Anup P K has over 12 years of experience in information and cyber security advisory projects including over 2.5 years in the Middle East. He is an expert in cyber security, information systems audit, security and risk consulting, ISMS implementation and review, business continuity reviews, vendor reviews, ERP security, cloud security audits and risk assessments. He currently overlooks the risk and compliance activities at Biocon.
Key Security Initiatives
Biocon wanted to ensure that with the changing technology and threat landscape, it also evolves and matures on its controls to combat modern Cyber threats and attacks. It wanted to increase InfoSec awareness among employees and minimize insider threats as much as possible. Biocon re-looked at key risks and compromising factors for its critical assets belonging to various functions for the Information Security Management System (ISMS). Biocon also mapped potential third-party risks and insider threats as part of this framework for its threat vector landscape.
By standardizing the Information Security Management Systems and Other Frameworks at Biocon, coupled with risk assessment of the existing technology landscape, it drastically brought down the number of risks which were earlier left unattended. From an Enterprise Risk Management perspective Biocon had to re-look and leverage on its existing capabilities to prevent various threats, proactively detect and take timely action to ensure business continuity and minimal or zero loss to the organization. Since Biocon has multiple strategic partnerships with global organizations, it took a holistic approach towards risk management and risk sharing while they were constantly connected with their vendors, joint venture partners and other third parties. As an organization it re-aligned its risk sharing models and strategies to tackle various cyber liabilities and thereby the risk-appetite of the organization. This has helped Biocon to identify and work upon key Indicators of Compromise for its critical assets.