TLDR: A new whitepaper by Protiviti and Microsoft highlights that Indian enterprises are significantly unprepared to manage insider risks in the rapidly evolving AI and Generative AI landscape. Sectors like BFSI, Healthcare & Life Sciences, and IT/ITeS are identified as particularly vulnerable due to their extensive handling of sensitive data and intellectual property. The report emphasizes the urgent need for robust Insider Risk Management (IRM) programs and comprehensive, enterprise-wide frameworks to mitigate these growing threats.
Indian enterprises are facing a critical challenge in safeguarding against internal threats as the adoption of Artificial Intelligence (AI) and Generative AI (GenAI) accelerates. A recent whitepaper, “Safeguarding From Within: Insider Risk Management in India,” jointly released by global consulting firm Protiviti and Microsoft, warns that most Indian organizations are ill-equipped to handle the escalating insider risks in this new technological era.
The study, based on an in-depth joint research by Protiviti and Microsoft Engineering teams, involved interviews with senior leaders across various Indian sectors, including banking and financial services (BFSI), healthcare, pharmaceuticals, FMCG, airlines, and technology. The findings reveal that Insider Risk Management (IRM) remains a significant concern, with many organizations lacking established enterprise-wide frameworks to effectively counter internal threats.
Key sectors identified as most exposed to these risks include BFSI, Healthcare & Life Sciences, and IT/ITeS. This vulnerability stems from their heavy reliance on sensitive customer data, valuable intellectual property, and extensive engagement with third-party vendors, all of which present potential avenues for insider threats.
“With AI adoption accelerating, Indian enterprises urgently need to strengthen their Insider Risk Management (IRM) programs,” stated the whitepaper. While AI and GenAI offer substantial benefits in terms of productivity and innovation, the report underscores the dual challenge of enabling these advanced technologies while simultaneously managing the amplified risks they introduce.
Microsoft executives emphasized the strategic importance of proactive IRM. Ashish Adhikari, Principal Product Manager at Microsoft, highlighted the role of technology in this endeavor: “By embedding Insider Risk Management across people, processes, and technology—leveraging platforms like Microsoft Purview to translate policy into enforceable action—Indian enterprises can reduce legal exposure, protect brand reputation, and turn compliance into a measurable competitive advantage.”
Anand Jethalia, Country Head – Cybersecurity at Microsoft, further added, “Proactive IRM offers a structured approach to safeguarding sensitive data, supporting compliance efforts, and building trust. By considering the strategies and recommendations outlined in this whitepaper, Indian enterprises can better manage insider risks while continuing to innovate in an AI-driven landscape.” He also pointed out the relevance of India’s DPDP Act, stating, “Customers, regulators, and investors don’t buy promises; they demand evidence of compliance and control. Under India’s DPDP Act, trust must be demonstrated through accountable practices.”
Also Read:
- India’s Generative AI Landscape: Key Players and Driving Forces
- Safeguarding Artificial Intelligence in Healthcare: Addressing Emerging Threats in Clinical Systems
The whitepaper provides detailed recommendations for Indian enterprises to develop and implement mature insider risk programs, urging them to integrate robust security measures into their AI strategies to ensure both innovation and resilience.
