"Cloud misconfigurations are like leaving the front door unlocked"

Rajnish Gupta, Managing Director and Country Manager of Tenable India, has over three decades of experience in shaping enterprise security strategy across sectors, including finance, telecom, manufacturing, and the public sector

- 

He spearheads Tenable’s mission in India—driving strategic initiatives, scaling operations, and helping businesses build cyber resilience in an increasingly cloud- driven world. His expertise spans the full spectrum of IT security, from breach prevention to threat intelligence, and aligns closely with the regulatory and digital transformation imperatives unfolding in the country.

In this exclusive conversation with Shubhendu Parth, he dissects the evolving threat landscape across multicloud and hybrid environments, explaining why Indian organisations must urgently move beyond fragmented controls and adopt unified security frameworks. He discusses the critical role of visibility in managing cloud exposure, the pervasive risk of misconfigurations, and how Tenable's cloud-native platform is helping enterprises eliminate blind spots—especially in the context of India’s Digital Personal Data Protection (DPDP) Act. Excerpts:

As cloud adoption accelerates across India, what security responsibilities remain with organisations under the shared responsibility model, and where do businesses often misunderstand their role?

Cloud service providers follow a shared responsibility model regarding security with their customers. The provider is responsible for securing the cloud infrastructure, including the physical security of data centres, network security, and the virtualisation layer. Conversely, organisations are responsible for securing their data, applications, and operating systems running on cloud infrastructure. This includes tasks such as configuring firewalls, setting access controls, and managing user identities and credentials.

How do multi-cloud and hybrid cloud environments complicate visibility and risk management? What strategies can help organisations maintain a robust security posture?