Skip to main content

Oppurtunities in Cloud Security

May 28, 2022 | Expert Insights

While talking about ‘global commons’, it is important to add a more orthogonal perspective, vis-à-vis India and the other members of the emerging countries. In this context, it is necessary to accord due regard to global practices and global standards, on which so much work is being done, albeit in fragments.

Geopolitics governs much of the sovereign pressures today, and in that, there is a tendency for people to look inward and strengthen the defences. But one can do both; stay with the conscious of the global best practices and absorb them and, instead of making de novo or ab Initio efforts, build on what exists.

Background

Those who grew in the late 1980’s client-server times may observe that cloud is actually no different from setting up novel networks. In a way, one must go back to those basics of ‘extensibility, scalability, resilience, responsiveness, and the ability to manage’.

Moreover, there is a felt need for some degree of control – similar to that of a control plan in some of these networks – and fully appreciate it. While the governance mechanism needs it, it is important to keep in mind the dichotomy here and the need for a fine balance. If the controls move to one end, then all the advantages of being in the cloud are lost, and it raises uncertainty of its security. Because the cloud is not all of it, it eventually delivers services at the endpoints. 

The second challenge is in the whole movement from 'quality of service' to 'quality of experience'. It may not matter as much for a citizen in New York or London, but it matters to a villager in India who is going to consume through the Digital India stack application. The goal is to provide the same experience as in Rajeev Chowk in Delhi to a village in Jharkhand. This inequity/equity problem is a clear challenge. For countries like India, Brazil, or South Africa, this ‘middle mile’ problem is challenging and needs to be addressed.

CLOUD SECURITY: POTENTIAL AND CHALLENGES

Analysis

With very exhorted objectives set out by the Indian Government, it is important to highlight the need to improve the talent pool-we are talking about half a million cyber professionals by the year 2025! The data from CISCO’s ‘NETACAD' shows that India has the largest and fastest-growing, cyber-hungry demographic in the world. It is an area of concern if India does not get cyber-professionals or the talent aspect in place. It could be compared to the Y2K moment for India – which was a tipping point to take India into hundreds of billions of dollars of IT cells – all over again.

It is also worth mentioning that everything comes with a cost. And there are no better people to understand this than those at the bottom of the pyramid today who wants to get into digital India or the digital world without a laptop, without a server – into the cloud. While India, Brazil, South African and Indonesia may be the best countries to come together and develop this model, there is a lot of investment in innovation required. Enabling bottom-up high design security, which is intrinsic to everything, ensures this. So, there will no longer be security engineers, rather just engineers who understand security. This is crucial to address due to the frequency of this issue faced in the market daily. Forty per cent of India’s business is potentially waiting to be digitally enabled if security at near-zero cost can be provided.

Assessment

  • Cyber security presents a tipping point for India just like the YK2 moment.  It has a golden opportunity to become the 'cybersecurity services capital' of the world if it plays to its strengths. The country needs security operation centres, level one and level two personnel, and cyber analysis. 
  • The key lies in enhancing private-public sector cooperation as the leaders in this field are those countries that have innovated their private-public working model beyond strategy and policy. What India lacks is monthly or once-in-three months meetings between teams with senior representation on both sides, putting away their company or department insignias and coming together to develop a collective good for their country.