|
|
|
|
||||
|
DEBOPRIYO KAR
Name: Debopriyo Kar ------------------------------------------------------------------------------------------- KEY QUALIFICATIONS: With over 30 years of experience in the IT industry, Debopriyo has been involved in the IT industry since its early days in India, and has been part of its various stages of evolution. He had the opportunity to develop an all round managerial expertise while bringing up several start-up business ventures, and had been extensively involved in new Project Developments, setting up international tie-up’s and alliances, and initiating quality systems and processes. EXPERTISE
PAPERS PRESENTED
ASSIGNMENTS – EXPERIENCE Techbooks, New Delhi – Consultancy for BS7799 The client is a leader in the Indian BPO industry providing world's most technologically advanced and integrated content transformation solutions. Because of the sensitive nature of the data being handled, the need for information security was critical and the journey to BS7799 ISMS implementation had to be done under a very tight schedule. Debopriyo Kar led and supervised the complete project. He handled training and audit activities while supervising the ISMS definition. The client is presently migrating to ISO 27001. Conducting opening meetings, expectation setting, supervision of project, participating in the assignment in case of any problems, reviewing the status of the assignment. The assignment includes:
HCL Perot Systems, Noida and Bangalore - Consultancy for BS7799 This client is a large JV between a large Systems Integrator based in the US, and one of the top three IT services companies in India. It employs about 2000 people in its establishments situated in the NCR and Bangalore. The initial audit was done towards BS 7799-2 specifications, and subsequently gaps were identified. After certain progress was made towards compliance, three more interim audits were conducted. The client was successful in being certified as a BS7799 compliant organization without any time overrun. The assignment includes:
Xchanging, Gurgaon – Consultancy for BS7799 This assignment involved giving implementing BS7799 standard for the client.
RMSI, Noida – Consultancy for ISO 27001 The client is largely into GIS. The client desired to implement Information Security Standard ISO 27001 for its IT Department to strengthen its ISMS and improve security (includes conducting vulnerability Assessment) and conduct Penetration Testing. PCCW/SWD, Hong Kong Govt. – Security Audit PCCW, Hong Kong had installed and implemented a complete IT infrastructure including WAN, LAN, Data Centre, Disaster Recovery site and Information Security Management System for its customer, Social Works Department (SWD), Hong Kong Government. As per the stipulations of the HK Govt., this IT infrastructure was to be audited, for compliance to the norms laid down. The responsibility for this task was awarded to CyberQ. Debopriyo led this audit team to perform Penetration Test and Vulnerability Assessment of this IT infrastructure consisting of more than 50 servers, 10 firewalls and number of routers, switches and workstations spread over many offices across Hong Kong and Kowloon. All the security related policies and procedures, including Disaster Recovery Plan, were also verified for adequacy and implementation. This assignment involved about 30 man-days of work. Degree of responsibility held:
North Delhi Power Limited, Delhi, India – ISO 27001 Implementation This is a government organization, which is into Power Generation and Distribution. The client wanted to improve its processes and upgrade the same for software process improvement and information security. Tata Consultancy Services Ltd- PKI Pre-operative Audit The client is the largest IT Corporation in India. The assignment was a complete PKI audit covering CA implementation, physical infrastructure, processes, personnel, and technology. Spread over a period of four months, it involved about 35 man-days of work, and was done at TCS’ facility at Hyderabad.
Apart from this, he has also been involved in guiding TCS CA in the implementation of their Disaster Recovery (DR) site. IDRBT CA – PKI Audit IDRBT CA is a licensed Certifying Authority as per Indian IT Act 2000 and has the largest CA operation in India having issued more than 20,000 certificates till date out of about 30,000 issued by all the licensed certifying authorities put together. IDRBT CA’s certificates and corresponding Digital Signatures are being used in Reserve Bank of India’s (India’s central bank) critical banking applications such as RTGS, NDS, SFMS, CFMS, etc. involving daily transaction turnover of tens of billions of Rupees. Debopriyo has been involved as a leader of the team doing periodic PKI audits of IDRBT CA’s operations covering CA implementation, physical infrastructure, processes, personnel, and technology. He has been actively involved in preoperative review of new versions of IDRBT CA’s CPS (Certification Practice Statement) as well as evaluating a Offline Certification process before they were put up to Controller of Certification Authorities (CCA) for final approval. Reserve Bank of India, Registration Authority (RBI RA) The assignment was to audit RBI RA with respect to its functions as an IDRBT-CA’s Registration Authority. The various areas covered in this audit were Compliance of security processes and controls in accordance with the IT Act, Fulfillment of RA obligations, Processes for key compromise, certificate and key expiration, Physical as well as logical security of the RA systems, Operational functions for approving request for certificate generation and revocation, Records maintained by RA. MTNL-Trustline, New Delhi India – PKI Audit He was leader of the audit team that did a Repository Audit for MTNL TL CA’s operations at their facility in New Delhi. Techbooks, New Delhi – Migration from BS7799 to ISO 27001 This involves Risk Assessment, Process Modification, baselining of processes and conducting Internal Audit and providing facilitation to close the gaps. Debopriyo Kar is the project director for this assignment. Motherson Sumi Infotech and Designs Limited (MIND), Noida, India - ISO 27001 implementation This client is a large JV between Motherson and Sumitomo. The client desires to implement Information Security Standard ISO 27001 to strengthen its ISMS and improve security and conduct Penetration Test.
Bharti Telesoft – Consultancy for ISO 27001, New Delhi and Bangalore Bharti Telesoft caters to both internal clients and clients located outside India. To assure them of Information Security within their organization, Bharti Telesoft wants to implement ISO 27001 at its New Delhi and Bangalore facilities. The assignment includes
------------------------------------------------------------------------------------------- EDUCATION:
------------------------------------------------------------------------------------------- EXPERIENCE RECORD:
Prior to this Debopriyo worked at DCM Data Products (79-83) was associated with development efforts of the first Microprocessor based computer ‘Spectrum’. He underwent training at the Tandy Corporation of USA. He started his career with the Systronics Ltd (76–78) as an R&D Engineer. |
|
 |
| 2007 © All content copyright of PT. Infotech Solutions |
