As cybercrime becomes increasingly sophisticated, the ability to investigate and preserve digital evidence depends heavily on specialised infrastructure. This challenge was a key focus at the FutureCrime Summit 2026, where experts examined how organizations can plan, establish and manage effective cybersecurity and digital-forensics laboratories.

A panel discussion and workshop titled “Planning, Setting Up, and Managing a Cybersecurity Laboratory” explored the practical requirements involved in developing laboratories that can support digital investigations, forensic analysis, incident response and professional training.

The session featured Ajay Sariyal, Technical Product Specialist at MSAB; Abhinav Saurabh of Forensic Care; Sub-Inspector Saurabh Haritesh of Delhi Police; and Priya Choudhary. Their combined perspectives highlighted the importance of aligning technology, investigative requirements, personnel and laboratory management.

Cyber Labs Must Be Designed Around Their Mission

Establishing a modern cybersecurity laboratory involves far more than purchasing computers and forensic software. The facility must be designed according to the type of work it is expected to perform.

Depending on its purpose, a laboratory may support mobile-device examinations, digital evidence analysis, malware investigations, network forensics, cybercrime response or specialist training.

Infrastructure planning can include forensic workstations, specialised tools, secure networks, controlled-access areas and reliable systems for storing digital evidence. Each component must contribute to a workflow that protects the integrity and reliability of investigations.

For law-enforcement agencies, these requirements become particularly important because laboratories may handle evidence connected to criminal cases. Proper documentation, controlled evidence handling and repeatable examination procedures are therefore essential.

Skilled Investigators Remain Critical

The panel also underscored a fundamental point: advanced technology is only as effective as the professionals using it.

Digital-forensics personnel need the expertise to acquire, preserve, examine and interpret evidence while maintaining appropriate investigative procedures. Continuous training is equally important because digital devices, operating systems, applications and cyberattack techniques change rapidly.

Ajay Sariyal’s experience in mobile-device forensics brought a technology-focused perspective to the discussion. The participation of Abhinav Saurabh from Forensic Care added a forensic-services dimension, while Sub-Inspector Saurabh Haritesh represented the operational challenges faced by police investigators.

Together, these perspectives highlighted the need for cybersecurity laboratories to combine specialised technology with practical investigative expertise.

Laboratory Management Does Not End After Setup

Another important issue raised by the session was the need for sustained management once a laboratory becomes operational.

Cybersecurity and forensic facilities require ongoing maintenance, software upgrades, licence management, equipment replacement, secure storage and access-control reviews. Documented procedures must also be updated as investigative techniques and technologies evolve.

Growing caseloads can create another challenge. Laboratories must develop efficient workflows for prioritising examinations and managing evidence backlogs without compromising forensic standards or the reliability of findings.

This makes laboratory development a continuing institutional responsibility rather than a one-time investment in technology.

A Foundation for Modern Cybercrime Investigations

The FutureCrime Summit session highlighted that an effective cybersecurity laboratory depends on the interaction of technology, trained personnel, secure processes and long-term management.

As digital evidence becomes increasingly important in criminal investigations, organizations need facilities capable of handling complex and diverse forms of electronic information. A well-planned laboratory can provide investigators with the controlled environment and specialist capabilities required to examine digital evidence effectively.

The broader takeaway from the discussion was that the success of a cyber-forensics facility should not be measured simply by the number of tools it contains. Its real value lies in how efficiently its technology, personnel and procedures work together to support reliable investigations.

The growing importance of privacy governance and responsible data management took centre stage at the FutureCrime Summit 2026, where industry experts discussed how Indian organizations can strengthen accountability for personal information.

A panel titled “Data Fiduciary Accountability: Governance, Audits and the Role of Data Protection Officers in India” examined the changing responsibilities of businesses as India’s digital ecosystem and privacy framework continue to evolve.

The discussion featured Suditi Tandon, Senior Officer, Global Data Privacy Office Specialist, Corporate Legal & Compliance at Hella India Automotive Private Limited; Krishan Kumar, Vice President at SPECTRA; Dipanshu Parashar; and Nirmal Raj M, Principal Officer & Risk Compliance Lead at Onmeta.

Data Governance Is Becoming a Business Responsibility

A key message from the discussion was that data protection can no longer be viewed solely as a legal or compliance exercise.

Organizations handling personal information need to establish clear oversight over the entire data lifecycle. This includes understanding what information is collected, the purpose for collecting it, where it is stored, who has access to it and when it should be deleted or retained.

The challenge becomes more complex as businesses increasingly depend on cloud infrastructure, digital platforms and external technology providers. Maintaining visibility over personal information across these interconnected systems requires stronger internal governance and clearly defined accountability.

Privacy policies and consent mechanisms remain important, but they are only part of an effective data protection framework. Organizations also need operational controls that translate privacy principles into everyday business practices.

Data Audits Can Reveal Hidden Governance Gaps

The panel also highlighted the role of audits in determining whether privacy policies are working in practice.

A well-designed data audit can assess areas such as information inventories, access permissions, retention procedures, third-party relationships and internal controls. Such reviews can identify weaknesses that may not be apparent from written policies alone.

Third-party data processing was another important consideration. When organizations rely on outside vendors or technology platforms, they need adequate oversight of how information is processed throughout its lifecycle. Simply transferring data to a service provider does not remove the need for effective accountability.

Regular audits can therefore serve as an important mechanism for identifying operational shortcomings before they become larger compliance, privacy or security concerns.

DPOs Moving Beyond Traditional Compliance

The evolving role of Data Protection Officers was another major theme of the session.

DPOs increasingly operate across several areas, including privacy law, technology, risk management and corporate governance. Their responsibilities can extend beyond maintaining documentation to advising senior leadership, assessing privacy risks and helping organizations build stronger data-handling processes.

The professional backgrounds of the panelists also reflected the multidisciplinary nature of modern privacy governance, bringing together corporate privacy, legal technology, artificial intelligence, compliance, risk management and cybercrime-related perspectives.

This broader role positions DPOs as an important part of an organization’s internal accountability structure rather than simply as administrative compliance personnel.

Building Trust Through Stronger Accountability

The FutureCrime Summit discussion underlined a broader shift in the way organizations approach personal data.

Effective data protection requires cooperation between management, legal and compliance teams, technology professionals, security functions and other business units. Clearly assigned responsibilities, regular audits and appropriate technical safeguards all contribute to a stronger governance framework.

As businesses become increasingly dependent on personal information and digital services, responsible data management is also becoming closely linked to consumer confidence and digital trust.

The panel’s central takeaway was clear: accountability for personal data must be embedded across an organization rather than left to a single department or compliance function.

Hyderabad Cybercrime Police have issued a notice to Meta seeking details about how its platforms detect and remove artificial intelligence-generated deepfake videos being used to promote fraudulent investment schemes.

The investigation follows a growing number of complaints from victims who say they were tricked by manipulated videos featuring well-known public figures allegedly endorsing fake trading platforms and investment opportunities. Authorities are examining how such content spreads across Facebook, WhatsApp, and Instagram and whether additional safeguards are needed to prevent financial fraud.

Fake Celebrity Videos Used to Lure Investors

Investigators have identified multiple cases where deepfake videos allegedly showed prominent personalities appearing to support fake financial schemes.

The probe includes manipulated content featuring Union Finance Minister Nirmala Sitharaman, actor Amitabh Bachchan, and Hyderabad MP Asaduddin Owaisi. Police said these videos were circulated online to create false credibility and encourage users to invest money through fraudulent platforms.

Owaisi had earlier approached Hyderabad Police after his identity was allegedly misused in a fake investment promotion. Similar deepfake-based scams have also targeted other public figures, including business leaders and celebrities, as fraudsters increasingly use trusted faces and voices to convince victims.

Fraud Pattern Follows a Common Method

Cybercrime investigators said many investment scams follow a similar approach. Criminals first use deepfake videos or fake advertisements to attract victims, then move conversations to private messaging platforms such as WhatsApp or Telegram.

Victims are often shown fake trading dashboards displaying artificial profits. When they attempt to withdraw funds, scammers demand additional payments in the form of taxes, processing charges, or verification fees.

Authorities have warned that the realistic appearance of AI-generated videos makes these scams more difficult for ordinary users to identify.

Meta Asked to Explain Detection Measures

A Meta representative has already appeared before investigators, who presented details of cases involving significant financial losses. Police have now requested technical experts from the company to explain the systems used to identify, monitor, and remove AI-generated fraudulent content.

The investigation reflects a broader effort by Telangana cybercrime authorities to examine the responsibilities of major technology platforms in preventing online fraud.

Officials are also reviewing whether social media companies and digital platforms are taking sufficient preventive measures rather than responding only after victims report losses.

Growing Pressure on Technology Platforms

The action against Meta follows similar scrutiny of other technology companies. In a separate investigation, Cyberabad Police questioned processes related to fraudulent stock-trading applications that allegedly caused financial losses after appearing on an app marketplace.

Together, these cases indicate a stronger focus by law enforcement agencies on the role of digital platforms in enabling cybercrime through advertisements, applications, and user-generated content.

Authorities are also examining the impact of updated Indian technology regulations that increase obligations for online platforms regarding synthetic media, harmful content detection, and user safety.

Experts Warn of Rising AI Fraud Threat

Cybersecurity experts have described AI-generated deepfakes as one of the fastest-growing threats in the online fraud landscape.

Experts warn that criminals can now create convincing videos and voice recordings of trusted individuals, making victims more likely to believe false investment claims.

Authorities have advised users to verify investment opportunities through official sources, avoid transferring money based solely on online promotions, and remain cautious of offers promising unusually high returns.

Investigation Continues

Hyderabad Cybercrime Police said the investigation will focus not only on identifying scam operators but also on understanding how fraudulent content reaches large audiences.

Officials believe cooperation between law enforcement agencies and major technology companies will be essential to reducing organized cyber fraud and improving digital safety for users.