SQ1 Security decodes cyber reality in the AI era at ET CISO Decrypt 2026

SQ1 Security took part in ET CISO Decrypt 2026 as a Partner, held at Taj Santacruz, Mumbai, under the theme "Decoding Cyber Reality in the AI Era." Satish Narayanan, Suresh Krishnan, and Adhithya Rajasekaran represented SQ1 at the summit, which brought together CISOs, security architects, and risk leaders to unpack how AI-driven attacks and identity-centric breaches are redefining enterprise defence.

Satish Narayanan on the blind spot everyone misses

Asked what cybersecurity risk is most underestimated, Satish Narayanan, Co-Founder and CEO of SQ1, pointed away from tools and technology toward a subtler problem: the assumptions organizations make about their own security posture. His point was simple but sharp. In a landscape driven by automation and speed, the real risk often sits in what teams already believe is under control.

Suresh Krishnan on what happens after a cyberattack

Suresh Krishnan, Co-Founder and CTO of SQ1, joined the panel "Inside the Breach: Lessons from the Frontlines of Cyber Attacks," alongside Shivanath Somanathan, CISO at Star Health and Allied Insurance, and Ambarish Kumar Singh, CISO at Godrej Enterprises Group, moderated by Muqbil Ahmar of ETCISO.

The conversation surfaced a hard truth: breaches usually expose governance gaps, not technical ones. Underused tools, misconfigurations, and unclear ownership come up more often than a lack of technology. Panelists agreed that decision-making speed during an incident shapes recovery, that lessons only count once they're actually operationalized, and that resilience comes from testing and drills, not static response plans sitting in a drawer.

Adhithya Rajasekaran on turning privacy compliance into proof

Adhithya Rajasekaran, Senior Product Manager at SQ1 and a certified DSCI Data Protection Officer, introduced a different kind of shift: how agentic AI can move privacy compliance out of paperwork and into executable, verifiable workflows. His core idea was that privacy shouldn't live in fragmented documents, emails, and spreadsheets, but in workflows that generate measurable proof.

A few ideas stood out from his session:

• Privacy becomes operational, not procedural. Agentic systems convert DPDP and ISO requirements into structured workflows, cutting manual effort and improving traceability.
• Fragmented data creates fragmented accountability. Data spread across apps, vendors, and teams makes visibility and compliance harder to sustain.
• "Proof packets" replace documentation chaos. Rather than chasing evidence across systems, AI agents collect facts, flag gaps, and generate verifiable compliance artifacts.
• Human governance stays central. Agents execute and surface insights, but final decisions and accountability remain with human reviewers.

The session pointed to a broader shift in privacy engineering: from static compliance checklists to dynamic, AI-orchestrated systems that continuously monitor, validate, and prove responsible data handling. As Adhithya put it, the real question in the DPDP era isn't whether you have a policy. It's whether you can prove it's actually working.

Why the summit mattered to SQ1

Cybersecurity conversations rarely get this honest about failure. Being part of a discussion that named governance, not just technology, as the real fault line, alongside a conversation on making privacy provable rather than just documented, gave SQ1 a chance to bring its own frontline perspective to a room built for exactly that kind of reckoning.

About SQ1 Security

SQ1 Security believes most breaches happen not from a lack of tools, but from a lack of operationalizing what's already there. Its AI-native platforms, Stakflo and Scani5, are built to close that gap, giving organizations the visibility, testing, and continuous validation to turn security assumptions into actual readiness before the breach happens.