Dr. Priyanka Sunder on Building Resilient Cybersecurity Programs
Summary
In an interview, Dr. Priyanka Sunder discusses GRC as a continuous resilience effort, Security by Design, cloud security priorities, and practical ways to strengthen organizational security culture.
Key points
- Sunder says GRC has shifted from checkbox compliance toward continuous resilience, including maturity assessments, security scorecards, business continuity testing, and third-party risk management.
- She identifies secure code, secure configurations, and hardened baselines as foundations of Security by Design.
- Cloud priorities she recommends include reducing vendor dependency, meeting data-localization needs, maintaining backups, preventing container and storage misconfigurations, and managing keys securely.
- She advocates leadership modeling secure behavior, continuous role-tailored training, departmental security champions, and no-blame reporting.
- She identifies gaps including weak patch management, employee and vendor awareness, change management, cloud security, access controls, and endpoint security.
- Sunder says a strong cybersecurity training and awareness framework can reduce 90% of risks from human error.
Article Details
- Topic
- Cybersecurity governance, risk and compliance; cloud security; and leadership-driven security culture