Amrit Yadav, Head-Administration Security, Hero Fincorp talks about his professional journey, key challenges to security of large organisations, new technologies that are in focus to aid security professionals in doing their work and key solutions they have implemented at Hero Fincorp in alleviating security challenges.
Interviewed by Adeesh Sharma & Sonali Arora
Please tell us about yourself and the work you are currently doing in the security domain.
Hailing from the forces background and having served the nation as an officer from world’s largest border guarding force (BSF besides an ex officer with the most elite security organisation i.e SPG ( special protection Group) presently I am Heading the Admin , IR & security domain related responsibilities for north Segment of RBF (L&T) & stationed at new Delhi With over all 13 years of experience in the field of Administration & Security industry, having held positions of head of Admin & security with the groups & conglomerates brands like -Adani group ,Hero Motors ( cycles division) Essel group ( zee media ) and now with L&T .
What are the key challenges to security of large organizations?
The security industry is ever evolving industry as there are always new challenges hence new strategies to check & counter the challenges are need of the time making sure the safety & security of large organizations in uninterrupted business & loss of repute or good will by employing the strategies and plans in tackling challenges and unforeseen in tandem with the technologies.
The following challenges are worth to mention for effective security management almost every business is facing.
1. The limited awareness which includes lack of privacy and security concerns, limited knowledge of the employees for cyber security & awareness results in huge need for training programmes and urge for other customised training /awareness & educational curriculum are the few other challenges.
2. The most common security threats pertaining to web are phishing , severe structured query (SQL) language injection cross site scripting distributed denial of services attacks viruses’, worms and spyware etc.
3. The other safety and security challenges include opaque system failure complex socio-economical and technical systems human machine interface cyber physical attacks unsecured remote configuration lack of standards & resilience.
4. Retention policies importance of digital security in information security management insurance ransomware multi factor authentication that a protection regulatory compliance is teleworking and shortage of staff.
5. Hiring/retaining skilled security resources with adequate knowledge & experience is really challenging.
6. Upskilling /upgradation of security gadgets & other paraphernalia & resource is bigger need of the hour to be ahead & prepared in advance is essential to stay ahead of evolving threats.
- Security of information flow to business rivals is a threat and security awareness is really crucial as despite controls, insider risks persist so need to have a sound intelligence & vigilance system.
- Keeping step ahead of new and emerging cyber threats: Staying vigilant and proactive in adapting to evolving technologies and threats is imperative.
What new technologies are in focus that help aid security professionals in doing their work?
1. Security technology helps to mitigate risks by identifying potential incidents, allowing fast responses, preventing unauthorised access, deterring criminal behaviour and capturing crucial evidence before any breach is notices.
2. Keeping in tandem with the latest technologies right from surveillance cameras and biometric identification to sophisticated algorithms and artificial intelligence technology has played a critical role in enhancing our ability to prevent, detect, and respond to various security threats.
3. Latest technology in security cameras intelligent video capture (IVC) takes video surveillance to the next level as this uses smart heat and motion sensing cameras to alert the security guards to any suspicious activity they might otherwise miss along with usage of the AI & ML behavioural Biometrics, cloud security & IoT Security.
4. Leveraging upon these technologies enhances the capabilities of security professionals in safeguarding organizational assets.
5. The 3 basic security concepts are very important to secure the information. i.e confidentiality, integrity and availability whereas the techniques are used to stop any kind of attack on security concepts developments and future trends.
6. There are few common technologies often used in organisations or data loss prevention intrusion detectors detection system intrusion prevention system security incident and event management, firewall and antivirus.
What solutions have you implemented within your organization to alleviate the security challenges?
1. Stringent Systems & protocols in place.
2. Regular conduct of security assessment /treats and revision of mitigation plans.
3. Robust & digital control of access
4. Education to employees
5. Training /upskilling of Security guards & employees awareness
6. Implementation of automated security solution and strengthening of human resources
7. Police verifications
8. Antecedents’ verification
9. Mock drills
10. Other checks & counter checks and balances
11. Follow up/upgradation of SOPs-policies & procedures.
12. Check /evaluate security metrics.
13. Incident response team
14. Usage of Drones in surveillance
15. Intelligence e & surveillance systems in place
16. Effective alms system and visitor management
17. Optimum use of security tools
What are your plans to enhance security of your organization going forward?
Understanding the business requirements based on the regular threat perception/security assessments & surveys & geographies across the business verticals the company is carrying projects at sites & understanding the local cultural context is pivotal in deciding the security mandates for each region.
1. Improved & Strict access controls.
2. Effective monitoring/detection and response capabilities.
3. stringent audit/compliance adherence. These measures aim to ensure business continuity and bolster resilience against emerging threats.
4. Security awareness & sensitisation.
5. Conduct comprehensive risk assessment starting by audits & develop a robust security policy and development stricter access control measures with enhanced physical security imparting training & sensitising the employee workforce.
6. Always adhering to the basic security principles of access authentication authorization and accounting.
7. Security measures such as surveillance systems access control and train security personnel providers sense of safety and personal protection they act as deterrent against criminal activities making individuals feel more secure in public places workplaces and residential areas and office compounds and factories.
8. Third party/external audits from time to time.