IIT-Madras Experts Highlight Basic Cyber Security Gaps Ahead of AI Adoption

Academicians from IIT-Madras emphasize that basic data security controls and hygiene remain absent in many corporate environments, often compromised during AI testing. The remarks were made at the Industry Conclave on AI Governance 2026, where leaders also discussed sectoral AI regulation and smaller data center ecosystems.

Basic data security controls and operational hygiene, rather than sophisticated AI-led threats, are primarily responsible for recent cybersecurity failures in India and globally, according to top academicians from the Indian Institute of Technology (IIT), Madras.

Speaking at the Industry Conclave on AI Governance 2026, organized by the Wadhwani School of Data Science & AI’s (WSAI) Centre for Responsible AI (CeRAI), IIT-Madras Director V Kamakoti noted that foundational cyber hygiene is frequently missing in the corporate sector. He suggested that building basic competence is a necessary first step, pointing to available courses such as those on NPTEL for Chief Information Security Officers (CISOs).

Prof Balaraman Ravindran, Head of WSAI and CeRAI, added that organizations often lower fundamental cyber controls in order to test AI tools, thereby exposing themselves to security threats. The conclave, themed around 'AI Measurement and Governance', evaluated real-world AI deployment and featured a startup showcase highlighting companies working in the AI space.

Addressing the regulatory landscape, Kamakoti expressed the view that India is adopting a measured and appropriate pace regarding AI legislation. He cautioned that premature regulation could potentially stifle innovation, emphasizing the need to first understand the broader benefits and drawbacks of AI across different spheres.

Echoing this perspective, Prof Ravindran noted that India's sectoral approach to AI regulation—where independent regulators in sectors like banking, healthcare, and energy develop their own strategies—aligns well with existing governance guidelines.

During the conclave, the academicians also highlighted ongoing research initiatives at CeRAI. Kamakoti pointed out the necessity of establishing smaller data centers for AI inference within contained ecosystems, such as an institution-specific processing data center, to manage energy consumption and resources efficiently. Additionally, Prof Ravindran discussed ongoing research into the impact of AI on jobs, noting that AI does not uniformly replace skills and that individual roles must be reimagined to accommodate its impact.

"The observations from the IIT-Madras leadership highlight a crucial foundational issue for businesses integrating new technologies. Companies frequently rush into AI adoption without securing their basic infrastructure and data security controls, creating vulnerabilities. For startups and enterprises alike, establishing robust cyber hygiene must precede advanced technology deployment. Furthermore, the sectoral approach to AI regulation allows for measured, practical oversight without hindering early-stage innovation." — Dr. Shishir Gupta, Founder & CEO, StartupLanes