Defenders of Digital Bharat: Navigating cybersecurity in India’s evolving artificial intelligence landscape

India stands at a pivotal juncture where rapid technological advancements are fundamentally reshaping businesses and critical infrastructure. The nation has aggressively pursued digital transformation over the past decade, creating a robust environment for innovation. Artificial intelligence is now emerging as the core engine driving the next phase of this economic evolution. Organisations across sectors are integrating advanced algorithms to optimise operations and accelerate growth.

However, this accelerated adoption introduces severe vulnerabilities. Cybercriminals are simultaneously weaponising these same technologies to launch sophisticated attacks against vital networks. The central challenge for modern enterprises is securing the systems powering their expansion while responding to an increasingly complex threat environment.

These pressing concerns took centre stage during a recent Defenders of Digital Bharat dialogue, a joint initiative by Fortinet and CNBC-TV18. Luca Simonelli, Senior Vice President for the Asia Pacific region at Fortinet, shared insights drawn from over three decades of experience spanning networking and cloud security. His perspective highlighted the urgent need for a proactive defense strategy in an era where digital resilience defines business success.

The Foundation of India’s Digital Economy

The scale of technological integration within the country has established a formidable base for future expansion. Simonelli emphasised the importance of this existing groundwork early in the discussion. “I think over the last couple of decades India has built a digital infrastructure at scale,” he noted, adding that this creates the foundational layers for digital transformation.

Thousands of global capability centres currently operate nationwide, forming the bedrock for a massive transition encompassing digital payments, cloud connectivity, public services, and autonomous commerce. This underlying architecture has already delivered substantial economic benefits, with the digital economy contributing significantly to the national gross domestic product.

Current projections indicate this contribution will only increase over the next few years. Artificial intelligence represents the crucial next layer poised to enhance productivity and attract fresh investments. Companies are eager to capitalise on these new capabilities to maintain a competitive edge in a crowded market. Yet, realising this potential requires a secure environment that protects both data and intellectual property.

Shifting From Bolt-On To Embedded Security

A significant hurdle in the current business landscape is the tendency to prioritise rapid innovation over comprehensive risk management. Many corporate boards view new technology primarily through the lens of immediate profitability and operational speed. This relentless drive often results in security measures being implemented only after systems are fully deployed.

Treating protection as a secondary concern leaves organisations exposed to entirely new categories of threats that target specialised applications. Businesses must figure out how to ensure internal agents operate strictly within designated boundaries while preventing sensitive data from leaking into public services. Integrating defense mechanisms directly into the core architecture from day one is becoming an absolute necessity rather than an optional upgrade.

Organisations failing to adopt this mindset risk compromising their network infrastructure. Addressing this dangerous oversight, Simonelli offered a stark warning about current implementation practices. He explained, “AI should be embedded, but not always that is happening, and that is a problem – sometimes considered as an AI security, as an afterthought.”

The Rise of Agentic Threat Actors

The threat landscape is evolving just as quickly as the defensive tools designed to protect enterprise networks. Recent data from national cybersecurity agencies indicates a massive surge in reported incidents, with sophisticated malware and generated phishing campaigns leading the charge. A particularly alarming development is the emergence of agentic threat actors. The barrier to entry for launching devastating attacks has dropped significantly. Malicious individuals can now use highly prescriptive prompts to penetrate networks and exfiltrate valuable information with minimal technical expertise.

This democratisation of offensive capabilities means companies face a higher volume of targeted strikes from a wider variety of sources. Traditional security perimeters are no longer sufficient to hold back these automated incursions. Organisations are clearly not entirely prepared for this escalating conflict. Simonelli detailed how dramatically the environment has shifted for attackers. “With an agent, you can prompt in a very prescriptive way, penetrate that network, locate the financial database, and exfiltrate,” he observed.

Conquering Complexity Through Convergence

Enterprise IT environments have grown incredibly tangled as companies adopt numerous point solutions to address specific vulnerabilities. Over time, this piecemeal approach leads to a massive accumulation of disparate tools that are notoriously difficult to monitor and orchestrate effectively. “I like to quote Bruce Schneier, who said complexity is the worst enemy of security,” Simonelli remarked during the interview, emphasising that the historical habit of buying a new point solution for every new problem has created an unmanageable stack of products.

When security teams are forced to manage dozens of independent software products, the resulting complexity becomes a major liability in itself. The current market is heavily shifting toward unified platforms that consolidate foundational technologies into a single operational fabric. A converged system allows multiple engines to share the exact same context and maintain a comprehensive view of all network traffic. This streamlining greatly simplifies life for chief information security officers while boosting the overall efficacy of their incident response protocols.

Bridging the IT and OT Divide in Manufacturing

Industrial sectors such as manufacturing and energy face unique challenges as they push toward greater automation. The convergence of information technology and operational technology creates a massive expansion of potential vulnerabilities across smart factories.

Simonelli highlighted the necessity of standardising defense frameworks across these converged spaces. He stated, “The more you have a standardised framework, the more you have a comprehensive framework with a few selected vendors, and not with 35 vendors, the more the security posture is higher.” Edge computing introduces countless new touchpoints that must be rigorously defended against external manipulation. Protecting the physical production mechanisms is just as vital as securing the data centre, meaning power and cooling systems require the exact same vigilance as software networks.

Furthermore, finding the right balance between automated processes and human oversight remains a heavily debated topic. While algorithms can easily handle repetitive monitoring tasks, human judgment is ultimately required to vet critical decisions. A unified approach is necessary to secure every aspect of these hybrid environments.

Addressing Hidden Risks and Investing in the Future

An underestimated danger in the modern workplace is the unchecked proliferation of generative tools among employees. The lack of visibility into how internal staff utilise these applications creates severe operational blind spots. Employees manipulating large language models could inadvertently expose confidential client records or intentionally extract classified executive compensation details without triggering traditional alarms.

Addressing these hidden risks requires robust compliance measures that reinforce overall business resilience rather than simply reacting to breaches after they occur. As regulations tighten, strong security practices are increasingly viewed as business enablers, allowing companies to pursue aggressive growth with absolute confidence.

The South Asian market exhibits immense potential, prompting global cybersecurity leaders to heavily invest in local engineering talent and consultancy resources. Simonelli expressed strong optimism regarding regional expansion and resource allocation. “India is a very strategic market for us. Is actually the fastest-growing region across Asia Pacific. And it is the market that I see the highest potential for growth,” he concluded.