Lt Col Vivek GuptaVeteran, PCI, CFE, IIM-K AlumniVice President (Vigilance and Audit) at theSugam Group That day, it was 7 in the evening when Ravi received a call from his servant saying, “Sir, the dog has gone missing.” Shaken, Ravi stood up from his office chair and asked for details, which his servant provided. Not just a dog-lover but an animal-lover by nature and a big shot businessman by profession, Ravi left all his pending tasks, grabbed his mobile and wallet, called his driver and went off within a few seconds of receiving the call from his servant. He, along with his driver, searched frantically in the area where the possibility of finding the dog was highest, sometimes on foot and sometimes while driving. Later joined by two of his office staff, the search continued till 11 PM but in vain. Ravi told his office staff, who was a pillion rider on his colleague’s bike, to create a message with a photo of the dog and his mobile number to be sent across all WhatsApp groups and social media platforms. Ravi realised then that his servant wasn’t a dog lover but was taking care of the animal for his ‘naukri’ and must have been busy watching reels when the dog went missing, a fact which he was vehemently trying to spin. His staff took out the latest photo of the dog, and with some editing skills that he had learned earlier by seeing a few reels on his mobile (thanks to plenty of free time on the job), engraved the contact details of Ravi’s house manager and his Executive Assistant (EA) and sent it across in all the WhatsApp groups. Ravi’s family too forwarded the same. After a few “Oh no”, “So sorry to hear that”, “forwarded,” and some similes later, came personal messages of sympathy and ‘understanding.’ Generally, these were from the people who pick up a stone if they see any dog on the street and from those who preach the unholiness of a dog in a man’s life by citing religious textbooks, spinning their interpretation to suit their convenience. Probably, this is the power of money; after all, rich men have many sympathisers. It was Friday morning when I received this message on my WhatsApp group. Looking out from my small apartment window in Dubai, I realised that this could be the much-awaited God-sent opportunity for me and my small venture. What if I find that dog and personally take it to Ravi? I would then get unrestricted access to him, and my struggling start-up would find a client like Ravi’s company. I had visited Ravi’s company many times in that prime locality of this city, but could not make it past that posh lobby and those contract executives. “Oh! It’s just a stupid idea and a daydream. How could I find the Dog and hand it over to Ravi? Looks distant………., but what harm in trying? It’s a weekly off today, as it is,” – was my self-talk. Finally, I set out to find the dog in the streets of the city, planning to eat out, walk a bit and try to spot the dog – not just any dog, bro, but Ravi’s dog. By afternoon, I had walked more miles than I usually do in any average week, and now it was time to meet my girlfriend at that corner café. She laughed her heart out after listening to my day’s engagement. “So what?” said I. “You are nuts,” she said. “Look, it’s not that my product is faulty or my associated services are any substandard, but still the procurement department of Ravi’s company behaves like God’s own. I have been searching for ways to bypass those idiots for a long time, but all my efforts have so far met with silent denials. This could be a game changer,” I explained and continued, “The procurement guys know very well that I am offering much better quality at competitive pricing, but they are too arrogant to acknowledge it. All they care about is their own interests.” “Isn’t it everywhere?” she asked. “Ya, it is, and that’s why vendors like me get left out, and substandard suppliers keep providing products and services most of the time at many such companies. It is now, I have a chance to get in touch with the decision maker directly……., no harm in trying.” She nodded, not clear whether she understood it or not. It was time for me to pay the bill, and after the card swipe, I opened my mobile and that WhatsApp group. It was so disheartening for me to see that someone in the group had tagged the dog’s photo and written just one word – “found.” I thought my half a day’s work had been wasted; the dog has been found. Scrolling a little below, another person tagged – “found” and wrote – “not yet”. I sighed in relief. So, the one who has written – “found,” had forgotten to put a question mark (?), and I thought it was a declaration (!) that the dog has been found. Communication skills – bloody hell. People have forgotten the grammar and even the spellings, and we seem to have been adjusting with the communication that conveys only half the meaning and the rest is assumed to be understood. I recalled an incident from my last employment before I ventured into my own business. The CEO had this habit of meeting with each department head for 15 minutes every week, after which he used to tell his EA to type the minutes of his meetings and circulate them to other departments as well to keep them in the loop. To his dismay, after some time, the CEO started noticing that the departments were not executing what he wanted them to and instead, there seems that the departments weren’t aligned and executing things their own way. The following Tuesday, during the weekly meeting with the production head, he…

How Indian Innovation is Reshaping the Future of Trusted Video Security Chandra ShekharManaging Director, IndiNatus India Private Limited The future of surveillance will not be defined by who manufactures the most cameras. It will be defined by who owns the technology, secures the data, and drives innovation.The global surveillance industry is undergoing a profound transformation. What was once considered a hardware-driven market is rapidly evolving into an ecosystem powered by artificial intelligence, cybersecurity, edge computing, and data intelligence.As nations increasingly recognize surveillance infrastructure as a critical component of national security, technological sovereignty has become a strategic priority. Governments around the world are focusing not only on the performance of surveillance products but also on the origin of technology, security architecture, supply chain integrity, and long-term sustainability.India is no exception.With ambitious initiatives such as Digital India, Smart Cities Mission, Safe City Projects, Critical Infrastructure Protection Programs, and Atmanirbhar Bharat, the country is laying the foundation for a secure and self-reliant digital future.At the heart of this transformation lies a critical question:Can India build world-class surveillance technologies through its own innovation and engineering capabilities?The answer is increasingly becoming – ‘Yes!’ A new chapter for the indian surveillance industry For many years, India’s surveillance market largely relied on imported technologies and global supply chains. While these products accelerated adoption and expanded market access, they also highlighted the need for stronger indigenous capabilities in product engineering, cybersecurity, and technology ownership. Today, the industry is witnessing a paradigm shift. Indian companies are moving beyond assembly and distribution models to develop their own intellectual property, engineering expertise, software platforms, and product ecosystems. This shift is not merely about manufacturing within India. It is about creating technologies within India. It is about building products whose architecture, innovation, and engineering DNA originate from Bharat. The IndiNatus journey: Building technology, not just products When IndiNatus was founded in 2021, the vision was straightforward yet ambitious – Designed. Developed. Built in Bharat. The objective was never limited to branding or assembly. The goal was to create a technology company capable of developing advanced surveillance solutions through indigenous engineering and innovation. This required significant investments in hardware architecture, PCB design & validation, embedded firmware development, AI & Edge computing, cybersecurity engineering, product testing & reliability, mechanical design, and manufacturing engineering. “The global surveillance indus- try is undergoing a profound transformation. What was once considered a hardware-driven market is rapidly evolving into an ecosystem powered by artificial intelligence, cybersecurity, edge computing, and data intelligence” Over the years, IndiNatus has built a multidisciplinary engineering ecosystem focused on creating surveillance solutions tailored for India’s security and operational requirements. The result is a growing portfolio of IP Cameras, NVRs, AI Edge Servers, and intelligent surveillance platforms engineered through in-house capabilities. Why Research & Development matters Technology leadership cannot be imported – it must be created. One of the defining milestones in the IndiNatus journey was the establishment of a dedicated Research and Development center recognized by the Department of Scientific and Industrial Research (DSIR), Government of India. This recognition validates the company’s commitment to long-term innovation and indigenous technology development. Today, the R&D Center serves as the nucleus for innovation across multiple technology domains including – Video Processing, Artificial Intelligence, Edge Analytics, Cybersecurity, Intelligent Video Management, and Future Surveillance Architectures. In an era where software intelligence increasingly defines product value, sustained investment in R&D has become essential for creating globally competitive technologies. The significance of STQC certification As surveillance systems become deeply integrated into government networks, critical infrastructure, transportation systems, educational institutions, and public safety programs, trust has become a fundamental requirement. The Government of India has introduced stringent quality and security standards to ensure that surveillance products deployed in sensitive environments meet rigorous benchmarks. STQC certification represents one such benchmark. It validates multiple aspects of a product ecosystem, including – Security, Reliability, Functional Integrity, Software Validation, Compliance Requirements, and Quality Processes. Achieving STQC certification is not simply a regulatory milestone. It demonstrates engineering maturity, process discipline, and a commitment to delivering trusted technologies. More importantly, it reinforces confidence among users, system integrators, government agencies, and infrastructure operators. The strategic importance of indigenous surveillance The conversation around indigenous surveillance extends beyond commercial success. It directly impacts the following: National security Critical infrastructure increasingly relies on connected surveillance systems. Indigenous technologies provide greater visibility and control over security architectures. Cybersecurity As surveillance devices become network-connected endpoints, cybersecurity becomes as important as image quality or analytics performance. Economic development Technology development creates high-value employment opportunities across engineering, research, software, manufacturing, and support functions. Innovation ecosystem Local product development encourages growth across semiconductors, electronics manufacturing, AI, embedded systems, and software engineering. Supply chain resilience Domestic capabilities reduce exposure to global supply chain disruptions and geopolitical uncertainties. The broader impact extends far beyond a single company or product category. It contributes to India’s technological self-reliance. The future of video surveillance The next decade will redefine the surveillance industry. Artificial Intelligence will transform passive cameras into intelligent decision-making systems. Edge Computing will enable real-time analytics. Cybersecurity will become a core design requirement rather than an afterthought. Video systems will increasingly integrate with smart cities, transportation networks, industrial automation, and public safety platforms. The future belongs to organizations capable of combining innovation, security, intelligence, and reliability into a unified ecosystem. India possesses the talent, ambition, and engineering capability to play a leading role in that future. A milestone for Bharat The story of IndiNatus is ultimately not about one company. It is about what becomes possible when Indian engineering, innovation, and determination come together with a long-term vision. The emergence of indigenous surveillance technologies signals a new chapter for the industry – one where India is not merely a consumer of technology but a creator of technology. As the nation advances toward greater technological sovereignty, companies investing in research, innovation, and intellectual property development will help shape the next generation of secure digital infrastructure. The journey has only begun. But the direction is clear – Designed. Developed. Built in Bharat….

A holistic approach to securing modern IT infrastructure from silicon to software Suresh Chandra –Member GAC (IT Act), Ex. Sr. Dir/ DDG at STQC (MeitY),Ex. Head of CB of Com. Criteria, CCTV, Biometric, GIGW, EPS, TMS,AB Empanelment-SETL. and also a member of ISO/ UEC committee SC27,BIS LITD17, LITD 31, Chairman LITD 25. For years, cybersecurity has primarily focused on protecting software, networks, applications, and data. Organizations invest heavily in firewalls, antivirus solutions, endpoint protection, encryption, identity management, and Security Operations Centres (SOCs). While these investments remain essential, they address only part of today’s security challenge. Modern cyber threats have evolved beyond software vulnerabilities. Increasingly, attackers are targeting the very foundation on which digital systems are built – the hardware itself. A perfectly secured application can still be compromised if the firmware, processor, or underlying semiconductor contains hidden vulnerabilities or malicious modifications. As digital transformation accelerates across governments, enterprises, financial institutions, critical infrastructure, healthcare, defence, and smart cities, securing hardware has become as important as securing software. Cybersecurity must therefore evolve into a truly holistic discipline that encompasses the complete technology stack – from silicon to cloud. Understanding Information Technology (IT) Security Information Technology (IT) security, also known as cybersecurity, is the practice of protecting digital assets – including computer systems, networks, applications, cloud infrastructure, and data – from unauthorized access, cyberattacks, data breaches, and service disruptions. IT security encompasses multiple domains such as network security, endpoint security, application security, cloud security, identity and access management, and incident response. The primary objective is to ensure the confidentiality, integrity, and availability of information and critical services. The Core Pillars: The CIA Triad The foundation of IT security is the CIA Triad, a widely accepted framework that guides the design and implementation of information security policies and controls. Common Cyber Threats Understanding the evolving threat landscape is essential for implementing effective security controls. Security Assurance Before Deployment and Production All components of an organization’s IT infrastructure – including application software, network devices, servers, endpoint devices, and communication channels – must undergo comprehensive security assessment and hardening before deployment into production. Implementing security controls early in the lifecycle helps identify vulnerabilities, reduce cyber risks, and ensure compliance with recognized security standards and best practices. Application Software Network Devices Servers Endpoint Devices Communication Channels Security Objective Before any system enters production, organizations should ensure that: Can We Assume an IT System is Secure After Security Testing? Even when all software components, network devices, servers, endpoints, and communication channels have been thoroughly assessed and hardened in accordance with recognized standards and guidelines, it does not necessarily guarantee that the overall IT system is secure. Traditional cybersecurity assessments primarily focus on software vulnerabilities, configuration weaknesses, and network security. However, these assessments may not detect inherited hardware vulnerabilities, compromised firmware, malicious implants, or supply-chain backdoors embedded within the underlying computing platform. A system may therefore remain vulnerable despite successfully passing all conventional security tests. The Hidden Risks Modern IT devices are built using a complex global supply chain involving multiple vendors respon sible for chip design, fabrication, firmware development, operating systems, drivers, and applications. A compromise at any layer of this technology stack can undermine the security of the entire system. Potential hidden threats include: These threats often operate below the operating system, making them extremely difficult to detect using traditional vulnerability assessment and penetration testing methodologies. Layered Architecture of an IT Device An IT device comprises multiple hardware and software layers that collectively process data and execute instructions. Security must be established across every layer, as compromising a lower layer can undermine all higher layers. System-on-Chip (SoC) The System-on-Chip (SoC) is the physical foundation of the device. It integrates multiple computing components – including the Central Processing Unit (CPU), Graphics Processing Unit (GPU), memory controllers, cryptographic accelerators, communication interfaces, and input/output (I/O) controllers – onto a single semiconductor chip. “For years, cybersecurity has primarily focused on protecting software, networks, applications, and data. Organizations invest heavily in firewalls, antivirus solutions, endpoint protection, encryption, identity management, and Security Operations Centres (SOCs). While these investments remain essential, they address only part of today’s security challenge” The SoC establishes the hardware Root of Trust. Any compromise at this level such as a hardware Trojan or malicious circuit modification, can bypass security controls implemented in software. Firmware Firmware is low-level software permanently stored in non-volatile memory (e.g., BIOS, UEFI, or embedded firmware). It initializes hardware during system startup, configures critical components, and provides the interface between hardware and the operating system. Because firmware executes before the operating system, compromised firmware can gain complete control over the device while remaining invisible to conventional security tools. Operating System (OS) The operating system (e.g., Linux, Windows, Android, iOS, or embedded RTOS) manages hardware resources, memory, processes, storage, networking, and user access while providing the execution environment for applications. Although operating systems receive regular security updates, they inherently trust the underlying firmware and hardware. Consequently, a compromised lower layer can circumvent OS-level security mechanisms. Device Drivers Device drivers enable communication between the operating system and hardware peripherals such as storage devices, graphics processors, network adapters, printers, and sensors. Poorly designed or malicious drivers can provide attackers with kernel-level privileges, enabling privilege escalation, unauthorized access, or system compromise. Applications Applications constitute the top layer of the software stack and provide user-facing functionality, including web browsers, office suites, databases, enterprise software, and mobile applications. While applications are routinely tested for vulnerabilities using standards such as OWASP, their security ultimately depends on the integrity and trustworthiness of all underlying layers. Security Implication The security of an IT system is only as strong as its lowest trusted layer. If the System-on-Chip, firmware, or boot process is compromised, even perfectly secured applications, operating systems, and networks may be unable to prevent unauthorized access or data exfiltration. Therefore, modern cybersecurity must extend beyond traditional software and network testing to include: A defence-in-depth strategy that spans the entire hardware-to-application stack is essential for building trustworthy and resilient IT systems. As organizations increasingly…