EY India 2025digital Transformation India Journey To Industry
EY India 2025digital Transformation India Journey To Industry
India’s journey
to Industry 4.0
excellence
March 2025
Contents
01
Introduction 10
02
Customer-centric growth in the digital 12
era: A paradigm shift
03
Digital manufacturing: Powering industrial 18
innovation with smart technologies
04
Cybersecurity: Building resilience
and ensuring privacy 22
05
Generative AI: Data-driven insights 28
for the future
06
Digital technology infusion in the manufacturing 38
sector: A focus on MSMEs and start-ups
07
The path forward 42
Executive
summary
India’s journey toward Industry 4.0 excellence is driven by digital transformation, which
is reshaping the business landscape and offering unprecedented growth opportunities for
manufacturing firms and MSMEs. Embracing digital technologies allows these enterprises
to optimize operations, deliver enhanced customer experiences, and stay competitive in an
increasingly globalized market.
Customer-centric growth has become a pivotal focus, with businesses adopting data-driven
strategies to personalize offerings, streamline operations, and create new business models.
In the digital age, customers expect convenience, personalization, and seamless interactions,
prompting manufacturers and MSMEs to embrace digital tools and analytics to remain relevant
and competitive.
Digital manufacturing is powering industrial innovation by integrating smart technologies,
automation, and predictive maintenance, leading to cost optimization and yield improvements.
Sectors such as automotive, electronics, and pharmaceuticals are leading the way in leveraging
these technologies for operational excellence.
However, adopting digital tools brings challenges, particularly in cybersecurity, where robust
defenses are needed to protect operational and informational systems. Advanced threat
detection, compliance with regulatory standards, and the implementation of Zero Trust
architectures are crucial to building resilience and safeguarding data.
The rise of generative AI is transforming industries by enabling new ways to harness data, drive
innovation, and improve decision-making processes. The growth of AI-driven insights is expected
to fuel the next wave of digital transformation, particularly in knowledge work and personalized
customer interactions.
For MSMEs and start-ups, digital transformation is imperative, with IoT, cloud computing,
blockchain, and 3D printing playing a significant role in shaping the future of manufacturing.
Government initiatives, skill development programs, and partnerships with tech providers are
key enablers of this transformation, though challenges such as limited budgets and resistance to
change remain.
Key takeaways:
1 2 3 4 5
Adopt a customer- Invest in digital Strengthen Utilize AI and Collaborate with
first mindset, manufacturing cybersecurity analytics to governments
leveraging data technologies to measures to unlock actionable and start-ups to
to enhance improve efficiency protect critical insights and drive foster growth and
personalization and quality assets innovation digitalization
Foreword EY
In an era defined by rapid technological advancements and shifting global dynamics, digital
transformation has become more than just an aspiration—it is an imperative for businesses seeking
sustained growth and competitiveness. India’s journey toward Industry 4.0 excellence is a testament to
the power of innovation, strategic collaboration, and a forward-thinking approach to technology adoption.
As a trusted advisor to enterprises navigating this transformation, we have witnessed firsthand the
impact of digital technologies in revolutionizing industries, enhancing operational efficiency, and
unlocking new opportunities for value creation. From automation and AI-driven insights to cybersecurity
and digital manufacturing, businesses that embrace these shifts are not only future-proofing their
operations but also positioning themselves as industry leaders.
For MSMEs and large enterprises alike, the road to digital maturity presents both opportunities and
challenges. Addressing key enablers such as customer-centric growth, data-driven decision-making,
and workforce upskilling will be critical to ensuring a seamless transition to Industry 4.0. Furthermore,
partnerships between businesses, technology providers, and policymakers will play a pivotal role in
accelerating this transformation at scale.
This publication serves as a framework for organizations looking to harness the full potential of digital
technologies to drive meaningful innovation and long-term impact. Through a structured approach, it
provides insights into best practices, strategic imperatives, and real-world case studies that illustrate how
businesses can successfully navigate their digital transformation journey.
As we embark on this transformative path together, I encourage industry leaders to take bold, decisive
steps in integrating digital capabilities into their core strategies. The future belongs to those who not only
embrace change but lead it. By fostering a culture of innovation, investing in the right digital tools, and
strengthening collaborative ecosystems, businesses can pave the way for a smarter, more connected, and
sustainable industrial future.
Anirban Mukherjee
Partner, Risk Consulting
Foreword FTCCI
As the world accelerates into the era of Industry 4.0, we stand at the threshold of a profound
transformation. Digital technologies are not just enhancing business processes—they are
revolutionizing the very core of industries across the globe. The Federation of Telangana Chambers
of Commerce and Industry (FTCCI) is proud to present this Thought Leadership White Paper on
Digital Transformation and Industry 4.0, in partnership with EY. The White Paper is a comprehensive
exploration of how these emerging technologies are shaping the future of business in Telangana and
beyond.
In Telangana, we are witnessing an exciting convergence of digital innovation and industrial growth.
From smart manufacturing to data-driven decision-making, the adoption of Industry 4.0 technologies,
such as artificial intelligence, Internet of Things (IoT), automation, and big data & AI is enabling
businesses to improve efficiency, enhance product quality, and create new value propositions.
However, this transformation also brings forth challenges—ranging from the need for skilled workforce
development to the integration of complex systems across traditional industries.
This White Paper offers a strategic framework for businesses to navigate this digital revolution.
Through insightful case studies, industry perspectives, and expert analysis, it provides actionable
recommendations for businesses of all sizes to adopt, integrate, and scale digital solutions effectively.
At FTCCI, we believe that the future of Telangana’s industrial landscape depends on our collective
ability to embrace technological change and foster an ecosystem that encourages innovation,
collaboration, and investment. The ICT Committee at FTCCI has been working relentlessly for
collaboration with all stake holders towards this goal. This paper aims to equip business leaders,
entrepreneurs, and policymakers with the knowledge needed to accelerate digital transformation,
unlock new opportunities, and position Telangana as a global hub for Industry 4.0.
K Mohan Raidu
Managing Director, Informatics India
Chair, ICT Committee, FTCCI
Bala Peddigari
Chief Innovation Officer
Technology, Software and Services
Business Group, TCS
Co-Chair, ICT Committee, FTCCI
FTCCI is uniquely positioned to collaborate
with policymakers, start-ups and ecosystem
partners to unlock the full potential of
digital transformation. The experience of the
traditional industry, clubbed with the agility
of the start-ups, can be a game changer.
Pankaj Diwan
Founder, Idealabs FutureTech Ventures
Co-Chair, ICT Committee, FTCCI
CV Anirudh Rao
Director, CV Infracon
Co-Chair, ICT Committee, FTCCI
1 Introduction
Overview of accelerating growth and innovation
In today’s fast-paced business environment, innovation Despite these benefits, many businesses remain within their
serves as the driving force behind growth and prosperity established areas of expertise, excelling at core functions but
for enterprises. Recognizing this, a significant 84% of CEOs showing reluctance to embrace change. This hesitancy often
acknowledge the threat of digital disruption1, yet fewer than stems from a lack of expertise and a clear vision, which stand
half possess a formal strategy to navigate the digital future. as critical barriers to achieving the next level of innovation.
Innovation is not left to chance; it is a deliberate process
A prime example of successful innovation is the collaboration
aimed at creating new growth avenues and ensuring
between Publicis Sapient and Microsoft, which led to the
sustained success.
creation of, AGTB, the world’s first fully digital trade finance
A successful innovation strategy involves a balanced bank, leveraging Microsoft Azure technology. Another case
portfolio that combines incremental improvements with is the development of FacePass for Miral’s Yas Island, which
radical, disruptive changes. Companies that master introduced contactless customer experiences and set a new
innovation often outperform their peers, delivering superior standard for disruptive innovation in the hospitality and
returns to shareholders and offering tangible benefits entertainment industry.2
to customers, partners and employees. The innovation
Innovation is not optional; it is a necessity for growth. As
spectrum includes sustaining innovation, which enhances
the pace of change accelerates, businesses must embrace
existing products and services; evolutionary innovation,
innovation to remain competitive. By fostering a culture of
which enters adjacent markets to foster new growth; and
innovation, investing in technology, and engaging in strategic
disruptive innovation, which creates entirely new markets
collaborations, companies can secure their position in the
and business models, altering the competitive landscape.
market and drive future success.
35% 22%
Pre-Covid Post-Covid
1
Accelerating-Growth-Through-Innovation-2.pdf
2
Accelerating-Growth-Through-Innovation-2.pdf
3
7500.pdf
4
IBEF – Tech based solutions for Indian MSME Landscape - https://www.ibef.org/blogs/tech-based-solutions-to-empower-the-indian-msme-landscape
5
MSMEs and Digital Technology: New pillars of the Indian Economy - https://www.crn.in/columns/msmes-and-digital-technology-new-pillars-of-the-indian-economy/
6
Digital Safety Net Helps Small Businesses Survive During COVID-19 - https://connectedcouncil.org/digital-safety-net-helps-small-businesses-survive-during-covid-19/
13
Customer-centric growth in the
2 digital era: A paradigm shift
Key trends in driving digital growth Key strategies for success
To take full advantage of this level-playing field, businesses
1. Removing barriers for a fairer digital should focus on the following strategies:
marketing space a. Microtargeting and niche audiences
Instead of trying to appeal to broad demographics,
Digital marketing has traditionally been dominated by large businesses should identify and target niche audiences
enterprises with substantial budgets and resources. However, that align closely with their offerings. By leveraging
recent advancements in technology and the proliferation advanced targeting capabilities provided by digital
of accessible digital tools have democratized the marketing platforms, even small businesses can achieve high
landscape, enabling smaller businesses to compete on a more engagement rates and conversion metrics.
level-playing field. This shift is driven by several factors:
b. Content-driven marketing
■ Sachet-sized advertising platforms: Social media Content remains king in the digital age. High-quality,
platforms such as Facebook, YouTube, Instagram, relevant content—whether it is blog posts, videos,
and LinkedIn offer sachet-sized and pay as you use or social media updates—can help establish thought
advertising solutions that allow small businesses to reach leadership, build trust and foster long-term relationships
targeted audiences without breaking the bank. This with customers. Businesses should invest in creating
enables firms to make small investments in marketing valuable content tailored to their audience’s needs
and visibility through focused targeting, which was and preferences.
difficult in the era of billboards, newspaper ads
and signages. With the advent of Generative AI (GenAI), content
creation has become more accessible and efficient than
■ Automation tools: Marketing automation platforms such
ever before. 40% of Generative AI (GenAI) solutions will
as HubSpot, Mailchimp, and Marketo provide scalable
be multimodal (text, image, audio and video) by 2027,
solutions for managing campaigns, nurturing leads,
up from 1% in 2023, according to Gartner, Inc.7
and analyzing performance. These tools are easy to
implement, intuitive to adopt and have less upfront Tools such as GPT-powered platforms can generate
investments, which enables manufacturing and MSMEs engaging articles, social media captions, email
to adopt, experiment and scale basis their appetite campaigns, and even video scripts within minutes,
for investment. saving businesses significant time and resources. For
■ Data accessibility: The availability of data analytics tools example, a small e-commerce brand could use GenAI
(e.g., Google Analytics, SEMrush) empowers businesses to create personalized product descriptions at scale
of all sizes to make informed decisions based on real- or draft SEO-optimized blog posts that resonate with
time insights. its target audience. By automating repetitive tasks,
marketers can focus on strategy and creativity, ensuring
that the final output aligns perfectly with their goals
while maintaining authenticity.
7
Gartner Predicts 40% of Generative AI Solutions Will Be Multimodal By 2027
8
IBEF – Tech based solutions for Indian MSME Landscape - https://www.ibef.org/blogs/tech-based-solutions-to-empower-the-indian-msme-landscape
9
https://softlinkglobal.com/how-saas-can-help-the-indian-logistics-msme-sector/#:~:text=Correspondingly%2C%20India’s%20logistics%20sector%20is,to%20start%20
and%20scale%20up
■ Mobile-first mindset: With mobile devices accounting ■ Grocery retail transformation: Reliance JioMart’s
for most of the online traffic, businesses must ensure adoption of UPI has streamlined payments for grocery
their websites and apps are optimized for mobile deliveries, helping first-time digital shoppers
users. Especially for MSMEs, the rise of Indian start- onboard seamlessly.
ups has helped drive adoption across CRM, customer ■ Support for small businesses: Kirana stores widely
services, credit assessment, accounting products, social adopted UPI QR codes during the pandemic, enabling
commerce platforms and Cloud service providers, which contactless payments and enhancing
are providing India and MSME specific offerings.8 customer convenience.
■ Omnichannel integration: Customers expect consistent By eliminating payment friction, UPI has boosted conversion
experiences across multiple channels, including physical rates and customer satisfaction, making it a model for
stores, e-commerce platforms, social media and seamless digital transactions across industries.
customer service portals.
■ Instant gratification: Fast shipping, easy returns and b. Personalized recommendations
instant access to information are now considered AI-powered recommendation engines have redefined
standard practices rather than differentiators. With the customer engagement by offering tailored products and
rise of Indian logistics as a service player, these services content suggestions. Companies like Netflix and Amazon
can be enabled for firms across sectors and specifically use advanced algorithms to analyze user behavior,
for the MSME sector.9 driving satisfaction and retention.
15
Beyond these giants, the rise of open-source solutions has ■ Fairer revenue distribution with lower commission fees
made personalization accessible to businesses of all sizes.
■ Greater control over branding and customer relationships
Platforms like Odoo, Magento, and Drupal provide flexible,
cost-effective tools for implementing ■ Enhanced supply chain transparency to improve
recommendation systems: operational efficiency
■ Retail customization: Magento’s open-source Across sectors, ONDC is driving innovation, enhancing supply
eCommerce platform allows retailers to integrate AI- chain transparency, and enabling a more equitable digital
driven product recommendations based on browsing ecosystem that prioritizes collaboration over monopolization.
behavior and purchase history, creating a more relevant
shopping experience.
b. Pay-as-a-service model
■ Content personalization: Drupal’s modular framework
Today, most digital platforms offer Pay-as-a-service and
enables content-heavy websites to deliver personalized freemium models, allowing businesses to experiment with
content streams to users. technology before committing to full-scale adoption. This
These open-source ecosystems reduce costs, encourage model is widely used across industries, including:
innovation, and empower even small businesses to compete
■ Streaming services and hyperscalers that provide
with industry leaders in delivering hyper-personalized
consumption-based pricing
experiences.
■ E-commerce and SaaS platforms offering tiered services
c. Investment in technology
Adopting emerging can redefine customer engagement ■ Backend functional platforms that charge based
and set brands apart. Innovations such as augmented on usage
reality (AR), virtual try-ons, and AI-powered chatbots
For MSMEs, freemium models provide a means of
are transforming how customers interact with products
experimenting with the technology. Freemium models offer
and services:
basic versions of products or services for free while charging
■ AR and virtual try-ons: Brands like Lenskart and Nykaa for premium features. Many of these models fit to the
leverage AR to allow customers to try on glasses or requirement of MSMEs.
makeup virtually, reducing purchase hesitation.
■ AI chatbots: Businesses integrate conversational AI to c. Direct-to-Consumer (DTC)
provide instant support, enhancing service efficiency By bypassing intermediaries and selling directly to
and customer satisfaction. consumers, brands can maintain greater control over
pricing, branding and customer relationships. DTC
pioneers like Warby Parker and Casper have disrupted
3. New business models for customers industries once dominated by established players. With
the raise of e-commerce and quick commerce models
The rise of digital technologies has led to innovative in India, DTC has now become one of the key consumer
business models that cater directly to evolving consumer expectations. Increasingly, manufacturing companies
demands. Companies are moving beyond traditional are focusing on DTC to drive profitable growth by
commerce paradigms by adopting approaches that offer disintermediating their channels and monetizing the
flexibility, accessibility, and enhanced customer experiences. strength of their brands.
Emerging models shaping the digital economy The DTC model has significantly empowered MSMEs by
enabling direct customer interactions, which provide
a. Raise of multi-entity digital platforms unfiltered feedback to refine products and services. For
Multi-entity digital platforms, such as the ONDC, are example, a local artisanal pickle brand can use customer
transforming how businesses operate by fostering reviews to improve recipes or packaging, ensuring a better
inclusivity and reducing dependency on centralized market fit. Additionally, the rise of Logistics as a Service
e-commerce giants. ONDC’s open architecture enables (LaaS) players like Delhivery and Shadowfax has made it
seamless interoperability between buyers, sellers and easier for MSMEs to deliver products directly to customers’
service providers, democratizing access to digital doorsteps, even in remote areas. This eliminates the need
commerce for businesses of all sizes. for costly warehousing or logistics setups, allowing small
For MSMEs, this model eliminates entry barriers, allowing businesses to focus on quality and innovation. By combining
them to compete on a level-playing field with established direct feedback with efficient delivery systems, MSMEs can
brands. By providing access to a wider customer base enhance customer satisfaction, build trust and strengthen
without the need for significant investments in proprietary their brand reputation, driving sustainable growth while
platforms, ONDC empowers small businesses to scale maintaining control over pricing and customer relationships.
efficiently. Additionally, the decentralized nature of such
platforms ensures:
17
Cross reads from early adopters Flipkart:
across sectors Flipkart, the e-commerce giant of India, understood the need
for a platform that catered to a price-sensitive and digitally
evolving consumer base. Their customer-centric
E-commerce and retail approach includes:
Urban Company:
Urban Company offers a variety of on-demand services like
beauty treatments, home repairs and fitness classes. Their
customer-centric approach includes:
19
Digital manufacturing:
Powering industrial innovation
3 with smart technologies
Key trends in cost optimization
Primary focus of Gen AI Initiatives
1 Automation as a cost enabler
Customer Experience/Retention 38%
operational efficiency.
Business Continuity 7%
a. Condition monitoring
10
Lights-Out Production Will Be a Reality by 2025
11
Two Unilever sites named most digitally advanced factories | Unilever
21
Predictive maintenance for downtime Enhancing yield with
3 4
reduction Digital Twins
Unplanned downtime is a major contributor to operational Digital twins are virtual replicas of physical assets, processes
costs in manufacturing and other asset-intensive industries. or systems. They simulate real-world conditions to test
Predictive maintenance uses data analytics and machine scenarios, optimize performance, and identify opportunities
learning to anticipate equipment failures before they occur, for improvement. In manufacturing, Digital Twins are
enabling timely interventions that minimize disruptions and particularly valuable for enhancing yield—the percentage
repair expenses. of usable output relative to input materials. According to
Gartner, 13% of organizations implementing IoT projects
Key applications of predictive maintenance already use Digital Twins, while 62% are either in the process
a. Rotating equipmen of establishing Digital Twin use or plan to do so.12
12
Gartner: digital twins beginning to enter the mainstream
13
(6) Gartner predicts IoT market to grow to $991 billion by 2028 | LinkedIn
14
First collaborative robots in India - Bajaj auto
15
Digital Twin Technology in System Design - GeeksforGeeks
16
Honeywell OT Cybersecurity Solutions: Helps Protect What Matters
■ Manufacturing is at the forefront of the fourth industrial Digital Twins simulate entire production lines or individual
revolution (Industry 4.0), characterized by the machines, enabling manufacturers to test changes virtually
integration of IoT, AI, robotics and big data analytics. before implementing them in the physical environment. For
These technologies are driving operational efficiencies, example, Tesla uses Digital Twins to model its production
reducing downtime, and enabling mass customization. lines and vehicle designs. This allows the company to test
new configurations virtually, reducing development time
and improving product quality.15
Key trends supporting digitalization in
manufacturing G. Cybersecurity for manufacturing systems
A. Internet of Things (IoT) and Connected Devices As manufacturing becomes more connected, robust
cybersecurity measures are essential to protect sensitive
IoT-enabled sensors embedded in machinery collect real- data and prevent disruptions. For example, Honeywell
time data on performance metrics such as temperature, developed advanced cybersecurity solutions to safeguard
vibration and energy consumption. Gartner predicts the industrial control systems, ensuring uninterrupted
IoT market will nearly double, soaring from US$546 billion operations for its clients in critical sectors like oil and gas.16
in 2022 to US$991 billion by 202813. This data is analyzed
to optimize production processes and predict maintenance
needs. For example, Siemens uses IoT to monitor equipment H. Sustainability and green manufacturing
health in its factories, achieving up to 30% reductions in
Digitization supports sustainability by optimizing resource
unplanned downtime.
usage, reducing waste, and promoting eco-friendly
practices. For instance, Adidas partnered with Carbon Inc.
B. Industrial data lake to use 3D printing technology for its Futurecraft sneakers,
reducing material waste and enabling localized production
As manufacturing becomes increasingly data-driven, to cut carbon emissions.17
the ability to collect, store and analyze vast amounts
of information is critical. For instance, an automotive
manufacturer uses an industrial data lake to aggregate data I. Augmented reality (AR) and virtual reality (VR)
from assembly lines, robotic systems and supplier networks. AR and VR are transforming training, remote assistance,
By applying AI algorithms to this data, the company can and design visualization in manufacturing. For example,
identify inefficiencies in production workflows, and Volkswagen uses AR glasses to guide technicians during
reduce downtime. complex repairs. The glasses overlay step-by-step
instructions onto machinery, reducing errors and speeding
C. Artificial Intelligence (AI) and Machine up maintenance tasks.18
Learning (ML)
AI and ML are used for predictive maintenance, quality
control and process optimization by analyzing vast datasets.
For instance, General Electric (GE) uses AI-powered
predictive maintenance to monitor jet engine performance.
This has reduced unplanned downtime and extended the
lifespan of critical components.
D. Robotics
Robotics, particularly collaborative robots (cobots) and
autonomous systems, are becoming integral to modern
manufacturing. These technologies handle repetitive,
dangerous, or highly precise tasks, freeing human workers
for more strategic roles. For example, Universal Robots have
implemented collaborative robots at Bajaj Auto Ltd and
have enabled Bajaj to improve its production capabilities
and evolve its multi-model offerings.14
23
Cybersecurity: Building
4 resilience and ensuring privacy
In today’s digital environment, cyber disasters are not Market drivers for cyber resilience
just a possibility; they are inevitable. As the global
landscape shifts and new technologies emerge and
evolve, organizations are becoming more deeply CXOs today are re-writing the organizational technology
strategy to embed cyber resilience, with an aim to
integrated with technologies, like Machine Learning,
building resilience-by-design, rather than an after-
Artificial Intelligence, Blockchain, quantum computing thought. Digital transformation and global changes in
and the Internet of things (IoT), among others. In this the workplace have introduced various digital layers
light, the impact of a major cyber-attack on businesses within organizations. Over 20 billion devices of various
is compounded many times over. However, what types from IoT devices, connected vehicles, drones
characterizes an organization’s strength is its ability to to fitness trackers are connected to the internet,
plan, prepare and test its capability to continue providing with millions more being connected daily. The attack
services to customers, recover from breaches and emerge surface is increasing at an alarming rate and with it, the
spiraling number of security flaws and vulnerabilities.
stronger as a result.
The estimated annual economic cost of cyber-crime is
Cyber warfare is an ever-present threat with far-reaching reaching over US$1 trillion, with an average of 150+
consequences for businesses, governments and society. days being the time to spot a sophisticated cyber-attack.
Attacks take various forms, from ransomware crippling This leads to increased cyber threats at various levels.
critical infrastructure to sophisticated operations Below are some examples:
designed to destabilize entire organizations. The loss of At the employee level: The increasing number of
sensitive data is often just the beginning; threat actors employees working from home leads to growing
frequently aim to disrupt operations, erode stakeholder cybersecurity concerns as the vastness of the attack
confidence and undermine societal trust. surface increases.
■ At data or organizational level: This includes protecting
data, which is now being accessed from a multitude
of different locations or stored across multiple data
Cybersecurity and cyber resilience centers, various public clouds or SaaS applications
spread across the world.
Cybersecurity and cyber resilience are inherently ■ At the supply chain level: Supply chain cyberattacks,
interconnected, with cybersecurity focusing on including those targeting software providers, pose
safeguarding systems and data and detecting threats, significant risks to organizations. Attackers exploit
while cyber resilience ensures an organization’s ability to vulnerabilities in third-party vendors or software
recover and adapt in the aftermath of an attack. While updates to breach systems and disrupt operations.
cybersecurity aims to prevent breaches, cyber resilience A single compromised link can lead to widespread
ensures business continuity by enabling rapid recovery consequences, emphasizing the need for strong
and minimizing operational disruption. Together, these cybersecurity across multiple partners.
strategies form a comprehensive approach that not
■ Regulatory changes: Compliance requirements for
only defends against cyber threats but also ensures
data are increasing globally with regulations like GDPR,
organizations can swiftly restore operations and maintain
DORA and India’s DPDP Act, 2023. Penalties for
long-term security and continuity.
non-compliance can be substantial, with GDPR fines
reaching millions of dollars.
“
than recovery; it is ensuring
your operations continue
seamlessly, even amidst
a cyberattack
Pradeep Eledath
Partner,
Technology Consulting,
Broadly, cyber resilience can be split into four major
EY India
components — anticipating, withstanding, responding /
recovering and learning/adapting from cyber threats.
■ Anticipate threats: Adopt a proactive approach
by thinking like an attacker rather than a defender.
Shift from a reactive stance to a strategic, forward-
looking posture by identifying vulnerabilities,
predicting attack vectors, and implementing
preemptive measures to stay ahead of evolving
cyber threats.
■ Withstanding attacks: Develop ability to endure and
sustain operations amid cyber threats. This requires
a multi-layered defense strategy, integrating robust
security frameworks, redundancy and restoration
measures, and well-orchestrated incident response
protocols to mitigate operational disruptions and
safeguard critical assets.
25
Key takeaways for cyber resilience
Cyber resilience is a critical component for organizations to effectively manage and recover from cyberattacks while
maintaining business continuity. A well-defined and proactive incident response plan enables organizations to quickly
detect, contain and mitigate the impact of cyber threats, preventing further damage and disruption. Coupled with this, a
comprehensive and effective cyber recovery strategy, underpinned by secure, up-to-date cyber backups and automated
restoration processes, ensures rapid resumption of essential services with minimal downtime.
Post-incident analysis plays a vital role in strengthening resilience, providing valuable insights that refine response
protocols and recovery procedures for future incidents. Furthermore, organizations must invest in building a resilient
workforce, equipped with the knowledge and skills to handle cyber crises effectively through ongoing training,
simulations and awareness programs. By integrating these response and recovery strategies into their broader
cybersecurity framework, organizations not only protect themselves against evolving cyber threats but also enhance
their ability to adapt and thrive in an increasingly complex digital environment, ensuring long-term security and
operational resilience.
■ Performance
of any law or in the interest of sovereignty ■ Classification
of data fiduciaries for clarifying data
integrity of India or security. retention periods
■ To
issue any subsidy, benefit, service, certificate, license ■ Class
of data fiduciaries and purposes that are
or permit. exempted from the conditions of processing
children’s data
■ Compliance
with any legal judgement, decree, order.
■ Responding
to a medical emergency involving a threat to
the life.
■ In
case of an epidemic, outbreak of disease, or any other Key nuances of the 2025 Rules
threat to public health.
■ For
safety in case of any disaster, or any breakdown of Below are the key nuances of the Rules that every business
public order. must understand to ensure compliance and protect personal
■ For
the purposes of employment or those related to data of the Data Principals:
safeguarding the employer from loss or liability. ■ Notice and consent: Data Fiduciaries need to assess
Penalties of non-compliance (examples): if their privacy notices and consent banners are
in alignment with the DPDP Rules and provide all
■ Non-compliance
of the provisions by Data Fiduciaries is
up to INR250 crore. necessary information to the Data Principals.
■ Breach
in observance of duty of Data Principal is ■ Verifiable parental consent: Data Fiduciaries shall
up to INR10,000. ensure a system is in place to obtain verifiable consent
■ Breach
in not giving notice of personal breach is of the parents or legal guardian while processing
up to INR200 crore. personal data of children or person with disability.
■ Breach
in observance of additional obligation in relation ■ Data Principal rights: Data Fiduciaries must establish
to children is up to INR200 crores. clear procedures, communication channels, and
■ Twelve
Rules are directly applicable to Data Fiduciaries systems to handle Data Principals’ rights requests and
and mandate their compliance while the remaining ensure an effective grievance redressal system.
seven focus on the establishment and operation of Data
■ Consent Manager: Data Fiduciaries need to ensure
Protection Board. Additionally, one is for state, and its
instrumentalities and two other provisions. that the Consent Manager being appointed meets the
conditions of the Board and follows the obligations set
What do the 22 rules clarify? by the Rules.
■ F
urther clarification on the notice to be provided to ■ Security safeguards: The Rules have provided
Data Principals
reasonable security safeguards to be implemented by
■ Registration
and obligations of Consent Manager the Data Fiduciaries for the protection of personal data
■ Reasonable
security safeguards: Technical and and preventing personal data breaches.
organizational measures ■ Personal Data breach: Data Fiduciaries need to inform
■ Personal
data retention timelines as per class of affected Data Principals and the Board without delay
Data Fiduciaries and provide a detailed report to the Board within 72
■ Timelines
for intimation of Personal Data breach to the hours, which includes broad facts, circumstances,
Board: 72 hours remedial measures, findings, etc.
■ Verifiable
consent for processing of personal data of ■ Data retention timelines: Data Fiduciaries are now
child or of a person with disability who has a required to ascertain a time on the data erasure of the
lawful guardian personal data processed by them depending on the
class of Data Fiduciary they fit in as specified by the
27
Rules( specific implications mentioned for ecommerce, ■ Journalistic exemption: The Rules do not provide any
gaming, social media companies). exemptions for journalists and media organizations
■ Processor due diligence: Data Fiduciaries must exercise in relation to complying with the Act’s obligations,
greater due diligence when outsourcing tasks to third particularly in balancing these obligations with the
parties and establish comprehensive data processing freedom of expression and the right to information in the
agreements with such processors, explicitly outlining the public interest.
processors’ obligations. ■ Exemptions for start-ups: The Rules do not specify
■ Significant Data Fiduciaries: Significant Data Fiduciaries the threshold for volume, nature of personal data and
must conduct Data Protection Impact Assessment, class of Data Fiduciaries, including Start-ups who are
annual audits, ensure algorithmic software protects data exempted from specific obligations relating to notice,
rights, and comply with data transfer restrictions DPIA, retention timeline and Data Principal Rights as per
outside India. the Act.
■ Restriction on special category of Personal Data: The
The unknowns: Rules have not specified the categories of personal data
and definition of traffic data on which restriction on
■ Significant Data Fiduciaries: The Rules have not cross-border data transfer by Significant Data Fiduciaries
specified the specific of Data Fiduciaries that will shall apply.
be considered as Significant Data Fiduciaries. The
Significant Data Fiduciaries will be notified by the central ■ Notification of data breach to Data Principals: The
government based on an assessment of relevant factors. Rules mention that as part of data breach notification
to the Data Protection Board within 72 hours, details
■ Consent Manager— Internal vs. External: The rules do on notification to data principals shall also be provided.
not clarify whether the Data Fiduciaries are permitted However, there is no clarity if it is mandatory to report
to appoint an in-house Consent Manager and if allowed, every data breach to the data principal and whether such
would that need to be registered with the Board, and intimation needs to be provided to each data principal
whether such an appointment would constitute a conflict before it is reported to the Board.
of interest. Furthermore, rules do not elaborate if and
how organizations can continue using existing consent
management mechanisms adopted proactively or for The journey to compliance: 10 steps every organization
compliance with global data protection regulations. must adhere to
■ Exemptions for children’s data processing: The Rules ■ Data privacy assessment: Assess the current data
outline five categories of Data Fiduciaries and list privacy posture, working practices and documentation
certain purposes of data processing that are exempt against the requirement of the DPDP Act and Rules
from certain obligations for processing children’s
■ Data discovery and mapping: Identify the Personal Data
data. However, the rules do not specify whether this
touch points and conduct data discovery and
exemption applies to all other Data Fiduciaries that do
mapping activities
not offer child-directed or lucrative* products
and services. ■ RoPA and data flow diagram: Document personal
data processing activities and its flow across various
■ Retrospective consent: The Rules have not
processes, systems, applications, third parties, etc.
provided clarity on what consent obtained prior to
commencement of the Act will be acceptable as valid ■ Consent and notice management: Prepare consents,
consent i.e., whether implied consent with a fresh notice cookie banners, cookie policies and privacy notices to be
would suffice, or should it be an explicit valid consent for implemented across touchpoints, where personal data
specific purposes along with a fresh notice. is collected
■ Timeline for Data Principal Rights and grievance ■ Privacy impact assessment: Identify data privacy
redressal: The Rules have not prescribed any time- risks by performing privacy impact assessments
period for Data Fiduciaries to address the rights of for processing activities and define controls to be
Data Principals. Additionally, the Rules have given implemented for mitigation
Data Fiduciaries the option to specify the time for their
■ Third-party risk management: For third parties
grievance redressal system.
processing personal data, ensure organizational and
■ Requirements for cross-border data transfer: The Rules technical security measures are implemented through
have not specified any list of countries with restriction inclusion within contracts and strong
on transfer of personal data along with instruments governance practices
to be put in place for such cross-border data transfer.
■ Technical safeguards: Identify and implement the
Any such requirements shall be specified by the central
required technical safeguards to ensure protection of
government by general or special order.
personal data from data breaches
29
Generative AI: Data-driven
5 insights for the future
GenAI in India: New vectors of disruption This will rapidly begin to augment and in some
cases replace the current app-based point and
click model. Over time, one can even imagine an
India’s GenAI landscape is rapidly evolving, LLM dynamically generating the UI based on the
characterized by unique market dynamics and context of the transaction.
a burgeoning ecosystem of innovation. Unlike
developed markets, India’s GenAI trajectory is This is already beginning to happen. More than
shaped by its vast and diverse population, a one-third of Google searches in India are voice-
young and tech-savvy workforce, and specific based, a stark contrast to just 5% in developed
socio-economic challenges. In this chapter, we markets. This growing preference for voice
explore five key vectors driving GenAI disruption interaction is evident in initiatives like the
in India, highlighting both the tailored adoption of AskDisha chatbot by CoRover, which supports
global solutions and the emergence of indigenous ticket bookings on the IRCTC app through voice,
products and solutions designed to meet chat, and point-and-click interfaces. Similarly, the
local needs. National Payments Corporation of India (NPCI)
has pioneered solutions such as Hello! UPI, which
enables transactions via simple voice commands.
31
How business strategies could differ for India 1 and India 3
Industry Digital model India 1 strategy India 3 strategy
Personalized investment management, AI-based micro-lending, regional
AI-driven wealth advisory, predictive language support in financial apps,
Fintech analytics for portfolio performance voice-based banking interfaces
33
How GenAI models amplify overall system capabilities
Construction Recommendation
Financial Industry
project engines in online Education
services 4.0 + GenAI
management commerce
Advanced project In e-commerce, Loan applicants Adaptive testing GenAI combines
management images — such as interact with GenAI- has evolved traditional ML
software now those of a living powered chatbots with GenAI, models with
incorporates drone room — are analyzed to provide detailed extending beyond diverse inputs
footage to assess using multi-modal information and multiple-choice like workers’
construction sites. vision models. The answer follow-up to include long- logs and product
GenAI processes interpretations questions. The form subjective manuals. This
this visual data, inform classical collected data answers. This fusion enhances
providing insights ML-based is processed by advancement predictive
that integrate recommendation traditional ML allows for more maintenance
with traditional AI engines, suggesting models, refining comprehensive strategies, leading
models to enhance optimal décor credit decision- assessments, to more informed
project oversight options from making processes tailoring question decisions on the
and decision- catalogs. This and improving difficulty based factory floor
making. integration accuracy in risk on previous and reducing
improves the assessment. responses and downtime.
relevance and The ensemble providing a deeper
personalization of significantly understanding
recommendations. reduces time to of student
decision. capabilities.
AI/ML techniques, classical programming, and all of these through traditional AI and GenAI to
external tools like internet search APIs. This deliver personalized recommendations for each
approach marks a big shift from relying solely doctor, including tailored product suggestions,
on monolithic models to employing multifaceted comparisons to regional peers, and relevant
systems that leverage the strengths of various disease trends.
components.
The evolution of Compound AI systems signifies
GenAI exemplifies this paradigm by enhancing a transformative approach in AI, where the
existing systems across diverse industries. Rather integration of GenAI with traditional methods
than serving as standalone solutions, GenAI models leads to more robust, efficient, and intelligent
are increasingly embedded within traditional AI applications across various sectors. As this trend
and ML processes, creating synergistic effects that continues, we anticipate the development of
amplify overall system capabilities. innovative products that harness the combined
strengths of these technologies, driving significant
Compound AI systems are already prevalent today.
advancements in their respective fields.
A leading Indian pharmaceutical company relies
on its field sales force to engage doctors and
share product updates. Leveraging their extensive
datasets such as visit logs, doctor feedback,
prescription patterns, and local disease insights,
which is a mix of quantitative and qualitative
data. The revamped sales app now leverages
250
200 gpt-4-32k
$/million tokens
150
gpt-4
100
gpt-4-turbo
50 gpt-4o gpt-4o-mini
0
4/1/23 7/1/23 10/1/23 1/1/24 4/1/24 7/1/24
Source: Elad Gil on X
35
05 The evolution of an Indic AI
ecosystem
The global AI community has also expressed keen
interest in Indic languages. For example,
Abu Dhabi-based G42 introduced Nanda, a Hindi
LLM trained on 2.13 trillion tokens, aiming to
A lot has been said about India being the use case empower over half a billion Hindi speakers with
and data capital of the world. With more than GenAI capabilities. Similarly, BharatGen, the first
700 million connected consumers and the lowest government-funded multimodal LLM initiative,
data rates in the world, India will play home to focuses on creating efficient and inclusive AI
many sunrise industries that will seek to infuse AI tailored to Indian needs. Tech Mahindra’s Project
at scale across their business models. There is also Indus further advances the development of Indic
now a significant focus on integrating AI into India foundational models, beginning with Hindi and
Stack to buttress its already strong digital public its over 37 dialects, bridging linguistic gaps for
infrastructure. Will India see an Indic AI stack with enterprises. TWO.ai, another notable player,
tools that compete with global offerings and is has introduced SUTRA, a multilingual AI engine
relevant in an enterprise context? supporting over 50 languages, including Hindi and
Gujarati. SUTRA is designed to power immersive
The race to build Indic LLMs and agents AI experiences that extend beyond text and voice,
addressing India’s linguistic diversity effectively.
One significant area of focus has been the
linguistic diversity of India — there has been a AI4Bharat, a research lab at IIT Madras, has
mushrooming of Indic LLMs that leverage been instrumental in advancing Indian language
open-source models fine-tuned with Indian technology. Their contributions include extensive
language datasets. A key initiative in this space open-source datasets like IndicCorp v2 and tools
is Bhashini, a government-led AI project aimed at that underpin the growing Indic LLM ecosystem.
creating an open-source Indic language dataset to Despite these advancements, challenges persist.
expand internet and digital service accessibility in The lack of robust datasets across India’s diverse
Indian languages. By facilitating content creation languages affects the training and performance
in languages like Hindi, Tamil and Bengali, Bhashini of these models. Data often requires significant
is democratizing the benefits of AI for India’s cleaning and processing to ensure usability, while
multilingual population. concerns about responsible data use, privacy, and
ethics remain pressing. Initiatives such as Project
Vaani, a collaboration between IISc and Google
37
Large funding deals in the GenAI in India
41
capital investment is also provided through Credit Guarantee Shaping the future: Digital transformation in
Fund Trust for Micro and Small Enterprises (CGTMSE) in India’s manufacturing sphere
the form of collateral-free loans for MSMEs. In addition,
the Ministry of Heavy Industries and Public Enterprises,
Government of India, has launched SAMARTH Udyog Bharat The infusion of digital technology is reshaping India’s
4.0, with an aim to promote Industry 4.0 adoption through manufacturing sector, with MSMEs at the heart of this
Smart Manufacturing Demonstration Centres (SMDCs). So transformation. The integration of IoT, AI, cloud computing,
far, five such centers have been established. robotics, and 3D printing is helping small manufacturers
enhance efficiency, improve product quality, and compete in
global markets.
Challenges and suggested solutions Start-ups are playing a vital role in making digital solutions
accessible and affordable for MSMEs, while government
interventions, along with initiatives like Make in India, are
Despite the immense potential, MSMEs face several driving large-scale adoption.
challenges in adopting digital technologies. These include:
As India aspires to become a $5 trillion economy, the
High implementation costs: Many small enterprises lack modernization of its manufacturing sector will be key. By
the capital to invest in advanced technologies such as AI fostering innovation, strengthening policy support, and
and robotics. The government can expand subsidies and addressing adoption challenges, MSMEs can emerge as
incentives for technology adoption, thereby reduce the cost global leaders in smart manufacturing, propelling India
of capital. Promoting shared infrastructure using pay-per- towards becoming a world-class industrial hub.
use models can also reduce costs.
1. Lack of a skilled workforce: Over 60% of MSMEs
lack employees trained in digital tools, limiting their
ability to implement new technologies. Government-
funded digital skilling programs should be expanded
in collaboration with industry leaders. Start-ups can
develop low-code/no-code platforms to reduce the skill
barrier for technology adoption.
2. Cybersecurity concerns: Increased digitalization
exposes MSMEs to cyber threats, necessitating
robust security measures. MSMEs should be provided
with cybersecurity awareness programs and easy-
to-implement security tools. Government schemes
can offer additional financial assistance for adopting
cybersecurity measures.
3. Limited Awareness and decision-making challenges:
Many MSMEs are unaware of the right digital
technologies for their needs and struggle with decision-
making. Industry associations and government
bodies can conduct regular outreach and awareness
campaigns. AI-driven recommendation platforms
can guide MSMEs on technology adoption based on
business needs.
45
and reduce waste, while blockchain ensures transparency in A call to action for emerging digital
supply chains. Companies that embed sustainability into their transformations
digital strategies will not only meet regulatory requirements,
but also appeal to environmentally conscious consumers
and investors. To navigate digital transformation effectively, adopting a
‘start small, scale fast’ approach is key. Begin with focused
4. Decentralized marketplaces pilots, assess their success, and quickly scale proven
solutions across the organization. This roadmap provides
Blockchain technology is giving rise to decentralized a clear, phased strategy to guide businesses from initial
marketplaces that eliminate intermediaries, reduce costs, assessment to sustained digital leadership.
and enhance trust. These platforms enable peer-to-peer
transactions, making it easier for MSMEs to access global
markets. Additionally, decentralized finance (DeFi) solutions Below is a phased approach tailored for industry leaders,
are democratizing access to capital, empowering smaller MSMEs and traditional companies:
players to scale their operations without traditional
Phase 1: Assess and strategize (0–6 Months)
banking constraints.
1. Conduct a digital readiness assessment:
5. Edge computing and 5G networks ■ Evaluate current digital maturity levels across
processes, technologies, and workforce skills
The proliferation of edge computing and 5G networks will
transform how data is processed and utilized. By enabling ■ Identify gaps and areas of opportunity
real-time insights at the source, these technologies will
enhance applications such as autonomous vehicles, remote
2. Define clear objectives:
healthcare, and smart manufacturing. For industries reliant
on speed and precision, edge computing offers a competitive ■ Align digital initiatives with overarching business goals
advantage, reducing latency and improving decision-making. (e.g., cost reduction, revenue growth,
customer satisfaction)
6. Human-AI collaboration ■ Set measurable KPIs to track progress
The future of work lies in collaboration between humans and
AI. As AI takes over repetitive and mundane tasks, human 3. Build leadership buy-in:
workers can focus on higher-value activities like strategy,
■ Ensure top management understands the importance
creativity, and problem-solving. This shift will lead to a more
of digital transformation and commits resources.
productive and engaged workforce, driving innovation across
sectors. Upskilling employees to work alongside AI will be ■ Appoint a Chief Digital Officer (CDO) or Transformation
crucial for organizations aiming to maximize this synergy. Leader to oversee the initiative.
47
Notes
Ernst Young LLP is one of the Indian client serving member firms of EYGM
Limited. For more information about our organization, please visit www.
ey.com/en_in.
EYIN2502-024
ED None
SA1
www.cii.in
cii.in/facebook