Agenda

1. Impact of Convergence on Information SecurityJuly 07, 2011PankajAgrawalHead - IT Governance & CISOAircel

2. Agenda What is Convergence Impact New Challenges – Telco Operators Ways to Facilitate Convergence Risk Convergence

3. What is Convergence? Convergence is the tendency for different technological systems to evolve towards performing similar tasks. Convergence can refer to previously separate technologies such as voice (and telephony features), data (and productivity applications), and video that now share resources and interact with each other synergistically or Convergence describes technological and architectural changes that organization are making to enable the consolidation of multiple networks/ systems to a single infrastructure.

4. Convergence- Communication Internet Mobile Telecom Fixed telecom Convergence Wireless Technologies Broadcasters Information Technologies Cable TV Others

5. Impact of Convergence

6. Multi-Layered Convergence Process • Customer Convenience • From generalized to personalized communication • Device Convergence • Universality • Networks Convergence • Inter-connection and Inter-operability • Service Convergence • New Sell and Price Strategies • Sector and Market Convergence • Converged Institutional bases

7. New Challenges – Telco Operators • Convergence • Service convergence • N-play services / N-play economics • Extends demand for broadband access • Market structure • Strategic alliances (Content, Media, etc.) • Mergers and acquisitions • Consolidation • New business models • Falling costs of traditional communication • Merger of customer base • Lower margins / New value-added services… • Costly investment programmes

8. Imperatives driving Convergence Rapid Expansion of Enterprise Ecosystem Enterprises are becoming more complex in a global economy where external partners are increasing Value Migration from the Physical to Information based and intangible assets Increasingly, value is increasing from physical to information based assets New Protective technologies blurring functional boundaries Emerging technology is creating a bridge between physical and information security functions New Compliances and Regulatory regimes More regulations are developing in response to new threats and business interactions Continuing pressure to reduce cost Enterprises are constantly trying to efficiently mitigate risk

9. Ways to Facilitate Convergence • Build a trusted information sharing relationship • Establish uniform security language in contracts • Develop staff with knowledge of external stakeholders • Identify “white space” risks between traditional disciplines • Develop an understanding of other groups’ roles and responsibilities • Understand business value drivers • Integrate and share initiatives • Reach out across functional boundaries Convergence • Increase in competitive advantage • Migration of security as a cost center to one of value add • Transformation of functional security staff to multi-disciplinary business assurance agents

10. Risk Convergence Risk convergence is a concept that allows an organisation to have a single picture of risk and an integrated (holistic) approach to risk management across the entire organisation. Converged Risk Non-Converged Risk Senior Management Senior Management Multiple Risk Reports Single Risk Report Legal IT Finance Ops Legal IT Finance Ops Agreed risk terms, approaches and measures

11. Drivers for Risk Convergence

12. Challenges associated with Risk Convergence