The cybersecurity landscape of tomorrow will be a time of near-misses and rapid reaction time! While sophisticated attacks involving phishing, social engineering are on the rise, there are also attacks which use past identified vulnerabilities and therefore challenge the very basic tenets of computer security. Businesses, therefore, need to have a strategy to focus on the fundamentals as well as build for the future. The very basics of security, like a properly implemented policy; ensuring they are monitored, and watched for anomalies and exceptions is today a very necessary exercise. This is no longer a luxury. Businesses also need to build security and privacy controls into their core DNA itself. This allows them to build the culture and technology to withstand future state attacks which are non-recognizable and sometimes a variant of the previous ones, like the Petya and NotPetya.
Arrka at its heart is “Managing Information Risks”. The organization focuses on designing solutions and models to solve problems associated with Information Security (including Cyber Security), Data Privacy, BCP/DR, Compliance, Design as well as Assurance & Testing services etc. Arrka thereby affirms their stance in taking the complexity and anxiety out of managing information risks for small and mid-sized organizations; by enabling them to manage this aspect of their business in a manner and budgets that work for them.
Arrka was incorporated on Jan 6, 2012. They have two offices, one in Pune while the other in Mumbai alongside additional facilities in Chennai, Bangalore and the Kingdom of Bahrain.
The Dynamic Duo
Shivangi Nadkarni, Co-founder, and CEO: Shivangi has over 20+ years of experience in the domains of Information Security & Risk Management, E-Commerce & Networking across multiple global geographies. She has earlier worked with organizations like Wipro & Sify handling a variety of roles and heading different Lines of Business. She was one of the first few employees at Sify and witnessed the genesis of the Internet revolution in India. She was also instrumental in setting up the first licensed Certifying Authority in India – in association with VeriSign.
She has worked with DSCI (The Data Security Council of India, a NASSCOM Body) to develop the DCPP (DSCI Certified Privacy Professional) certification program and has authored the Privacy Book of Knowledge (PBoK) for DSCI for this program.
Shivangi is a regular speaker and guest writer at various forums in India. She is a BE (Hons) Electrical & Electronics from BITS, Pilani and a PGDM from IIM, Calcutta. She is also a CISA, CIPT, and DCPP.
Sameer Anja, Co-founder,and COO: Sameer has over 18+ years of experience in the domains of Information Security, Risk, and Compliance, IT Governance, IT Strategy, IT Service Management, and Business Continuity Management. He has earlier worked with organizations like KPMG & Wipro and worked on a variety of engagements in the above areas.
Sameer is widely known in his circle for his contributions to the field of Information Risk. He is an active participant in various forums and has contributed to the framing of standards and methodologies in multiple domains.
Sameer holds a B.Sc. (Statistics) from the University of Bombay and has a Diploma from NIIT. He is also a CISSP, ISO27001 Lead Auditor & Implementer and a certified ISM from VeriSign.
Businesses need to build security and privacy controls into their core DNA itself
Differentiating Factors
Arrka provides its services in a unique model comprising of the web-based platform created through a unique blend of intelligence and experience using the machine and human intelligence. Through their innovative approaches leveraging technology, using some out-of-the-box thinking Arrka strives to solve actual problems of an organization that have remained hitherto unaddressed. This is done by:
• Solution approach: Using a combination of services and technology via their platform.
• Engagement approach: Signing long-term contracts with their clients to help them implement, maintain, and manage their information risk programs instead of carrying on with point-in-time engagements.
•Integrated approach: Looking into information risk holistically and not in silos alongside monitoring all key aspects in this domain namely Infosec, CyberSec, Data Privacy, BCP/DR, Compliance, etc
•Data Privacy Lab: Addressing problems through their ‘unique lab facility’ which specializes in doing privacy testing and assessment.
Rebuilding the Future
Arrka is constantly striving to tap the talent in the industry. The firm recognizes one of the fastest growing talent pool emerging that is the Women Workforce, specifically who have left careers to build their home and are now looking to contribute back. Through their unique program, they give them the flexibility to work from their location and at the same time contribute as a full-time employee. Arrka is also collaborating with Universities and Colleges to build the cybersecurity workforce for the future.
As a business, Arrka is constantly striving to push the boundaries and expand their horizons. They are building various platforms in Awareness, Intelligent systems, Capacity Building and are looking to build the services required in the future today.