Vivek Kumar Polurouthu

Talk Title:

From SoD Violations to Zero Trust: Advancing Enterprise Security Through Continuous Risk Assurance

Abstract:

As organizations accelerate digital transformation through cloud platforms, AI-driven applications, and interconnected business ecosystems, traditional security models are increasingly challenged by evolving cyber threats. Many security incidents originate not only from software vulnerabilities but also from excessive privileges, toxic access combinations, Segregation of Duties (SoD) violations, and misuse of trusted systems.

This keynote explores the convergence of Enterprise Security, Zero Trust Architecture, and intelligent risk analytics as a foundation for building trustworthy digital systems. The presentation examines how organizations can move beyond static access controls and periodic compliance reviews toward continuous verification of identities, privileges, transactions, and business activities. Drawing on advances in machine learning, behavioral analytics, and explainable AI, the talk highlights innovative approaches for detecting privilege escalation, insider threats, access-control weaknesses, and anomalous behavior before they become security incidents.

The keynote further discusses how security testing, continuous monitoring, and risk-driven assurance can be integrated into enterprise governance frameworks to strengthen cybersecurity resilience, regulatory compliance, and operational trust. By combining Zero Trust principles with AI-powered analytics, organizations can transform security from a reactive compliance function into a proactive, intelligence-driven capability that continuously evaluates and validates risk.

The session concludes with a vision for next-generation enterprise environments where trust is continuously verified, risks are proactively managed, and security assurance becomes an integral component of digital transformation and cyber resilience.

Keywords: Enterprise Security, Zero Trust, Segregation of Duties (SoD), Cybersecurity, Identity and Access Management, Security Testing, Risk Analytics, AI Security, Continuous Risk Assurance, Trustworthy Systems.

Profile:

Vivek Kumar Polurouthu is a Senior Software Developer with over 16 years of experience in cybersecurity, enterprise risk and governance, SAP and non-SAP security, and AI-driven systems. Currently serving at PBF Energy, he has led large-scale security modernization initiatives across complex enterprise environments.

His expertise includes designing cross-platform access governance frameworks, implementing Segregation of Duties (SoD) and compliance programs, strengthening identity and access management controls, and developing AI-based risk detection models to enhance enterprise security and operational resilience. His professional interests include enterprise security, Zero Trust architecture, intelligent risk analytics, AI for cybersecurity, governance, risk and compliance (GRC), and digital transformation.