The Hindu Business Line : More Indian cos apply for info security certifications

Indian companies are showing signs of maturing in their approach to information security. They are now going beyond technical aspects such as implementing firewalls and anti-virus systems to look at information security from a procedural perspective taking into account access controls and service level agreements.

According to Mr Navin Agrawal, Executive Director, Advisory Services, KPMG Advisory Services Pvt Ltd, over 400 Indian firms (among 3,000 global firms) have applied for security-focused certifications such as ISO 27001, making India the third largest nation to do so.

Vulnerability checks

However, a majority of companies in India continue to perceive threats as external activities, overlooking vulnerabilities within the organisation.

Of the top 100 companies, only about 30 per cent conduct regular vulnerability checks within the organisation, Mr Agrawal told newspersons on the sidelines of iSec2007, a two-day exhibition-cum-conference on information security, organised by the Southern Indian Chamber of Commerce and Industry (SICCI).

Security spend

Earlier, Mr Ar Rm Arun, Executive Committee member, SICCI, said points of attacks were moving beyond operating systems and that companies had to accordingly increase their spends on information security.

Globally, companies allocate about 20 per cent of their IT budgets towards security, while Indian companies allot 15 per cent, he said. Global spend on security is estimated at about $2.1 trillion with the US alone contributing about $800 billion.

According to Dr C. Chandramouli, Tamil Nadu IT Secretary, data theft and security lapses have resulted in losses of about Rs 1 lakh crore. He said a security policy for the State was being drafted covering both governmental and non- governmental areas.

The State Minister for Social Welfare, Dr Poongothai Aladi Aruna, released a handbook on information security.

More Stories on : Standards & Benchmarks | Security

Article E-Mail :: Comment :: Syndication :: Printer Friendly Page