterprises Ltd. Advanced Technology Consulting Service Pvt. Ltd Canon India Private Limited Aegis Customer Support Services Private Limited Capita India Private Limited Aks Information Technology Services Pvt Ltd CDK Global (India) Private Limited Allerin Tech Pvt. Ltd. Cegura Technology Solutions Pvt. Ltd. Altimetrik India Pvt. Ltd. Centre for Development of Advanced Computing (C-DAC) Amdocs Development Centre India Pvt. Ltd. Centre for Development of Telematics Amigo Incorporation CertiSafe Private Limited Amrut Software Pvt Ltd. CGI Information Systems and Management Consultants Pvt Ltd Anarghyaa Etech Solutions Pvt Ltd Changepond Technologies Anibrain Digital Technologies Pvt Ltd Cisco Systems India Pvt. Ltd. Appexigo Technologies Pvt. Ltd. ClickCubes Technologies Private Limited Aptech Limited CloudNow Technologies Private Limited Arctern Consulting Private Limited Codelogicx Technologies Private Limited Aricent Technologies (Holdings) Limited Cognet HR Solutions Pvt. Ltd. Arrk Solutions Pvt. Ltd. Cognizant Technology Solutions Arrka Infosec Private Limited Colt Technology Services India Pvt. Ltd. Ascenders Technologies Private Limited Compunnel Technology India Pvt Ltd ASE Structure Design Pvt Ltd. Concentrix BPO Pvt. Ltd. ASM Technologies Ltd. Conduent Business Services India LLP Aspire Systems (India) Private Limited Congruent Solutions Pvt. Ltd. Atos Origin India Pvt Ltd Convergys India Services Pvt. Ltd. Attra Infotech Pvt Ltd Couth Infotech Pvt. Ltd. Aujas Networks Pvt. Ltd. CPA Global Support Services India Pvt. Ltd. Aurionpro Solutions Ltd. CSS Corp Pvt. Ltd. Avaya India Pvt. Ltd. CyberArmour Solutions Pvt. Ltd. AXA Business Services Pvt. Ltd. CyberEye Research Labs & Security Solutions Pvt. Ltd. Bahwan Cybertek Pvt.Ltd Cybertech Systems and Software Ltd. Banca Sella S.P.A. Cygnet Infotech Pvt. Ltd. Barry-Wehmiller Intl. Resources Pvt. Ltd. Cyient Bebo Technologies Private Limited da 4K Technologies Pvt. Ltd. Bechtel India Pvt. Ltd. Data Infosys Ltd. Best of Breed Software Solutions India Pvt. Ltd. Datamatics Global Services Limited

51 NASSCOM-DSCI Members

Datatracks Services Ltd. Hexaware Technologies DBOI Global Services Pvt. Ltd. Hinduja Global Solutions Limited Delgence Technologies Private Limited Hi-Tech isolutions LLP Deloitte Consulting India (P) Ltd. Holistic Corporate Services Pvt. Ltd. Dimentrix Technologies Pvt. Ltd. Honcho Commercial Pvt. Ltd. Drishti-Soft Solutions Pvt Ltd HSBC Electronic Data Processing India Pvt. Ltd. Dron Study Private Limited HTC Global Services (India) Pvt. Ltd. DXC Technology India Private Limited Huawei Technologies India Pvt. Ltd. Eastern Software Systems Pvt. Ltd. Hughes Systique India Private Limited Elagoon Business Solutions Private Limited HyTech Professionals India Pvt. Ltd. Electronic Arts Games (India) Pvt. Ltd. I2K2 Networks Pvt. Ltd eMids Technologies Pvt. Ltd. iAccept Softwares Pvt. Ltd. Envestnet Asset Management India Pvt. Ltd. IBM India Pvt. Ltd. Equinox Software & Services Pvt. Ltd. IBS Software Pvt. Ltd. ExcellenceTech (A Division of Kariwala Industries IDS Infotech Ltd. Ltd) IIC Technologies Private Limited EXL Service (India) Pvt. Ltd. iInterchange Systems Pvt. Ltd. Expedien E-Solution Limited Immidart Technologies LLP e-Zest Solutions Ltd Impiger Technologies Private Limited Fidelity Business Services India Pvt. Ltd. Indus Net Technologies First Advantage Pvt. Ltd. Indus Valley Partners (India) Pvt. Ltd. First American (India) Pvt. Ltd. Innite Computer Solutions (India) Ltd. Firstsource Solutions Limited Innity Infotech Parks Limited Fiserv India Pvt. Ltd. Info Edge (India) Limited Flipkart Internet Pvt. Ltd. InfoBeans Systems India Private Limited FNF India Private Limited Infosys BPM Ltd. Fourth Wall Technologies Private Limited Infosys Limited Franklin Templeton International Services (India) Infozech Software Pvt. Ltd. Pvt. Ltd. Infrasoft Technologies Limited Future Focus Infotech Pvt. Ltd. Inlogic Bizcom Pvt. Ltd. GE Digital (GE India Exports Private Limited) Innodata Isogen Genpact Inspirisys Solutions Limited GlobeOp Financial Services (India) Private Limited Institute for Development & Research in Banking Technology GMO Globalsign Certicate Services Pvt. Ltd. (IDRBT) Goods and Services Tax Network Integra Software Services Private Limited Graycell Technologies Exports Inteliment Technologies (India) Pvt. Ltd. Gujarat Informatics Limited Intense Technologies Limited Guru Gowri Krupa Technologies Pvt Ltd InterGlobe Technologies Pvt. Ltd. H5 Asia Pacic Pvt. Ltd. Interra Information Technologies (I) Pvt. Ltd. Hackett Group (India) Limited Invesco (Hyderabad) Private Limited HCL Technologies IonIdea HCM Info Systems ITC Infotech India Limited Hewlett-Packard Enterprise India Pvt. Ltd. JiJi Technologies Pvt. Ltd.

52 NASSCOM-DSCI Members

JK Technosoft Limited NetScout Systems Software India Pvt. Ltd. Kaavian Systems Pvt. Limited Newage Software and Solutions Karvy Data Management Services Limited Nhance Engineering Solutions Pvt.Ltd. Karvy Global Services Limited Nihilent Ltd. KPIT Technologies Ltd. NIIT Technologies Ltd. KPMG Nishith Desai Associates Kumaran Systems Pvt. Ltd. Nomura Services India Private Limited Larsen & Turbo Infotech Ltd. Northern Operating Services Private Limited Legasis Services Private Limited Novartis Healthcare Pvt. Ltd. Lexington Soft Pvt. Ltd. NTrust Infotech Pvt. Ltd. Liqvid eLearning Services Private Limited NTT Data Global Delivery Services Private Limited Lister Technologies Private Limited Nvidia Graphics Pvt. Ltd. Logic Heart Pvt. Ltd. Object Edge India Services Pvt. Ltd. Maree Octaware Technologies Pvt. Ltd. Magic Software Pvt. Ltd. Ogee Studio India Private Limited Maintec Technologies Pvt. Ltd. Omega Healthcare Management Services Pvt. Ltd. MakeMyTrip India Pvt. Ltd. Ontrack Systems Limited Manipal Global Education Services Pvt. Ltd. Onward Technologies Ltd. Maven Systems Private Limited Opton Infocom Pvt. Ltd. Mcafee Software (I) Private Limited Orbital Outsourcing Services Medma Infomatix Pvt. Ltd. Orion Security Solutions Private Limited Metacube Software Pvt. Ltd. Pan Business Lists Pvt. Ltd. Micro Focus Software India Private Limited Panamax Infotech Limited Microland Ltd. Parablu Systems Private Limited Microsoft Corporation (India) Pvt. Ltd. Paripoorna Software Solution Service Pvt. Ltd. Midland Credit Management India Pvt. Ltd. Payoda Technologies Private Limited Mindcrest (India) Pvt. Ltd. Persistent Systems Limited Mindteck (India) Ltd. Phi Business Solution Ltd. Miramed Ajuba Solutions Private Limited Pinnacle Infotech Solutions Mjunction Services Limited Plintron Morgan Stanley Advantage Services Pvt. Ltd. Pradot Technologies Private Limited MothersonSumi INfotech & Designs Ltd. Pratham Software Pvt. Ltd. Motif India Infotech Pvt. Ltd. PricewaterhouseCoopers Pvt. Ltd. Mphasis Ltd. Principal Global Services MResult Services Private Limited PTC Software (India) Pvt. Ltd. Mynd Solutions Pvt. Ltd. QualityKiosk Technologies Private Limited Nagarro Softwares Pvt. Ltd. Qualtech Consultants Pvt. Ltd. National Payments Corporation of India (NPCI) Quest Global Technologies Neeyamo Enterprise Solution Pvt. Ltd. Quest Informatics Private Limited Net Solutions Quislex Legal Services Pvt. Ltd. NetApp India Pvt. Ltd. R Systems International Limited Netmagic Solutions Pvt. Ltd. Rackbank Datacenters Private Limited

53 NASSCOM-DSCI Members

Rance Computer Pvt. Ltd. Talisma Corporation Pvt. Ltd. RapidQube Digital Solutions Pvt. Ltd. Tally Solutions Private Limited Redspark Technologies Pvt. Ltd. Target Corporation India Private Limited RM Education Solutions India Pvt. Ltd. Tata Consultancy Services Limited Robert Bosch Engineering and Business Solutions Private Limited Tavant Technologies Rudrabhishek Infosystem Pvt. Ltd. Tech Mahindra Ltd. S Capital Solutions Pvt. Ltd. Techies India Inc. Saama Technologies (India) Pvt. Ltd. Techindia Infoway Pvt. Ltd. SAG Infotech Private Limited Technoforte Software Private Limited Saigun Technologies Pvt. Ltd. Techsys Solutions Pvt. Ltd. Sapient Corporation Tesco Bengaluru Private Limited Sapple Systems Private Limited Texas Instruments India Pvt. Ltd. Sasken Technologies Limited Thomson Reuters International Services Pvt. Ltd. Saslab Technologies Pvt Ltd Tieto Software Technologies Pvt. Ltd. SecPod Technologies Pvt. Ltd. TopSource Infotech Solutions Pvt. Ltd. Shriram Value Services Pvt. Ltd. Trigyn Technologies Ltd Siddaganga Institute of Technology Ugam Solutions Simeio Development Center Pvt. Ltd. Unisys Global Services India Skillmine Technology Consulting Pvt. Ltd. UnitForce Technologies Consulting Pvt. Ltd. SLK Software Services Pvt. Ltd. UTV Software Communications Limited Smart Chip Limited Valency Networks Snap-on Business Solutions India Pvt. Ltd. ValueLabs Societe Generale Global Solutions Center Pvt. Ltd. Vaneera Hi-Tech SoftAge Information Technology Limited Vehere Interactive Private Limited Software Associates Verizon Data Services India Pvt. Ltd. Software Technology Parks of India Versup Infotech Private Limited Sonata Software VFS Global Services Pvt. Ltd. Sony India Software Center Pvt. Limited Vidyatech Solutions Pvt. Ltd. SQS India BFSI Limited Virtusa Consulting Services Private Limited SSP India Private Limited Volvo India Private Limited Steria (India) Limited Web Access (I) Pvt. Ltd. Suma Soft Private Limited Webrosoft Solutions Pvt. Ltd. Summit Information Technologies Pvt. Ltd. Wells Fargo India Solutions Pvt. Ltd. Sun Knowledge Private Limited Williams Lea India Sun Life India Service Centre Pvt. Ltd. Winsoft Technologies India Pvt. Ltd. Sundaram Infotech Solutions (a Division of Sundaram Finance Ltd.) Wipro Limited SunTec Business Solutions Pvt. Ltd. WNS Global Services Pvt. Ltd. Swiss Re Shared Services (India) Pvt. Ltd. Xiarch Solutions Pvt. Ltd. Symbol Technologies India Pvt. Ltd. Xpanxion International Pvt. Ltd. Symphony Teleca Corporation India Pvt. Ltd. Xplore-Tech Services Pvt. Ltd. Synchrony International Services Pvt. Ltd. Yamaha Motor Solutions India Pvt. Ltd. Synoptek India Private Limited Yodlee Infotech Private Limited Syntel Inc. Zoho Development Center India Pvt. Ltd. Systems Valley Pvt. Ltd. Zscaler Softech India Pvt. Ltd.

54

Data Security Council of India 3rd Floor, NASSCOM Campus, Plot No. 7-10, Sector 126, Noida, UP-201303

For any queries contact P: +91-120-4990253 | E: [email protected] | W: www. dsci.in

www.linkedin.com/company/data-security-council-of-india/ https://twitter.com/DSCI_Connect https://www.facebook.com/dsci.connect https://www.youtube.com/user/dscivideo

All Rights Reserved © DSCI 2019