SDG Software implemented compliance & security program with defined set of controls around data security 

Meetali Sharma
Head - Risk, Compliance & Information Security, SDG Software

Preparedness to face challenges of data security:  

 
With the increased remote working, data security has become of paramount importance for the organization. Protection of PII and confidential information is critical for meeting the business objectives. At SDG, we have implemented a robust and comprehensive compliance & security program which has defined a set of controls around data security. These controls have been determined after conducting a thorough risk assessment of the threat landscape of the organization. 

Employees are made aware of their responsibilities as custodians of critical information and appropriate training has been provided to them. Tools around data security such as DLP, EDR, URL filtering, no admin access on endpoints, multi-factor authentication, Single sign on, monitoring etc have been implemented to ensure we are resilient.

The best practices adopted for remote working: 

We have made a lot of efforts to ensure smooth remote working for employees without any business disruption. BCP plans have been updated for remote working scenarios and employees are being given continuous training around security aspects for remote working. Help desk and facilities teams are available 24 * 7 to support the employees. 

Adequate arrangements have been made to follow COVID guidelines once employees start coming to office. For now, employees are advised to continue working from home unless it is critical for them to come to the organization.

role of CISOs: 

The role of CISO will definitely be of much more importance going forward as he/she will have more of an advisory role to the board of directors on strategic initiatives related to cybersecurity. CISO needs to develop strategies and build capabilities within their organization around data security, business continuity and remote working.