ColorTokens Inc.

Helping leaders build digitally resilient organizations that can scale as business demand grows by incorporating standards based Digital Resilience. Digital Resilience includes Cyber Defense with abilities to withstand and recover from cyberattacks. This includes establishing Mission-critical Assurance using Zero-trust Enforcement (MAZE) in a practical, measurable, comparable manner. MAZE requires taking small time-bound steps towards transforming digital business models across on-premises systems, one or more cloud systems, OT/ICS systems and other complex systems.

Vice President CISO Advisory

Individual Technology Evangelist 

From a business leader with three decades of experience in cybersecurity, crisis management, privacy, and risk optimization, my unique journey through different roles have helped me to become a zero trust subject matter expert and a digital resilience evangelist assisting leaders to manage cybersecurity risks. I continue to provide guidance to industry forums that are establishing international norms and recommendations.

These include -

1.	The International Standards Organization – ISO. I participate and contribute in authoring and modifying international standards through ISO committees SC27 for information security & privacy, TC292 for business continuity and supply chain resilience, and TC262 for risk management. One of the most exciting work is about the new and upcoming ISO27002 and ISO27001 standards in 2021. In 2021 I have begun work to standardize cyber resilience for the Bureau of Indian Standards.
2.	The Cloud Security Alliance - CSA. Having helped draft the CCM4.0 controls framework, I am currently part of the team that is helping build auditing guidelines to audit CCMv4.0. 
3.	The Business Continuity Institute - BCI. As part of the Cyber Resilience Thinktank,  I built a Cyber Resilience Framework and presented it at the BCI World Global event in Nov 2020. In 2021, I have developed guidelines to introduce chaos in business continuity exercising.
 
As an evangelist, I am usually sought for the ability to help enterprises manage change, and achieve assurance by leveraging my experience in risk optimization, cybersecurity, business continuity, privacy, standards, and automation. I am a regular speaker and have spoken on various international platforms such as Gartner, IDG, Foundry, ISMG, BCI World (UK), ISO, Cloud Security Alliance, Cyber Insurance Summit (Singapore), Continuity & Resilience (EU), CISO Conclave, CIOXPO, Universities, and Legal forums.

Evangelist EMERITUS

Biocon

The Group CISO role enables and supports the Biocon Group’s business and digital transformation initiatives by continuously transforming digital resilience and cybersecurity capabilities to protect information entrusted by customers, and required by applicable regulations to help the Group maintain and improve their market position. With a large digital transformation initiative in place, my leaders provided me with the confidence to use my capabilities, competencies, and experience to ensure a steady balance between enabling the economic architecture of Biocon's digital business (revenues, margin, user experience & satisfaction) and the cyber threat the businesses, customers, and team members face. I used that opportunity to build vision, strategies, and structures by leveraging by improving upon available expertise, tools, frameworks, and operating procedures to address complex cybersecurity and cyber resilience challenges. The challenges required me to not only have a sound knowledge of how businesses use information but also to collaborate and innovate controls in an evolving digital ecosystem.

Achievements
Advised Boards and Executive Leadership on cybersecurity Protection and Recovery strategies improving the overall ESG score
Ensured full business participation in cybersecurity programs (including data protection) through Information Security Working Groups across  silos.
Established a full-feature Cyber Defence Center to proactively handle threats and remains relevant to the scale and security goals managing cloud & SSE.
Established IT-OT Security Architecture to enable digital transformation through the use of practical zero-trust capabilities
Simplified the Cybersecurity Policies and Cyber risk management methodologies, transforming the Global ISMS program to extend to other countries
Mentored and fostered a culture of innovation and continuous improvement amongst members of the Security, IT, and other Business Teams working on cybersecurity initiatives.

Group CISO

CMS IT SERVICES Pvt. Ltd.

Transformed the cybersecurity practice to address the latest cybersecurity challenges as the most reliable cybersecurity systems integrator in India. Authored and launched "Defensible Cybersecurity", a novel approach to cybersecurity based upon ISO27001 and its family of standards, Lockheed Martin's Cyber-Kill-Chain, NIST cybersecurity framework, and DOE C2M2. Having established the base profile with five services, currently working on enhancing the market offerings to include incident response, cybersecurity automation, behaviour analytics, security orchestration and critical information infrastructure protection.

Director Cybersecurity

DXC Technology

Lead, manage, audit and govern the largest ISO27001 and the largest ISO22301 certification programs in the world. Provide Risk Optimization guidance to leadership, especially on Information Security, Business Continuity & Data Privacy management programs. Have designed and built ISO Integrated Management System that can very quickly help adopt newer standards and businesses seamlessly across the enterprise, leading to large scale reductions through standardization.  Focused upon transforming businesses through risk based Management System frameworks facilitating operational capabilities, I am a subject matter expert and Lead Auditor on multiple ISO standards ISO27001, ISO22301, ISO29100, ISO27017, ISO27018 and ISO31000. I speak and influence industry opinion on various forums like IAPP, ISMG, CCAI, ASSOCHAM, EC COUNCIL and many others.

Global Information Risk & Continuity Officer

Hewlett Packard Enterprise

Provide leadership and subject matter expertise to one of the largest ISO27001 certification program in the world, the ES Business Continuity Office and ISO22301 certification and the deployment and adoption of ISO31000 across HP Enterprise Services worldwide. Have designed and built an Integrated Management System that can very quickly help adopt newer standards and businesses seamlessly across the enterprise. Am the author of the Risk Management Policy, Framework and provide guidance to various risk optimization initiatives. Currently working on enhancing the certifications to ISO27018 for Cloud Privacy & Security and ISO29100 for Data Privacy.

Gaining experience of designing, implementing, operating, auditing and improving management systems for multiple standards, across 250 locations that are differently governed, multicultural and  operating various businesses, I am now engaged in consulting organizations on "unlocking" business value from multiple certification programs and realizing investment optimization and on building management systems for establishing cyber resilience.

Global Information Risk and Continuity Officer

Provide leadership & guidance to the Information Security and Business Continuity Management teams for all locations of HP's Best Shore Application Services. These include:
1. Information Security and Business Continuity Framework rollout & oversight.
2. Evangelise Information Risk Management
3. ISO27001 and BS25999 certifications in a Global+Center Model
4. Process Hardening to ensure quality processes are made secure
5. Pursuit Support and Transition for Information Security and Business Continuity.
6. Internal assessments and review of information security and business continuity for application service delivery teams.
7. Manage Customer and 3rd party audits for information security & business continuity.

Global Information Security and Continuity Officer

ITC Infotech

Conceptualized, designed, and implemented the Secure Internet Infrastructure for ITC Infotech for enabling business. Conceptualised, designed and implemented information security function and a business practice for information Security solutions. Implemented the first secure offshore development center for application service delivery for a leading Bank in the UK. This included secure facilities, processes, systems, and business continuity. Conceptualized, designed and implemented BS7799 framework and obtained certification.

Head - IT Security

Wipro Infotech Ltd

Lead the BCRM Practice offering Security Consulting services to customers in Asia Pacific and Middle East for:
1. Identity Management using Entrust, Baltimore, Sun Directory & Microsoft, Wipro Websecure
2. Public Key Infrastructure using Entrust, RSA, Sun PKI & Microsoft
3. Perimeter Security & Infrastructure using Antivirus solutions (Symantec, McAfee), Firewall Solutions (Checkpoint, Watchfire, Nokia, Raptor), authentication Solutions (RSA), Content filtering solutions (Websense) and Intrusion detection/Protection solutions (ISS)
4. Business Continuity
5. Ethical Hacking

Practice Manager - Business Continuity & Risk Management

HCL Comnet

I started in HCL Comnet as a Project Manager for networking projects and implemented many complex networks. These included the ATM based fiber Campus LAN at Indian Institute of Technology, a Metropolitan LAN through the busy streets of Kolkata for Calcutta Stock Exchange, which included Routers, VSATs, FDDI rings, Fiber layouts, structured cabling. Then I moved on to support Indian Aluminium company setup their IT infrastructure to include a Lotus Notes deployment and an Oracle Apps system, over VSATs and Frame Relay circuits using a WAN. At the end of this stint I took over managing the Information Security practice for India, and then for the United States. Responsibilities included
1. Conducting Audits & Assessment.
2. Consulting to align business objectives with security goals.
3. Consulting for outsourcing information security services
4. Consulting to build information security infrastructure for application deployment on internet.
5. Consulting to setup infromation security organizations.

Principal Security Consultant

I am a Vice President CISO Advisory at ColorTokens, a leader in cloud-delivered zero trust security solutions. With over 30 years of experience in cybersecurity, crisis management, privacy, and risk optimization, I help leaders build digitally resilient organizations that can scale as business demand grows and withstand cyberattacks. My mission is to advocate and implement zero trust and digital resilience principles across complex systems, including on-premises, cloud, and OT/ICS environments.

As a former Group CISO at Biocon, a global biopharmaceutical company, I enabled and supported the business and digital transformation initiatives by continuously transforming digital resilience and cybersecurity capabilities. I used my skills and competencies in infrastructure security, cyber defense, standards development, and change management to balance the economic and cyber risks, and to streamline and consolidate operations. I also contribute to the industry forums and standards bodies, such as ISO, BCI, and CSA, as a subject matter expert and an evangelist.

Taplio

Agnidipta Sarkar's Linkedin Analytics

Agnidipta Sarkar

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Agnidipta Sarkar's Linkedin Analytics

Agnidipta Sarkar

Want to drive more opportunities from LinkedIn?

Agnidipta Sarkar's Linkedin Analytics