Lt General (Dr.) Rajesh Pant is an internationally recognized Cyber Security expert, presently tenanting the prestigious appointment of National Cyber Security Coordinator at the Prime Minister’s Office, India. General Pant brings to the table an interesting mix of military operations, academic excellence, corporate governance, and cybersecurity wisdom. Prior to this, he was the Head of the Army’s Cyber Training establishment for three years. He served in the Army Signals Corps for 41 years wherein he was awarded three times by the President of India for distinguished service of the highest order. He also served as the Chairman of Precision Electronics Ltd as a Governing Council Member of IETE (India). Sachin Gaur interviewed him on his viewpoint on India’s vision for cybersecurity.

Q. On behalf of InnoHEALTH Magazine, we congratulate you on your new assignment. For our readers, we would like you to share your short-term and long-term vision for Cybersecurity from national security perspective.
Short-term vision is to issue National Cyber Security Strategy 2020-25 early next year. Task force is working overtime on this by consulting all stakeholders. Long-term vision is to create an all-encompassing cyber vertical at the national level, to handle incident response, cybercrimes, legal issues and capacity building.

---

Q. We know that there are some fundamental technological shifts waiting to happen like 5G, and along-with it massive (Internet of Things) IoT deployments and especially use cases of connected healthcare. Can you share your views on the cybersecurity implications of the connected devices?
IoT security is a priority topic world over and this is because the limited security capabilities of these devices are also an afterthought. We need to work on a framework, to bring baselinesecurity through the manufacturers and developers of these devices. These devices are omnipresent in our lives, we find them in our home environment to industrial environments including hospitals. We have seen attacks in the past, where such devices are compromised to launch massive denial of service attacks to manipulate the workings of critical infrastructure.
Also, the issue of IoT security is multidimensional, from data security, privacy to device security. As we discuss this, there are multiple acts and bills pending in the Parliament on these topics. While the bills and acts will provide a framework, we need to also create awareness on both sides, supplier and consumer on the possible risks and mitigation strategies.

---

Q. What steps can be taken to improve the security in such connected devices?
When I say baseline security framework, it can be achieved in multiple ways.
As of today, most devices that we use including mobile phones, do not have a security testing certification. So, we can agree with the industry and look at important test cases and if they can do self-certification on such test cases.
For example: the device should not have weak default login credentials, it is sending data to a remote server and can be operated remotely. So, we can come up like a 5-star rating framework like that of the energy consumption but for the security of IoT devices basis what kind of tests they clear.
Industry bodies can agree on various levels of security and what it takes to achieve that level. Such a framework, when implemented, can provide confidence to consumers and users on the kind of device they are using vis-a-visthe use case they have at hand. So, they might use a higher security rating device in a use case where the stakes are high.
The other approach is to get the security testing done with notified agencies. Department of Telecom for example has announced mandatory security testing of network elements for telecom given telecom is a part of the critical infrastructure and security issuescannot be taken lightly.
Also, some of the emerging concepts in connected devices are missing in the various governing acts of the industrial connected devices. So, we also need to update our legal frameworks to cover software-based tempering of such devices and make the manufacturers and service providers accountable and proactive towards the security of the systems they provide.

---

Q. What are the threats that you foresee for the health sector?
There are three areas we see where health sector can be impacted:
First is the data breaches and ransomware attacks on healthcare data. As we know, among all the data, healthcare is the most sensitive and sought after by malicious actors. Outside of India, we have seen umpteen cases where ransomware has crippled the health system and it is only after paying the ransom the hospitals can start operation again. Timely backups and encryption of healthcare data during storage is a preventive measure that clinical establishments can take to mitigate the breach and ransomware attacks.
Second is the manipulation of connected devices. The topic of IoT and connected devices security, as discussed in the above sections, directly apply to the medical devices. Healthcare is a domain where attacks on such devices can be life threatening, especially when there are implantable devices. As we have the new Medical Device Regulation Act in India since 2018, we should also consider cyber security aspect in the devices which have a communication interface. For example, a pacemaker which has a communication interface can be manipulated remotely and the patient’s life is at risk.
Third is the manipulation of health system including the building management. We are probably not very far from the days when sophisticated attacks, as we see in the movies, on high security establishments by manipulating the building controls. The building management systems are very weak when it comes to security. Every hospital is a building and imagine what a false fire alarm would mean to patients in Intensive Care Unit. Or even loss of air conditioning or sudden spikes in electrical power.
There is a proposed act DISHA, Digital Information Security Healthcare Act, which might address some of the legal aspects of security in the healthcare setting. A lot needs to be done in this area, and we are on our way.

---

Q. Our readership consists of health experts all over the world. Any message for them?
We are at the cusp of a new age where we look to take advantage of Artificial Intelligence to Internet of Things. For such a knowledge economy to take off, health sector is at the center of it and health experts need to pay attention on what they are buying and how such systems are managed and operated. Through intervention of Ministry of Health & Family Welfare and responsible bodies such as National Accreditation Board of Hospitals & Healthcare Providers (NABH) of Quality Council of India, we plan to recommend a cyber audit and increased awareness of information security.
We would not want our hospitals and clinical establishments to be a prey for malicious actors. Rather we would want our experts to leverage technology to take the country to the next level in providing care to a wider population at a lower cost and of the highest quality.

The forum highlighted the need of forward-looking policies and a proactive government to play a role in the development of smart cities & villages on the bedrock of JAM Trinity which has 1bn bank accounts (Jan Dhan) + 1bn Aadhaar + 1bn mobile broadband users, already organized for the technological revolution in this space, thus, Capitalizing the connected World with the help of modern & niche technologies like 5G, GIS, IoT, m2m and others. Likewise, the governments effort to connect 2.5 lakh Gram Panchayats with BharatNet project was discussed to leverage the smart villages concept in India.

5G vision for India was also one of the major highlights of the 2-day forum, as 5G technology has the potential for ushering a major societal transformation in India by enabling a rapid expansion of the role of information technology across manufacturing, education, healthcare, agriculture, finance and social sectors. The panelists voiced that India must embrace this opportunity by deploying 5G networks early, efficiently, and pervasively as well as emerge as a significant innovator and technology supplier at the global level. Emphasis should be placed on 5G touching the lives of rural and weaker economic segments so as to make it a truly inclusive technology.

Ms. Aruna Sundararajan, Honorable Secretary, Department of Telecommunications, Ministry of Communications, Government of India via her message highlighted, “A city is a complex system, involving many different domains, infrastructure, organizations and activity which need to be integrated for that city to emerge as a smart city. Standardisation forms a critical part of the work that needs to be done. Being smart cities, a new holistic and cross functional standardization approach is needed, breaking the old ‘vertical silos’ approach, through better cooperation and synergies.”

“While the cities of India are fast progressing towards digitalization, it is encouraging to note that digital solutions are being readily accepted amongst the rural population of India as well. To support this technology adoption, the Department of Telecommunications (DOT), Ministry of Communications, Government of India, has initiated projects to provide broadband connectivity for connecting various digital services and solutions across our Urban and Rural Landscapes”, added Ms. Sundarajan.

Elated about the forum Mr. Kunal Kumar, Joint Secretary (Mission Director – Smart Cities), Ministry of Housing and Urban Affairs stated, “The forum can make noteworthy contributions to the Smart City Program at large. By sharing and collaborating on topics such as technology, multi-country experiences and innovative approaches, I am sure that we can bring together the best minds, and the surest hands to co-create cities of the future.”

The attraction of the forum was, NOT TO BE MISSED ‘Technology Show – by FIWARE Foundation member companies namely – NEC Technology India, APInf, MobilePedia and Smart Cities Lab Ltd where they demonstrated the OPEN SOURCE PLATFORM designed and developed by the FIWARE FOUNDATION– a market- ready open source software, combining components that enable the connection to IoT with Context Information Management and Big Data services in the Cloud.

The forum also hosted a dedicated session on 'India-EU Dialogue on ICT for Smart Cities' which was organized by the prestigious project, namely, ‘India-EU ICT Collaboration Standardization’ of the Delegation of European Union to India, highlighting the absolute need for ‘Leveraging Standards for Smart Cities’, which brought together key stakeholders and smart city officials.

Participants from across the globe got the opportunity to meet Stellapps Technologies – an end-to-end dairy technology solutions company – the first of its kind in India, Sensorise – an IOT Services and Solutions company, Phoenix Robotix – a network-IoT and Big data company, Sensable – an IoT company offering end-to- end smart solutions using artificial intelligence and machine learning, C-DOT – an autonomous Telecom R&D Centre of Department of Telecommunications (DOT), Government of India – showcasing Common Service Platform for m2m communications on oneM2M Specifications.

“We appreciate the participation from our key partners, showing trust in the forum and the vision it stands for. The key speakers, thought leaders and industry leaders have made this forum a thought provoking one with dialogs on disruption these modern technologies can bring to make cities & villages smarter, and at the same time, mentoring the startups in this segment. We are proud to have EU partners to share their insight on business possibilities from across the globe. Thus, making the 6 th edition of this forum a success” concluded Ms. Shilpi Batra, Director, India m2m + iot Forum 2019

About India m2m+ iot Forum

India m2m + iot Forum is a cohesive and shared platform, which validates united and collective vision of the global m2m and iot ecosystem. It is the most awaited annual congregation of m2m + iot stakeholders representing the entire ecosystem comprising of academics, analysts and researchers, enterprises and industry, governments – policymakers and regulators, industry associations and organizations, media organizations, standards organizations, the student’s community and above all the end users from businesses, citizen services and government.

For more information, contact:
Pratik Baurai
E-mail: pratik@saintsart.in
Mobile: 9871006258

Sonali Shyam
E-mail: sonali.shyam@saintsart.in
Mobile: 9891820253