FutureCrime Summit 2026: Key Insights on Cyber Compliance Regulations

The conversation highlighted the shift from static compliance checklists to dynamic, automated auditing systems as a critical strategy for managing corporate risk.

Participants emphasized that navigating overlapping regulatory mandates enables organizations to maintain robust security frameworks while ensuring uninterrupted business operations.

Ajay Kanth, head of fraud risk management at Aditya Birla Capital, outlined the need for regulatory alignment to move beyond superficial compliance exercises. He stressed that institutional risk governance must integrate proactive measures to address fraud vulnerabilities effectively.

Bharat Panchal, chief risk and regulatory officer for APAC and the Middle East at Global Payment Network, discussed the complexities of adhering to multi-jurisdictional compliance standards. He noted the challenge of reconciling CERT-In’s six-hour incident reporting mandate with varying regional banking regulations across international operations.

Sanjay Kaushik, CEO of Netrika Consultancy, focused on supply chain risk management, warning that enterprise security assessments must extend beyond internal networks. He advocated for comprehensive evaluations of third-party vendors to prevent supply chain vulnerabilities from becoming entry points for cyberattacks or compliance failures.

Utsav Mittal, CEO of Xiarch Bharat, emphasized the importance of standardized security testing in meeting regulatory frameworks. He recommended conducting Vulnerability Assessment and Penetration Testing (VAPT) through CERT-In-approved auditors to satisfy requirements set by SEBI’s Cyber Security and Cyber Resilience Framework (CSCRF) and RBI cybersecurity guidelines.

Vinit Goenka, secretary at the Centre for Knowledge Sovereignty, framed compliance as a national security priority. He argued that adherence to directives from regulatory bodies like the RBI, SEBI, and CERT-In is essential for protecting critical data assets.