Face to Face Interview with Pawan Desai, 2019
Pawan Desai CISA, CISSP, CBCP, Co-Founder & CEO, MitKat Advisory MitKat is a premium management consultancy specialized in risk management, which is primarily focused on global corporations, government departments/ multi-lateral organizations, and NGOs operating in challenging environments. SecurityLink India has recently got an opportunity to talk to Pawan Desai – CISA, CISSP, CBCP – Co-Founder & CEO of MitKat Advisory, who is one of Asia’s leading security thought leaders, speaker and author. Some excerpts: SecurityLink India (SLI): How do you define MitKat Advisory in essence, and how was it conceptualized? Pawan Desai: India and Singapore based MitKat Advisory is a leading risk consultancy company in Asia. Our mission centres around outstanding services to clients, being financially healthy so that we can reward ourselves and grow, and be a great place to work which consistently attracts, develops and retains best in class talents. SLI: What is your modus-operandi? Pawan Desai: MitKat works collaboratively with niche clients to promote business and protect their most valuable assets – people, information, material assets and brand. We consult, take ownership for implementation of recommendations and help sustain initiatives. SLI: Which are your key areas of excellence in terms of services and verticals? Pawan Desai: Information and advisory services (Threat Intelligence and Travel Advisory), security and safety consulting and design, operational support services, embedded security leadership, cybersecurity and business continuity plan (BCP), fraud and integrity risk management, training and change management, and so on. SLI: What is your priority sector – government or private, and why? Pawan Desai: We work with the world’s most respected corporations (more than 50 of the top 100 global brands). We also work on strategic projects with leading global NGOs as well as with government. SLI: How do you see the trend today in relation to L1 vs. T1? Pawan Desai: It depends on the maturity of the organization, and the priority they accord to the security of their personnel, brand and other critical assets. Most mature organisations have a value-based buying with a pre-defined percentage for technical competence as well as price. However, many organisations still have L1 bias, including government organisations. SLI: Please name some of your completed and pipelined projects, and which is your most satisfying one so far, and why? Pawan Desai: We provide Threat Intelligence and Travel Advisory to many of the world’s most respected organizations 24x7x365, and in the case of most of our customers the satisfaction rate is close to 100%. We have done. some of the most advanced security consulting and design projects, including envisioning and design of national level command and control centres. We have worked in war and insurgency impacted areas, saved lives, and calmed and helped people in crises – this is obviously very gratifying. Very tight non-disclosure agreements are a norm in our industry. However, we are always willing to share our learnings and experiences. SLI: How would you describe the security and surveillance business in India as on date, and where is the trend leading to? Pawan Desai: More and more organisations are moving from excessive human dependence (and associated vulnerabilities) to an optimum mix of people, process and technology. Organizations also want a standards and frameworks-based efficient security, and a consistent level of efficiency and user experience across the enterprise. SLI: New developers and technologies are emerging at a rapid pace; what would be its impact on the Indian market in the days to come, and what are your advices for the end customers? Pawan Desai: As minimum wages go up, the cost of compliance increases, breaches occur with alarming regularity (mainly due to human vulnerabilities) and regulators become unforgiving, more organisations are preferring to get professional consulting and design support, undertaking techno-infra interventions and strengthen processes to achieve better security and user experience at optimum cost. SLI: What would be the state of physical security personnel in the wake of emerging technologies, and how could the balance be established? Pawan Desai: Going forward, there will be fewer but better skilled and trained personnel. They would be more techno-savvy and be able to operate security technologies well. Soft skills will become more important as security personnel are usually the first point of contact. Many organisations are undertaking (with professional consulting support) cost optimization and performance improvement exercises centred around reducing/ optimizing guards, using technologies and strengthening processes. Some new age integrated corporate services providers are providing tech-enabled integrated facility, security and other corporate services as a bundled offering. SLI: What challenges or inhibiting elements (both legislative and otherwise) do you face in the industry, and what are your recommendations in relation to them? Pawan Desai: We need standards and frameworks for physical security. Current physical security legislation covers only manned guarding, and that too is getting outdated rapidly. We need integrated security standards, guidelines, frameworks to cover other stakeholders such as consulting and design companies, security OEMs and system integrators, employers etc. SLI: How have the safe and smart cities projects been doing so far? What are your contributions towards these projects? Pawan Desai: Smart cities program is a great initiative but implementation record has been mixed. Different cities are making progress to different degrees. Some like Pune, Nagpur, Bhubaneswar etc. are doing relatively better. Some cities are making good progress in specific parameters – like Indore in cleanliness. Consultants or so called project management consultancies (PMCs) are in place but strictly speaking, there is no project to manage. Project management involves feasibility study (Go/ No Go), DPR, design, design development, tender development and tendering – all of these take time. Unfortunately, the emphasis due to various other considerations is just to get the tenders out at the earliest. The role of ICT is being overplayed and the urban infrastructure design does not get the place of pride. What needs to be understood is that before a city tries to make itself smart, basics need to be in place. Sometimes unfortunately, provision of basics like water or sewage disposal is being confused with. Projects are being…