ESG REPORT 2020-21 
45
External Document © 2021 Infosys Limited
Infosys – a ‘Live Enterprise‘
Environment
Social
Governance
Corporate governance
Data privacy
Information management
Information management
Approach to cybersecurity
Cybersecurity has been an important issue for corporations 
of all sizes due to the ever-growing number of cybersecurity 
breaches, resulting in financial as well as data loss, and 
reputational damage. Cyber crimes are becoming more and 
more sophisticated, professional and extremely lucrative. We 
recognize that multi-fold increase in attacks globally, increased 
cost of compliance. Overarching regulatory mandates, 
emerging technologies and more have made cybersecurity 
a must-have for organizations in all industries, sizes, and 
geographies; and in this regard being proactive and well ahead 
of the curve is key. Our `secure by design’ integrated approach 
is key to our cybersecurity program and addresses growing 
expectations from stakeholders.
Cybersecurity management and reporting
Cybersecurity requires participation from all spheres of the 
organization— senior management, information security 
practitioners, IT professionals and users. We designed and 
deployed engagement and enablement strategies for our 
stakeholders to equip them appropriately.
As a final level of defence, we undergo many internal audits 
as well as external attestations and audits in a year at an 
organization level (ex: SSAE-18, ISO 27001) as well as client 
account audits to assess our security posture and compliance 
against our obligations on an ongoing basis. There were no 
material cybersecurity incidents reported in fiscal 2021.
Innovations and service offerings
•	 We have a portfolio of cybersecurity service offerings and 
solutions to strengthen our capability. In the last financial year, 
we made huge progress in the Cyber Next modules like Cyber 
Intel, Cyber Scan, Cyber Hunt, Cyber Central and have also 
onboarded customers to these solutions and platforms.
•	 We have strong strategic partnerships with over 25+ global 
partners to help enhance and strengthen our cybersecurity 
solutions.
Industry recognitions
We continue to remain a global leader in emerging 
technology and an early adopter of best practices and 
sustainable measures.
Read more +
Governance
Uphold the digital trust of our stakeholders  
We are a global leader in technology services and consulting. As the custodian of customer’s and other 
stakeholders’ information and information assets, it is our prime responsibility to ensure an effective 
cybersecurity program. Our `defense in depth’ philosophy deploys several layers of controls to ensure the safety 
of our data, as well as our clients’ data.
Ambition
•	 Being recognized as industry leader in our 
information security practices
•	 In the endeavor to serve our customers with assured digital 
trust, we built several POVs and collateral with the help of our 
highly professional SMEs.
•	 We have a global network of seven Cyber Defense Centers 
spread across EMEA, US and APAC, and a strong set of 
innovation hubs and integrated platforms