As cybercrime becomes increasingly sophisticated, the ability to investigate and preserve digital evidence depends heavily on specialised infrastructure. This challenge was a key focus at the FutureCrime Summit 2026, where experts examined how organizations can plan, establish and manage effective cybersecurity and digital-forensics laboratories.

A panel discussion and workshop titled “Planning, Setting Up, and Managing a Cybersecurity Laboratory” explored the practical requirements involved in developing laboratories that can support digital investigations, forensic analysis, incident response and professional training.

The session featured Ajay Sariyal, Technical Product Specialist at MSAB; Abhinav Saurabh of Forensic Care; Sub-Inspector Saurabh Haritesh of Delhi Police; and Priya Choudhary. Their combined perspectives highlighted the importance of aligning technology, investigative requirements, personnel and laboratory management.

Cyber Labs Must Be Designed Around Their Mission

Establishing a modern cybersecurity laboratory involves far more than purchasing computers and forensic software. The facility must be designed according to the type of work it is expected to perform.

Depending on its purpose, a laboratory may support mobile-device examinations, digital evidence analysis, malware investigations, network forensics, cybercrime response or specialist training.

Infrastructure planning can include forensic workstations, specialised tools, secure networks, controlled-access areas and reliable systems for storing digital evidence. Each component must contribute to a workflow that protects the integrity and reliability of investigations.

For law-enforcement agencies, these requirements become particularly important because laboratories may handle evidence connected to criminal cases. Proper documentation, controlled evidence handling and repeatable examination procedures are therefore essential.

Skilled Investigators Remain Critical

The panel also underscored a fundamental point: advanced technology is only as effective as the professionals using it.

Digital-forensics personnel need the expertise to acquire, preserve, examine and interpret evidence while maintaining appropriate investigative procedures. Continuous training is equally important because digital devices, operating systems, applications and cyberattack techniques change rapidly.

Ajay Sariyal’s experience in mobile-device forensics brought a technology-focused perspective to the discussion. The participation of Abhinav Saurabh from Forensic Care added a forensic-services dimension, while Sub-Inspector Saurabh Haritesh represented the operational challenges faced by police investigators.

Together, these perspectives highlighted the need for cybersecurity laboratories to combine specialised technology with practical investigative expertise.

Laboratory Management Does Not End After Setup

Another important issue raised by the session was the need for sustained management once a laboratory becomes operational.

Cybersecurity and forensic facilities require ongoing maintenance, software upgrades, licence management, equipment replacement, secure storage and access-control reviews. Documented procedures must also be updated as investigative techniques and technologies evolve.

Growing caseloads can create another challenge. Laboratories must develop efficient workflows for prioritising examinations and managing evidence backlogs without compromising forensic standards or the reliability of findings.

This makes laboratory development a continuing institutional responsibility rather than a one-time investment in technology.

A Foundation for Modern Cybercrime Investigations

The FutureCrime Summit session highlighted that an effective cybersecurity laboratory depends on the interaction of technology, trained personnel, secure processes and long-term management.

As digital evidence becomes increasingly important in criminal investigations, organizations need facilities capable of handling complex and diverse forms of electronic information. A well-planned laboratory can provide investigators with the controlled environment and specialist capabilities required to examine digital evidence effectively.

The broader takeaway from the discussion was that the success of a cyber-forensics facility should not be measured simply by the number of tools it contains. Its real value lies in how efficiently its technology, personnel and procedures work together to support reliable investigations.

The growing importance of privacy governance and responsible data management took centre stage at the FutureCrime Summit 2026, where industry experts discussed how Indian organizations can strengthen accountability for personal information.

A panel titled “Data Fiduciary Accountability: Governance, Audits and the Role of Data Protection Officers in India” examined the changing responsibilities of businesses as India’s digital ecosystem and privacy framework continue to evolve.

The discussion featured Suditi Tandon, Senior Officer, Global Data Privacy Office Specialist, Corporate Legal & Compliance at Hella India Automotive Private Limited; Krishan Kumar, Vice President at SPECTRA; Dipanshu Parashar; and Nirmal Raj M, Principal Officer & Risk Compliance Lead at Onmeta.

Data Governance Is Becoming a Business Responsibility

A key message from the discussion was that data protection can no longer be viewed solely as a legal or compliance exercise.

Organizations handling personal information need to establish clear oversight over the entire data lifecycle. This includes understanding what information is collected, the purpose for collecting it, where it is stored, who has access to it and when it should be deleted or retained.

The challenge becomes more complex as businesses increasingly depend on cloud infrastructure, digital platforms and external technology providers. Maintaining visibility over personal information across these interconnected systems requires stronger internal governance and clearly defined accountability.

Privacy policies and consent mechanisms remain important, but they are only part of an effective data protection framework. Organizations also need operational controls that translate privacy principles into everyday business practices.

Data Audits Can Reveal Hidden Governance Gaps

The panel also highlighted the role of audits in determining whether privacy policies are working in practice.

A well-designed data audit can assess areas such as information inventories, access permissions, retention procedures, third-party relationships and internal controls. Such reviews can identify weaknesses that may not be apparent from written policies alone.

Third-party data processing was another important consideration. When organizations rely on outside vendors or technology platforms, they need adequate oversight of how information is processed throughout its lifecycle. Simply transferring data to a service provider does not remove the need for effective accountability.

Regular audits can therefore serve as an important mechanism for identifying operational shortcomings before they become larger compliance, privacy or security concerns.

DPOs Moving Beyond Traditional Compliance

The evolving role of Data Protection Officers was another major theme of the session.

DPOs increasingly operate across several areas, including privacy law, technology, risk management and corporate governance. Their responsibilities can extend beyond maintaining documentation to advising senior leadership, assessing privacy risks and helping organizations build stronger data-handling processes.

The professional backgrounds of the panelists also reflected the multidisciplinary nature of modern privacy governance, bringing together corporate privacy, legal technology, artificial intelligence, compliance, risk management and cybercrime-related perspectives.

This broader role positions DPOs as an important part of an organization’s internal accountability structure rather than simply as administrative compliance personnel.

Building Trust Through Stronger Accountability

The FutureCrime Summit discussion underlined a broader shift in the way organizations approach personal data.

Effective data protection requires cooperation between management, legal and compliance teams, technology professionals, security functions and other business units. Clearly assigned responsibilities, regular audits and appropriate technical safeguards all contribute to a stronger governance framework.

As businesses become increasingly dependent on personal information and digital services, responsible data management is also becoming closely linked to consumer confidence and digital trust.

The panel’s central takeaway was clear: accountability for personal data must be embedded across an organization rather than left to a single department or compliance function.

New Delhi: The growing role of artificial intelligence in cybercrime and the urgent need to strengthen digital resilience were key themes at the FutureCrime Summit 2026, where cybersecurity experts discussed the evolving risks facing critical infrastructure.

A panel titled “Defending the Digital Backbone: AI-Powered Cybercrime, Critical Infrastructure, and Cyber Resilience” brought together experts from academia, cyber defence, incident response, forensics and managed security services.

The session featured Dr. Akash Thakar, Assistant Professor at Rashtriya Raksha University; Himanshu Patel, Senior Manager – Cyber Defence, Incident Response and Forensics at Protiviti; Dr. Nishant Sawant, Director, Managed Security Services; and Er. Kritika.

AI Is Reshaping the Cyber Threat Landscape

Panelists examined how artificial intelligence is changing both the scale and speed of cyberattacks. AI-enabled tools can potentially help malicious actors automate tasks such as reconnaissance, identify weaknesses and create increasingly convincing social-engineering campaigns.

The same technology, however, is also becoming an important tool for cybersecurity teams. AI-based systems can analyse large volumes of network activity, identify unusual patterns and help security professionals prioritise potentially serious threats.

Experts stressed that deploying AI alone is not enough. Organizations also need skilled personnel, effective governance frameworks and clearly defined incident-response procedures to ensure that AI-driven security tools are used effectively.

Critical Infrastructure Faces Wider Cyber Risks

The discussion placed particular emphasis on the protection of critical infrastructure. Modern economies depend heavily on interconnected digital systems supporting sectors such as banking, telecommunications, transportation and public services.

A cyber incident affecting one system can potentially create consequences across connected networks. This makes resilience just as important as prevention, particularly for organizations responsible for essential services.

According to the themes discussed at the summit, effective cyber resilience involves rapidly identifying threats, containing compromised systems, maintaining critical operations and restoring services after an incident. Organizations must also preserve digital evidence so that forensic teams can investigate the attack.

Cybersecurity Becomes an Organizational Responsibility

The panel also highlighted the changing role of cybersecurity within organizations. Protecting digital infrastructure is increasingly viewed as a strategic responsibility rather than a function limited to technical teams.

The diverse expertise of the panel reflected this broader approach. Academic research, cyber defence, incident response, digital forensics and managed security services each contribute to building stronger security capabilities.

The discussion underscored a central challenge for organizations: how to benefit from increasingly powerful AI systems while preventing the same technology from creating additional opportunities for cybercriminals.

Resilience Requires More Than Security Technology

Experts stressed that there is no single technology capable of addressing the full range of modern cyber threats. Strong cybersecurity requires a combination of advanced tools, trained professionals, effective governance and preparedness for major incidents.

Organizations also need the ability to continue essential operations when security controls are bypassed and recover quickly after an attack.

As artificial intelligence becomes increasingly embedded in both legitimate digital services and criminal activity, the ability to withstand disruption and recover from cyber incidents is expected to become an increasingly important measure of cybersecurity maturity.