"As a technology, Cloud is a proven technology but it has security issues"

Use and Implementation of Cloud in business
Almost every organization is using cloud although the extent differs. The importance of cloud is more prominent in some sectors like the retail while in financial sector; the technology has not been able to make a strong grip. Organizations into retail use a small number of servers and therefore prefer cloud instead of investing in huge infrastructures.

Cloud stands as a proven technology. But it has security vulnerabilities due to which financial segments of organizations are not able to make full use of it. Due to complex & hybrid architecture of cloud services, the systems are distributed across various regions and geographical areas across the globe. This makes it difficult for organizations to ensure compliance with industry and government regulations pertaining to respective regions.

Star Union Dai-ichi Life Insurance uses private cloud by deploying technologies such VMware, HyperV and other hosting services.

Building an effective DLP programme
For organizations to realize an effective DLP program, security awareness is very important. We have implemented various end point security products. For all users we are using Symantec, Cisco NAC, and to reinforce end user security. Further, users are enforced to log into SUD Life domain making it mandatory for end users system to be compliant with SUD Life domain security policy. We are also planning for an extensive implementation of DLP solution to mitigate the threats due to information leakage. This could be one of the good solutions to effectively prevent loss of data. The success of a DLP program depends upon involvement of the stakeholders to identify critical information, effectiveness of the deployed policies in an organization and the monitoring and reviewing procedures for the same.

Maximizing the cost efficiency for information security
We are promoted by two leading national bankers- Bank of India and UBI. Thus being into financial services, IT security is a very sensitive matter for us. There are a number of tools to ensure and maximize cost efficiency for information security. In the initial infrastructural setup itself, we have taken care of all the security aspects and we continuously organize security awareness programs. Our IT security specialists are responsible for keeping all the technology within the company secure and we have adopted tools and methodologies that have led to the development and deployment of highly successful security and risk management strategies.