iOPEX Technologies Securing Sensitive Data and Safeguarding Against Cyber Threats

IOPEX transforms and optimizes work to flow with less friction while using digital engineering capabilities in automation & AI, coupled with rigorous operational discipline which significantly improves customer experience, economic gains, and business insights.

- 

During an interaction with Vidushi, Ashok Thalavaiswamy, Senior Director IT and Cyber Security iOPEX Technologies discussed how iOPEX Technologies ensure the security of sensitive data and about the cybersecurity infrastructure.

What measures does iOPEX Technology employ to ensure the security of sensitive data within its systems and networks?

We do not allow official email ID access on devices other than office-provided devices using "Using Google Context-Aware Access". Based on the business requirement, we are blocking sending mails outside iOPEX domain or allow only specific domains to have access to send and receive mails. We blocked external devices like USB drives, Blue Tooth, and others from connecting in to ensure security system is intact.

End Points using Anti-Virus Software: At iOPEX technologies, we have blocked personal emails and drives using Zero Trust Network Access, which will block the sites if you are accessing an outside office network as well. We use BitLocker to avoid data loss from laptop theft and others. We also restrict data storage in local drives and allow data storage only within the company-provided share drives. Monitoring the data movement using DLP (data leak prevention) and train and educate all users.

Can you describe iOPEX's approach to threat detection and incident response in cybersecurity?

At iOPEX, as part of the cybersecurity strategy, threat detection and incident responses are plugged in automatically, considering their importance. With clear definition of policies along with continuous monitoring towards threat detection get carried out using the SIEM (Security Information and Event Management) tool. iOPEX framework gets triggered during the security incident, resulting in appropriate communication, ensuring coordinated responses in automated approach.