iValue Center of Excellence

Your Technology. Proven. Positioned. Sold.

• Sell outcomes, not features

Pharma Upsell Stack with Controls

Pharmaceutical Security Controls Aligned with Industry Standards

#	Domain	Control Area	Control Description	What it Secures	Technology Category	iValue OEM / Tools	CERT-In	DPDP	ISO 27001	GxP (GMP/GCP/GLP)	NCIIPC	NIST / ISA 62443 (OT)
1	Governance	Cybersecurity Governance	Enterprise cyber governance aligned with Quality & IT	Enterprise posture	GRC	Whitehats	⬜	⬜	✅	✅	⬜	⬜
2	Governance	GxP IT Controls (CSV / Annex 11)	Validated systems, audit trails, electronic records	Regulated systems	Compliance	Whitehats	⬜	⬜	✅	✅	⬜	⬜
3	Governance	Data Integrity (ALCOA+)	Integrity of lab and manufacturing data	Lab & plant data	Data Integrity	Whitehats	⬜	⬜	✅	✅	⬜	⬜
4	Governance	Third-Party Risk Management	CROs, CMOs, OEMs, suppliers	Supply chain	TPRM	Whitehats, RSA	⬜	⬜	✅	✅	⬜	⬜
5	Governance	Incident Response Governance	IR policy, escalation and communications	IR readiness	IR Program	SOAR + Whitehats	✅	⬜	✅	✅	⬜	⬜
6	Governance	Backup & Recovery Governance (GxP)	Backup validation, restore approval and audit evidence	Regulated recovery	GxP Governance	Whitehats + Rubrik / Cohesity	⬜	⬜	✅	✅	⬜	⬜
7	Identity	Identity Governance (IGA)	Joiner/Mover/Leaver and access reviews	Identities	IGA	RSA	⬜	⬜	✅	✅	⬜	⬜
8	Identity	Workforce IAM / SSO	Unified access to R&D, ERP and MES	User access	IAM	RSA	⬜	⬜	✅	✅	⬜	⬜
9	Identity	Privileged Access Management	Admin and engineer access control	Privileged identities	PAM	CyberArk	⬜	⬜	✅	✅	⬜	⬜
10	Identity	MFA / Strong Authentication	Secure lab and plant access	Authentication	MFA	RSA, Yubico	⬜	⬜	✅	✅	⬜	⬜
11	Identity	Vendor Remote Access	OEM and integrator access	External access	ZTNA	Netskope, CyberArk	⬜	⬜	✅	✅	⬜	⬜
12	Identity	Identity Threat Detection	Detect AD-based identity attacks	Identity layer	ITDR	Tenable.AD	⬜	⬜	✅	⬜	⬜	⬜
13	Endpoint	Endpoint Protection (EPP/EDR)	Malware and ransomware defense	Workstations	EDR	SentinelOne	⬜	⬜	✅	✅	⬜	⬜
14	Endpoint	Lab System Hardening	HPLC, LIMS and ELN endpoints	Lab instruments	Hardening	OpenText ITOM	⬜	⬜	✅	✅	⬜	⬜
15	Endpoint	Patch Management (Validated)	Controlled patching of regulated endpoints	Endpoints	Patch Management	OpenText ITOM	⬜	⬜	✅	✅	⬜	⬜
16	Endpoint	Device Control	USB and instrument interface control	IP and sensitive data	Device Control	Forcepoint	⬜	⬜	✅	✅	⬜	⬜
17	Endpoint	Email Security & BEC	Phishing and financial fraud protection	Email and payments	Email Security	Forcepoint	⬜	⬜	✅	⬜	⬜	⬜
18	Network	Network Segmentation	IT–OT–Lab segregation	Lateral movement	Segmentation	AlgoSec, Check Point	⬜	⬜	✅	✅	✅	✅
19	OT	Purdue Model Alignment	L0–L5 manufacturing architecture	Plants	Architecture	Purdue Framework	⬜	⬜	✅	✅	✅	✅
20	OT	Industrial Firewalling	Protocol-aware firewalls	OT traffic	OT Firewall	Check Point	⬜	⬜	✅	✅	✅	✅
21	OT	OT Network Monitoring	Passive ICS visibility	Industrial control systems	OT NDR	Netscout, Keysight	⬜	⬜	✅	✅	✅	✅
22	OT	Secure Remote Engineering Access	Engineer and vendor access	OT access	OT ZTNA	Netskope	⬜	⬜	✅	✅	✅	⬜
23	OT	PLC Logic Change Detection	Detect unauthorized logic changes	Control logic	Integrity Monitoring	OT Monitoring Tools	⬜	⬜	✅	✅	✅	⬜
24	OT	Data Diode	One-way plant to SOC data flow	Safety systems	Data Diode	Terrafence	⬜	⬜	⬜	✅	✅	⬜
25	Application	Secure SDLC	Secure development lifecycle	Source code	SSDLC	OpenText Fortify, Digital.ai	⬜	⬜	✅	⬜	⬜	⬜
26	Application	SAST / DAST	Application vulnerability testing	Applications	AppSec	OpenText Fortify	⬜	⬜	✅	⬜	⬜	⬜
27	Application	API Security	Secure internal and external APIs	APIs	API Security	Imperva, Levo	⬜	⬜	✅	⬜	⬜	⬜
28	Application	Web Application Firewall	Protect portals and clinical apps	Web applications	WAF	Thales Imperva	⬜	⬜	✅	⬜	⬜	⬜
29	Application	SBOM	Software supply chain visibility	Dependencies	SBOM	OpenText Fortify	⬜	⬜	✅	⬜	⬜	⬜
30	Data	Data Classification	Identify IP, PII and clinical data	Sensitive data	Classification	Forcepoint	⬜	✅	✅	✅	⬜	⬜
31	Data	Data Loss Prevention	Prevent IP leakage	R&D data	DLP	Forcepoint	⬜	✅	✅	⬜	⬜	⬜
32	Data	Encryption & Key Management	Encrypt research and plant data	Data	Cryptography	Thales	⬜	✅	✅	✅	⬜	⬜
33	Data	Database Security	Database activity monitoring and hardening	Clinical databases	DB Security	Imperva SecureSphere	⬜	⬜	✅	⬜	⬜	⬜
34	Data	Operational Data Retention	Policy-based retention across backups	Regulated data	Data Lifecycle	Rubrik / Cohesity + Whitehats	⬜	✅	✅	✅	⬜	⬜
35	Data	Defensible Deletion / Legal Hold	Evidence-backed deletion and legal holds	Compliance and privacy	Data Lifecycle	Rubrik / Cohesity + Whitehats	⬜	✅	✅	✅	⬜	⬜
36	Data	Digital Rights Management	Controlled document sharing	Formulas and dossiers	DRM	Vaultize	⬜	⬜	⬜	⬜	⬜	⬜
37	SOC	SIEM	Central monitoring and correlation	Logs and events	SIEM	Splunk, Google Chronicle, ArcSight	✅	⬜	✅	⬜	⬜	⬜
38	SOC	UEBA	Insider threat detection	Users and entities	UEBA	Gurucul, Innspark	⬜	⬜	✅	⬜	⬜	⬜
39	SOC	SOAR	Automated incident response	IR processes	SOAR	Chronicle SOAR, Splunk SOAR, OpenText SOAR	⬜	⬜	✅	⬜	⬜	⬜
40	SOC	Backup Security Monitoring	Detect ransomware indicators in backups	Backup data	Backup Analytics	Rubrik / Cohesity	⬜	⬜	⬜	⬜	⬜	⬜
41	SOC	Digital Forensics	Evidence acquisition and investigation	Incidents	DFIR	OpenText EnCase, KapurGaurai	⬜	⬜	⬜	⬜	⬜	⬜
42	Resilience	Immutable Backups	WORM and air-gapped backups	Data availability	Cyber Resilient Backup	Rubrik / Cohesity	⬜	⬜	✅	✅	⬜	⬜
43	Resilience	Ransomware Recovery	Clean and prioritized restore	Plant continuity	Cyber Recovery	Rubrik / Cohesity	⬜	⬜	✅	✅	⬜	⬜
44	Resilience	Recovery Drills & Validation	Regular restore testing with evidence	Audit readiness	Recovery Validation	Rubrik / Cohesity + Whitehats	⬜	⬜	✅	✅	⬜	⬜
45	Resilience	Backup to SOC Integration	Backup alerts into SOC	Detection	SOC Integration	Rubrik / Cohesity → SIEM	⬜	⬜	⬜	⬜	⬜	⬜

Security Operations Center

IAM

Endpoint

Cloud Security

Application Security

BFSI

Manufacturing

Energy & Power

Insurance

Enterprise

Pharma

Digital Natives

Fintech

Your Technology. Proven. Positioned. Sold.

Pharma Upsell Stack with Controls