Governance & Risk Management , Incident & Breach Response , Security Operations

Reliance Jio's CISO on Setting the Right Security Priorities

With the increased emphasis on detection and response, practitioners may be beginning to dilute the fundamentals of security, neglecting the need to first protect and defend, says Brijesh Datta, CISO at Reliance Jio Infocomm, a leading mobile network operator in India.

See Also: Fighting Machine-Speed Attacks With Autonomous Response

"There is a trend these days that the security practitioner community is leaving the erstwhile fortress or moat model of multilayered security and deciding to focus more on detection and response; people are beginning to neglect the basic message of protect and defend," he says. "The first basic message of security, which is securing your infrastructure, securing your identity and access management systems, your networks, seems to be getting diluted."

In an exclusive video interview with Information Security Media Group, Datta discusses:

• The concept of zero-trust in security;
• Clearly defining the role of a security practitioner;
• Why security practitioners need to get involved in designing infrastructure and assessing business risk.

Datta has more than 25 years of experience in telecommunications, IT and information security. A former army officer, he was instrumental in defining cybersecurity practices for the Indian Army in the late 1990s. He's now CISO at Reliance Jio Infocomm Ltd, where he manages security for all the company's vertical markets.