Cyber KARE app helps firms assess cyber security: Atul Gupta, KPMG

Keeping in view the rise in cyber security risk, KPMG recently launched a Cyber KARE app that helps organizations in self-assessment of their cyber security risk exposure. Atul Gupta, Partner - IT Advisory at KPMG in India, in a conversation with Business Today, explains the idea behind the app and how does it work.

Q: What exactly is this Cyber Kare app?

Gupta: The Cyber Kare app has been developed to help senior management perform self-assessment of cyber security risk exposure of their organization. We have developed it in the form of a mobile app so that it's easily accessible and can be used at any time at any place. Cyber is a business risk and this app is structured to bring out the various components/domains on which an organization gets exposed upon. The app has been structured in an offline mode, which implies that the data filled by user for assessment is completely stored on their devices. KPMG does not collect any data related to the organisation's cyber security assessment or user's personal information.

It helps management monitor cyber risk at a strategic level and benchmark organisation's progress on journey to cyber security. It also provides a view of organisation Cyber Risk Exposure and Cyber Security Preparedness, which combines to provide an overall cyber security index and enables the organization by providing recommendations in form of key potential actions to minimize cyber security exposure.

Q: What is the idea behind launching this app and how does it work?

Gupta: Cyber Security has emerged as a key risk area for organizations and is being looked as business risk. There is an increased need of the senior management being aware of the risk exposure and regularly monitor the preparedness against evolving cyber threats.  This app is launched in alignment with global KPMG.

The tool kit focuses on Cyber risk exposure  based on macro factors (such as industry, nature of business, business channels, etc.) and cyber security preparedness to assesses the current readiness of the organisation across cyber security domains such as cyber governance, cyber risk management, and cyber response and investigation.

Q: How will it help senior management in assessing threat?

Gupta: Cyber KARE has been designed for senior management to get a perspective of organisation's exposure to the cyber risk. It covers key domains across cyber security that provides management a comprehensive view on the threat and exposure that their organization is subjected upon. Further, the app has been developed such that the responses can be provided by business leaders and not necessarily have specific input from IT and technology security.

Q: Does it only help in assessing threat or in implementing solutions too?

Gupta: The app also provides recommendations in the form of key actions to reduce the cyber security exposure and define resilience against potential threats. The recommendations are provided across all the domains assessed during the cyber preparedness assessment. They are essentially guidelines towards defining key steps that the organisation should take to strengthen its cyber security framework. These recommendations can serve as guiding principles to develop/realign the cyber security roadmap to achieve better preparedness and reduce exposure to cyber risk.

Q: Is this app paid or for free?

Gupta: It is a free app available on iOS and Android platform.