SOFTWARE EXPORTER's ASSOCIATION OF PUNE Presents workshop onData Security, Corporate Liability and Cyber Law15th May 2010: Pune Data Security: for every IT or an ITES Company, data protection as well as IPR protection is a very crucial element of business. Identification, classification and then protection of the information asset, establishing ownership and assignment are processes that need to be examined carefully in order to ensure that the data and IP is well protected against insider threats as well as external attacks. Thus protection of information assets need to be addressed not only at the technical security level but also at the legal compliance and policy framework level to ensure a well rounded approach towards information asset security. Protection of Source code has been given special importance under Indian laws and issues such as Data theft, unauthorized copying , alteration or deletion of data, hacking, identity thefts, IPR violation, unauthorized access, are also addressed under the legislation. Though these issues are causing serious concern in corporations and need to be handled effectively to ensure clean, safe and secure work environment awareness on the subject is not upto the mark. There have been several instances where the employees have walked away with critical information and data of the company which was authored and developed painstakingly by the company over last several years , with an intention to misuse it by either sharing it with the competitor or by starting his own competing business or just make it available in the public domain thus reducing its value too nil! This also may result in a tarnished brand name, loss of customer confidence, impact on the company’s profit margin and loss of funds in the form of penalties and fines from regulators and loss of business and assets! Corporate Liability: ‘Qui facit per alum facit per se’ .One who does something through another does it himself; goes a legal maxim that explains the responsibility of a principal vis-a-vis the acts of his agent. Extend this maxim to the IT and internet-enabled business organizations or for that matter any organization having a decent IT infrastructure and you have on hand an utterly chaotic as well as a risky situation.
- employees leave their seats without shutting down their desktops, encouraging others to play mischief
- employees use computers and internet to send out obscene or derogatory messages
- employees resign and yet continue to have access to their e-mail id which they misuse
- employees may use pirated software or crack licenses without the employers knowledge or permission As if this was not enough, the amended IT Act has stringent provisions by which the employer is liable for the acts of its employees in case certain precautions are not taken eg.
Having a policy in the organization that regulates the use of computers and internet by employees.
Objective : The purpose and objective of the workshop is to understand and discuss the concepts of data security and corporate liability in light of the newly amended Information Technology Act 2008. More specifically to understand - What is data Protection and IPR protection in relation with the IT or an ITES industry
- Data Security – Technical Perspective
- Data Security – Legal Perspective
- Corporate liability under cyber law
- Legal compliance under cyber law
Target Audience profile: Decision makers of corporations, Directors, Company Secretaries, Chief Information Officers / Chief Information Security Officers, HR Heads & Legal Heads Faculty: Vaishali Bhagwat She is a graduate in Computer Science with five years experience in software development and systems analysis. Vaishali is now a practicing Civil and a Cyber lawyer with an experience of about thirteen years. Her work includes civil and cyber crime litigation at the Trial Courts and District Courts Pune and Appellate Authorities Mumbai. She is handling some major cyber crime cases in Pune. Her work also focuses on drafting and vetting of Commercial Contracts, Service Regulations, Employment contracts, NDA, JV Agreements, Technology Transfer Contracts, Computer Use Policies, Software Development Contracts, Commercial contracts, Loan and Mortgage documents, Real estate documentation etc. Vaishali is a visiting faculty at ILS Law College, Symbiosis Law College and CDAC and a regular resource person at conferences and workshops organized by Mahratta Chamber of Commerce Industry and Agriculture (MCCIA), Institute of Advanced Legal Studies (IALS), National Institute of Bank Management (NIBM), National Insurance Academy (NIA), State Bank of India (SBI), CII, ISACA, ICSI, KPMG and Pune Police Cyber Crime Cell, Pune She is invited to speak in public forums, notable among them are - As Panel Expert in the event organized by KPMG and CSI on Computer Security
- NASSCOM – Technology Law Forum, Pune on IT Act 2000
Some of the clients represented by her include Geometric Software Systems, Synechron, Persistent Systems, KPIT Cummins, 3DPLM Systems, Brainvisa Technologies, Virgo Engineers, Poona Club, K.K Nag, Saama Technologies, I2IT , Sakal Papers Pvt, Alchemists Ark, Infobridge Solutions, Ecotech Solutions, Inspired Elearning, Moduler Infotech, Capmetrics Risk solutions, ISCOM, Ecole Solitaire- Minocher Patel, Team India Advisory Ltd, Deccan Mechanical Industries, State Bank of India, State Bank of Bikaner and Jaipur, State Bank of Indore, Union Bank,etc. Nina Godbole Ms Godbole is a graduate of IIT Bombay, Postgraduate in Computer Science from Newport University, California, USA and Postgraduate in Computer Engineering from Pune. Also has acquired professional qualifications such as CISA, CQA, etc. She has more than 12 years experience in IT industry with current assignments with IBM (Business Controls, Risk Analysis of Projects) in India and in Quality Process, IT Security Audit and Delivery, Credit Card Operations in the banking sector, mainly in European countries and USA. Her past work has been in the field of application development, system analysis, business development, support services and quality management & training. She has published two books on Information Security Management and Software Quality Assurance and number of articles in professional journals. Number of papers / presentations have been made at reputed seminars Dates & Schedule of Sessions: 15th May 2010 Registration: 9:15 a.m. to 9:30am Session: 9.30 a.m. to 5.00 p.m. Venue: To be decided Participation Fees (on non-residential basis) | Type of Organisation | Fees per Participant | | | | SEAP Members | Rs. 2,500/- | | | | Non SEAP Members | Rs. 3,000/- | | |
Fee includes participation, course material (hard copies), working lunch and tea / coffee. Advance payment of fees is to be drawn in favour of “Software Exporters’ Association of Pune”. A discount of 10% on fees will be admissible on three or more nominations from an organization only where payment is received in advance. Participation fees are non-refundable / non-adjustable against any other programme of SEAP, but change in nomination(s) is accepted. Registration: Prior registration for participation by the sponsoring companies is necessary. Send in your payments along with the Nomination form to
Nandu Deshpande Sr Manager Administration Persistent Systems Limited Aryabhata-Pingala 9A/12, Kashibai Khilare Path Erandwana, Pune 411 004 Phone +91 (20) 3023 4444
For more information on SEAP , visit www.softexpune.org
|