When security is a mantra, then security consulting is tantra
“300 Lithuanian Sites Hacked By Russian Hackers”
“In September, the Google email accounts of key government officials were tampered with and previously a hacker entered into this website the passwords and login names of the National Defense Academy and key Indian embassies.” .
“India’s Foreign Affairs Servers Hacked by China”
How often do we hear such news …
…
many times … eh !!! Despite many such incidents that take place, only a few see the light of lime. The reason is that most companies do not prefer to disclose them, fearing that there is the possibility of losing the customer’s faith. Incidents like these happen quite frequently and we only react when they happen. Most of the time we are reactive than proactive! All of these incidents raise a concern about how security is compromised and there is great concern about curbing such activities. The importance of information security and the growing security consulting market in India are prompting me to write this article.
Don’t worry about security – this is what we typically hear from most Indian start-ups and some small and medium-sized enterprises (SMEs). The reason could be that they don’t have enough time for security as they are busy getting their product out. But the fact is, start-ups must be extremely careful to protect their intellectual property ballast, as they could lose their competitive advantage.
Safety is the way to go! Security is not a product that you can install and stay safe. Security is not just a technology, it includes processes and people who must follow the process without fail. Most SMBs do not have dedicated security teams due to the smaller size of their operation, on the contrary, few companies have dedicated security teams, but they lack certified security professionals. It is estimated that fewer than 2,500 professionals in India have specific information security skills, representing only 0.5% of the IT workforce. Almost 50% (12 out of 25) of companies do not employ certified professionals to manage their security. But the reality is that implementing security requires experienced certified individuals who are specialized and trained in the core areas of the security domain. Now how can you get people like that? In India there are quite a few security consulting firms that can hire experienced certified third party security consultants.
According to “The Forrester Wave”: Security Consulting, Third Quarter 2007 ” In the last two years, some security service providers have registered growth rates of more than 40%.. The main factors driving the growth of the security consulting market in India are the large increase in the complexity of IT implementations, the increase in the use of online commerce and online transactions, the increase of the requirements of banking and financial services, BPO, etc. .
Consulting is projected to grow to $ 1.1 billion in 2012 in Asia Pacific. Information security and services companies in India are moving up the value chain to focus on information security consulting, managed services, training and patch management. The information security (IS) market in India is growing at a rate of 50 percent higher than that of the software industry and presents a huge untapped opportunity for software companies. There are already quite a few good players like Deloitte, Wipro, Accenture, Ernst & Young that proved their brand with their consulting services in the area of information security, but there is a growing need and a void available for other companies to launch. this market.
conclusion:
- Gone are those days when it was thought that security was just the configuration of the IT infrastructure, now it is more than that, it has expanded to information storage, distribution, application level security, perimeter security and definition of procedures of policies for different types of information. Today’s security consulting firms have trained people with specialized skills in standards such as BS-7799, ITSM (IT Service Management), COBIT (Control Objectives for Information and Related Technology) and ISO-17799, ISO 27001. The offshore model can take the services of security consulting firms to comply with the regulations followed by their foreign counterparts.
-
Companies working in an offshore model can gain an additional advantage by hiring external consultants. These consultants look at the organization’s security configuration from an outside perspective and are in a better position to identify loopholes.
-
Companies must improve their perception of security by involving top management in the drafting and review of security policies and creating a provision for security in their budgets.
It is quite evident that security consulting in India is progressing at a rapid pace. India has the right mix of technology and skills to provide top-tier services and grow as a top-tier security consulting service provider.
Finally, according to the meaning of Tantra, any service that is related to the ritual acts of the body, mind and speech is called Tantra. That is why I say, when security is Mantra, security consulting is Tantra!
