Abhik Chaudhuri

Security GRC Team of TCS Global Technology Practice for the IoT and Smart Cities

Abhik Chaudhuri (PMP, ITIL Expert, Certified in Cobit Foundation, IBM accredited Senior IT Specialist, certified ISO 27001:2013 ISMS Lead Auditor, Member of IEEE SIG on IoT and Corporate Member of CSA’s International Standardization Council) isin the 14th year of IT Consulting profession and leading the Security GRC Team of TCS Global Technology Practice for the IoT and Smart Cities. Abhik has work exposure in Security GRC for Payment Card, Banking, Healthcare, Insurance andverticals in multiple roles. A recipient of “British Chevening Fellowship” in Cyber Policy, “On the Spot Award of Excellence” at TCS and 2-time “Best-of-IBM Award” winner, Abhik has executed IT Security GRC consulting projects in diversefor reputed clients in the US, Europe, Latin America and Australia. He has been a working group member for preparing Cloud Security Alliance’s Cloud Control Matrix V1.2, the Cloud Security Guidance V3.0, Best Practices for Mitigatingin Virtualized Environments, Summary Guidance on Identity and Access Management for the Internet of Things and has been an official peer reviewer for CSA’s SecaaS Implementation Guidance (Category 2: Data Loss Prevention).

Abhik’s consulting papers on IT Governance, Cloud Governance, Security Audit of Virtual IT Systems, Sarbanes-Oxley Section 404 Compliance in ERP Systems and Grid Computing have been published in reputed journals like EDPACS, ISACA Journal andNotes in Computer Science (Springer Verlag). His research works have been widely accepted by both academia and industry. Deloitte Australia has utilized Abhik’s “IT Governance Matrix” and consulting paper for IT Governance Audit at AustralianUniversity. IESEG Business School (University of Lille, France) and Mackenzie University (Brazil) have identified Abhik’s consulting paper on SOX-404 compliance as reference knowledge material in Master’s programme. Abhik has been inductedthe Editorial Board of EDPACS Journal (Taylor & Francis) in 2013.

Contributions: Co-author of ‘Security Guidance for Critical Areas of Focus in Cloud Computing V3’ and ‘Best Practices for Mitigating Risks in Virtualized Environments,’ as well as a contributor to additional reports. Member of several working groups; member andreviewer for the Security as a Service (SecaaS) Working Group.