promoting data protection · 2018-03-13 · it-bpm, bfsi, telecom, industry associations, data...

Promoting Data Protection

Promoting Data Protection (Broc)_A4_PRINT.indd 1Promoting Data Protection (Broc)_A4_PRINT.indd 1 10/21/2015 4:15:26 PM10/21/2015 4:15:26 PM

About DSCIData Security Council of India (DSCI) is a premier industry body on data protection in India,

setup by NASSCOM®, committed to making the cyberspace safe, secure and trusted by

establishing best practices, standards and initiatives in cyber security and privacy.

DSCI brings together national governments and their agencies, industry sectors including

IT-BPM, BFSI, Telecom, industry associations, data protection authorities and think-tanks for

public advocacy, thought leadership, capacity building and outreach initiatives.

To further its objectives, DSCI engages with governments, regulators, industry associations

and think-tanks on policy matters. To strengthen thought leadership in cyber security and

privacy, DSCI develops best practices and frameworks, publishes studies, surveys and papers.

It builds capacity in security, privacy and cyber forensics through training and certifi cation

program for professionals and law enforcement agencies and engages stakeholders through

various outreach initiatives including events, awards, chapters, consultations and membership

programs. DSCI also endeavors to increase India’s share in the global security product and

services market through global trade development initiatives. These aim to strengthen the

security and privacy culture in the India.

VisionTo be the premier industry body for making cyberspace safe,

secure and trusted.

MissionTo develop capabilities, capacities and norms, in collaboration

with all the stakeholders including the government, required to

advance towards a safer, more secure and trusted cyberspace for enhancing trade and commerce by increasing global data

fl ows and promoting innovation; strengthening national security,

protecting individuals’ rights in cyber space and addressing such

global issues while safeguarding national and industry interests.



Objectives

Engage with governments,

regulators, industry associations

and think tanks on policy matters

through Public Advocacy

Build Capacity

in Security, Privacy and Cyber Forensics through training and »certifi cation of individuals and professionals

in Cybercrime investigations through training of Law Enforcement »Agencies and judiciary

Engage with stakeholders through

various Outreach initiatives

including events, awards,

chapters, consultations and

membership programs

Increase India’s share in the

global security product and

services market through Global Trade Development initiatives

Establish Thought Leadership

through development of best

practices, standards and

frameworks and publication of

studies, surveys and papers

Develop and maintain an

Assurance Ecosystem for

validation of privacy and security

practices implemented by

organizations

Aim at developing Alternate Dispute Resolution system in

data protection


485Corporate Members

2,500+ Security and Privacy

professionals

BPM IT Services Telecom SecurityBFSI Others

Corporate Members

201

25

18

0

11

103 127

StakeholdersBoard of Directors

NASSCOM•

Eminent Academicians•

Government•

Independent directors•

Corporate Members

Advisory Groups

Security Assessment Advisory Group (SAAG)•

Privacy Assessment Advisory Group (PAAG)•

Cyber Forensics Forum•

Best Practices Advisory Group•

Encryption Advisory Group•

Special Interest Groups

Global data fl ows•

Common criteria protection profi les•

Privacy assessment ecosystem•

Security & privacy standards•

Governments – India & Foreign

Policy Making Agencies•

Law Enforcement Agencies•

Judiciary •

Regulatory bodies •

Chapters

Ahmedabad | Bengaluru |

Bhubaneshwar | Chandigarh

Chennai | | Coimbatore |

Delhi | Hyderabad | Jaipur |

Kolkata | Mumbai | Pune



Public Advocacy

Engagement with Government of India

Regular interface with various government •

agencies, ministries and departments on policy

discussions

Department of Electronics & IT, Ministry of »Commerce, Central Bureau of Investigation,

Ministry of Home Affairs, National Security

Council Secretariat, Ministry of External

Affairs, Department of Telecommunications,

Department of Personnel & Training, National

Institution for Transforming India Aayog,

State Police organizations and more

Policy and Legislative consultations•

Representation in committees and working groups •

constituted by the Government of India

Facilitation of Public-Private Partnership (PPP) for •

strengthening cyber security posture of the country

Knowledge partner for various Government of •

India initiatives

Programs & Initiatives

Engagement with Foreign Governments & Regulators

Deliberations with European Union (EU) on •

adequacy of India as a secure country for third-

party data transfers which will benefi t businesses

operating in both EU and India by allowing

free fl ow of information between them without

involving administrative burdens and costs

Contribution to global cyber security policies, •

frameworks and guidelines

Representation in committees and working •

groups of international bodies and forums

Trans-border Data Flow

Cyber Security

Privacy

IT (Amendment)

Act

Cloud Computing

Encryption

Internet governance

Policy Enablement Areas


Thought Leadership

Development of Best Practices, Frameworks, Standards and Assessment

DSCI Security Framework (DSF©) is a best practices document that promotes dynamism •

in data security within organizations

DSCI Privacy Framework (DPF©) is a best practices document to help build organizational •

competence in privacy protection

DSCI Assessment Framework (DAF©)•

DSCI Assessment Framework – Security ( DAF-S©) it is assessing maturity in different »disciplines of security of an organization

DSCI Assessment Framework – Privacy ( DAF-P©) it is assessing maturity of different »aspects of privacy implementation and initiatives of an organization

DSCI Privacy Ecosystem Development

It is a comprehensive privacy program based on a well-defi ned privacy policy•

Privacy program implementation across the organization, with appropriate monitoring & •

oversight mechanisms to check non-compliances and performance

Provides framework for designing and implementing

such a privacy program in an organization

Designed to assess organization’s privacy initiatives

which can be used by external or internal assessors to

certify successful implementation

The Certifi cation scheme for organization is based on •

the independent third-party privacy assessments carried

out by DSCI-authorized Assessment Organizations

(AOs) based on DAF-P© & DPF©

It aims to help organizations demonstrate implementation •

of a sound privacy program,enhance trust and provide

assurance to data subjects, regulators and clients

DPF©

DAF-P©

DSCI Privacy Certifi cate (DPC©)



Development of Research, Policy and White-Papers DSCI is involved in rigorous

research in the area of data protection and cyber security, both at the national and global-

level. Our research is widely infl uential among the security and privacy community.

Undertaking Studies & Surveys

Every year, DSCI conducts a variety of studies and surveys, on the industry’s security, technical

and regulatory challenges at national and global level, to provide the community with robust

research and insights.

e-Security Index for India•

National Information Security Policy and guidelines •

Reference Architecture Report•

Security Consideration in Software Procurement by Government agencies in India•

State of Data Security and Privacy in the Banking, Financial Services and Insurance, •

IT-BPM, Telecom, etc.

Security Thought leadership Program•

Industry Benchmarking Program•

Contribution in the Development of International Standards through SC 27

sub-committee at the ISO in collaboration with Bureau of Indian Standards (BIS)


Corporate Membership

Over 500 organizations from various industry sectors benefi t from our Corporate

Membership Program. Their association with DSCI, helps members gain recognition for

their contribution in the areas of security and privacy.

Flagship events

NASSCOM – DSCI Annual Information Security Summit (AISS) •

DSCI Best Practices Meet (BPM)•

Community Engagement

With chapters across 12 cities in India, DSCI endeavors to involve security and privacy

professionals in these cities and encourage engagement and dialogue through regular chapter

meets. DSCI has a pan-India presence of 2,500 such professionals

Awareness & Outreach

Ahmedabad

Jaipur

PuneMumbai

Hyderabad

Chennai

Bhubaneshwar

Kolkata

Chandigarh

Delhi & NCR

Bengaluru

Coimbatore



Industry-specifi c Events

Focused Roundtables & Workshops

Citizen-centric Awareness Programs

In order to help educate the public around data protection, a series of citizen-centric awareness

programs are planned

DSCI Excellence Awards

Corporates: Organizations and individuals who demonstrate a high-level of preparedness,

and excel in the area of Information Security and Privacy, are awarded this under the Corporate

Segment

Law Enforcement Agencies: State police and investigation agencies, which demonstrate

capacity-building of police offi cers in investigating cybercrimes, and individual offi cers who

excel in cybercrime investigation, are given this annual recognition.

Capacity Building on Cybercrime

Cyber Labs Seven

Cyber Labs provide

training in cybercrime

and forensics. Over

45,000 law enforcement

offi cers, members of the

judiciary,military, public

prosecutors & PSUs

trained so far.

Development of

Standard Operating

Procedures in the

form of Cybercrime

Investigation

Manual

Standardization of

the training program

through Cybercrime

Training Material for

Investigators

(Level I & II)


DSCI Certifi cations Program

Certifi ed Cyber Forensics Professional

– India CCFP-In is intended for digital

forensics managers, consultants &

investigators

Launched in 2014 in collaboration »with (ISC)2

Localized the CCFP-In for India to »meet specifi c needs of the Indian

forensics community.

For Individuals

DSCI Certifi ed Privacy Lead Assessor

(DCPLA©) is intended for privacy

assessors, implementers & managers

Three-day program (Classroom »training & examination)

DSCI Certifi ed Privacy Professionals

(DCPP©)is intended for aspiring privacy

professionals

Preparation based on Privacy »Body of Knowledge (PBoK)

& examination

PRIVACY

CYBER FORENSICS



Security Product Development

Enable growth

of cyber security

product companies

in India

Support promotion of

security products in

international markets

through conferences,

meetings and

delegations

Encourage participation

of the Indian industry in

defi ning technical security

standards and collaborative

protection profi les that are

important for development

of security products

Facilitate creation

of a conducive

market environment

for adoption of

indigenous cyber

security products

Encouraging

discussion on a

common platform

through forums


L: Niryat Bhawan, 3rd Floor, Rao Tula Ram Marg, New Delhi - 110057, India

P: +91-11-26155071 | F: +91-11-26155070 | E: [email protected] | W: www.dsci.in

DATA SECURITY COUNCIL OF INDIA

FOLLOW US

Data Security

Council of India

DSCI_Connect DSCI.Connect DSCIvideo


promoting data protection · 2018-03-13 · it-bpm, bfsi, telecom, industry associations, data...

Documents