Compliance with the applicable norms and regulations necessary to ensure data privacy

PARTHA PROTIM MONDAL
CIO, BERGER PAINTS INDIA

“Ensuring data privacy and compliance with relevant regulations involves implementing a combination of technical, administrative, and procedural measures. We at Berger Paints have taken few measures to ensure that have strengthen our security postures and are compliant with the applicable norms and regulations -

•    Periodic Audits and Compliance Checks: Conducting regular audits and compliance checksby independent entities to ensure we are fully compliant with applicable norms & governance.
•    Empowering Workforce: Providing specially curated training to our employees regularly on various modern-age security threats and its preventive measures, various aspects of data privacy & data security, industry best practices to remain vigilant and safe - professionally and personally, and the importance of compliance and security measures and many other topics to empower our colleagues with adequate knowledge.
•    Implement ‘Best-In’ Class Security Technologies: We have implemented a modernized SIEM (System
Information and Event Management System) platform which uses latest AI & ML technology to proactively warn us any potential threats in our threat landscape, the Zero Trust framework vouches for the secure internet and cloud facing applications and ensures safe data transmission through P2P channels.
•    Preventive Layers of Threat Management: Firewalls, Proxies, segregation of network (militarized | demilitarized zone, VLANsetc.) and other network security controls can act as preventive layers in threat management. Advanced security measures - Multifactor authentication, UEBA (User and Entity Behaviour Analysis) can put an additional layer of security in the preventive threat management layer which can further be strengthened using DevSecOps, Native AI in network encryption and effective patch management.
•    Access Controls: Implemented robust identity and access management (IAM) systems to ensure that only authorized personnel can access sensitive data.”