EY India 2025digital Transformation India Journey To Industry
EY India 2025digital Transformation India Journey To Industry
India’s journey
to Industry 4.0
excellence
March 2025
Contents
01
Introduction                                       10
02
Customer-centric growth in the digital             12
era: A paradigm shift
03
Digital manufacturing: Powering industrial         18
innovation with smart technologies
04
Cybersecurity: Building resilience
and ensuring privacy                               22
05
Generative AI: Data-driven insights                28
for the future
06
Digital technology infusion in the manufacturing   38
sector: A focus on MSMEs and start-ups
07
The path forward                                   42
Executive
summary
India’s journey toward Industry 4.0 excellence is driven by digital transformation, which
is reshaping the business landscape and offering unprecedented growth opportunities for
manufacturing firms and MSMEs. Embracing digital technologies allows these enterprises
to optimize operations, deliver enhanced customer experiences, and stay competitive in an
increasingly globalized market.
Customer-centric growth has become a pivotal focus, with businesses adopting data-driven
strategies to personalize offerings, streamline operations, and create new business models.
In the digital age, customers expect convenience, personalization, and seamless interactions,
prompting manufacturers and MSMEs to embrace digital tools and analytics to remain relevant
and competitive.
Digital manufacturing is powering industrial innovation by integrating smart technologies,
automation, and predictive maintenance, leading to cost optimization and yield improvements.
Sectors such as automotive, electronics, and pharmaceuticals are leading the way in leveraging
these technologies for operational excellence.
However, adopting digital tools brings challenges, particularly in cybersecurity, where robust
defenses are needed to protect operational and informational systems. Advanced threat
detection, compliance with regulatory standards, and the implementation of Zero Trust
architectures are crucial to building resilience and safeguarding data.
The rise of generative AI is transforming industries by enabling new ways to harness data, drive
innovation, and improve decision-making processes. The growth of AI-driven insights is expected
to fuel the next wave of digital transformation, particularly in knowledge work and personalized
customer interactions.
For MSMEs and start-ups, digital transformation is imperative, with IoT, cloud computing,
blockchain, and 3D printing playing a significant role in shaping the future of manufacturing.
Government initiatives, skill development programs, and partnerships with tech providers are
key enablers of this transformation, though challenges such as limited budgets and resistance to
change remain.
Key takeaways:
1                     2                     3                  4                    5
  Adopt a customer-     Invest in digital    Strengthen          Utilize AI and      Collaborate with
    first mindset,      manufacturing       cybersecurity         analytics to        governments
   leveraging data      technologies to      measures to       unlock actionable     and start-ups to
      to enhance      improve efficiency    protect critical   insights and drive   foster growth and
   personalization        and quality           assets             innovation          digitalization
Foreword EY
In an era defined by rapid technological advancements and shifting global dynamics, digital
transformation has become more than just an aspiration—it is an imperative for businesses seeking
sustained growth and competitiveness. India’s journey toward Industry 4.0 excellence is a testament to
the power of innovation, strategic collaboration, and a forward-thinking approach to technology adoption.
As a trusted advisor to enterprises navigating this transformation, we have witnessed firsthand the
impact of digital technologies in revolutionizing industries, enhancing operational efficiency, and
unlocking new opportunities for value creation. From automation and AI-driven insights to cybersecurity
and digital manufacturing, businesses that embrace these shifts are not only future-proofing their
operations but also positioning themselves as industry leaders.
For MSMEs and large enterprises alike, the road to digital maturity presents both opportunities and
challenges. Addressing key enablers such as customer-centric growth, data-driven decision-making,
and workforce upskilling will be critical to ensuring a seamless transition to Industry 4.0. Furthermore,
partnerships between businesses, technology providers, and policymakers will play a pivotal role in
accelerating this transformation at scale.
This publication serves as a framework for organizations looking to harness the full potential of digital
technologies to drive meaningful innovation and long-term impact. Through a structured approach, it
provides insights into best practices, strategic imperatives, and real-world case studies that illustrate how
businesses can successfully navigate their digital transformation journey.
As we embark on this transformative path together, I encourage industry leaders to take bold, decisive
steps in integrating digital capabilities into their core strategies. The future belongs to those who not only
embrace change but lead it. By fostering a culture of innovation, investing in the right digital tools, and
strengthening collaborative ecosystems, businesses can pave the way for a smarter, more connected, and
sustainable industrial future.
Anirban Mukherjee
Partner, Risk Consulting
Foreword FTCCI
As the world accelerates into the era of Industry 4.0, we stand at the threshold of a profound
transformation. Digital technologies are not just enhancing business processes—they are
revolutionizing the very core of industries across the globe. The Federation of Telangana Chambers
of Commerce and Industry (FTCCI) is proud to present this Thought Leadership White Paper on
Digital Transformation and Industry 4.0, in partnership with EY. The White Paper is a comprehensive
exploration of how these emerging technologies are shaping the future of business in Telangana and
beyond.
In Telangana, we are witnessing an exciting convergence of digital innovation and industrial growth.
From smart manufacturing to data-driven decision-making, the adoption of Industry 4.0 technologies,
such as artificial intelligence, Internet of Things (IoT), automation, and big data & AI is enabling
businesses to improve efficiency, enhance product quality, and create new value propositions.
However, this transformation also brings forth challenges—ranging from the need for skilled workforce
development to the integration of complex systems across traditional industries.
This White Paper offers a strategic framework for businesses to navigate this digital revolution.
Through insightful case studies, industry perspectives, and expert analysis, it provides actionable
recommendations for businesses of all sizes to adopt, integrate, and scale digital solutions effectively.
At FTCCI, we believe that the future of Telangana’s industrial landscape depends on our collective
ability to embrace technological change and foster an ecosystem that encourages innovation,
collaboration, and investment. The ICT Committee at FTCCI has been working relentlessly for
collaboration with all stake holders towards this goal. This paper aims to equip business leaders,
entrepreneurs, and policymakers with the knowledge needed to accelerate digital transformation,
unlock new opportunities, and position Telangana as a global hub for Industry 4.0.
K Mohan Raidu
Managing Director, Informatics India
Chair, ICT Committee, FTCCI
Bala Peddigari
Chief Innovation Officer
Technology, Software and Services
Business Group, TCS
Co-Chair, ICT Committee, FTCCI
 FTCCI is uniquely positioned to collaborate
 with policymakers, start-ups and ecosystem
 partners to unlock the full potential of
 digital transformation. The experience of the
 traditional industry, clubbed with the agility
 of the start-ups, can be a game changer.
 Pankaj Diwan
 Founder, Idealabs FutureTech Ventures
 Co-Chair, ICT Committee, FTCCI
CV Anirudh Rao
Director, CV Infracon
Co-Chair, ICT Committee, FTCCI
        1                Introduction
     Overview of accelerating growth and innovation
     In today’s fast-paced business environment, innovation                 Despite these benefits, many businesses remain within their
     serves as the driving force behind growth and prosperity               established areas of expertise, excelling at core functions but
     for enterprises. Recognizing this, a significant 84% of CEOs           showing reluctance to embrace change. This hesitancy often
     acknowledge the threat of digital disruption1, yet fewer than          stems from a lack of expertise and a clear vision, which stand
     half possess a formal strategy to navigate the digital future.         as critical barriers to achieving the next level of innovation.
     Innovation is not left to chance; it is a deliberate process
                                                                            A prime example of successful innovation is the collaboration
     aimed at creating new growth avenues and ensuring
                                                                            between Publicis Sapient and Microsoft, which led to the
     sustained success.
                                                                            creation of, AGTB, the world’s first fully digital trade finance
     A successful innovation strategy involves a balanced                   bank, leveraging Microsoft Azure technology. Another case
     portfolio that combines incremental improvements with                  is the development of FacePass for Miral’s Yas Island, which
     radical, disruptive changes. Companies that master                     introduced contactless customer experiences and set a new
     innovation often outperform their peers, delivering superior           standard for disruptive innovation in the hospitality and
     returns to shareholders and offering tangible benefits                 entertainment industry.2
     to customers, partners and employees. The innovation
                                                                            Innovation is not optional; it is a necessity for growth. As
     spectrum includes sustaining innovation, which enhances
                                                                            the pace of change accelerates, businesses must embrace
     existing products and services; evolutionary innovation,
                                                                            innovation to remain competitive. By fostering a culture of
     which enters adjacent markets to foster new growth; and
                                                                            innovation, investing in technology, and engaging in strategic
     disruptive innovation, which creates entirely new markets
                                                                            collaborations, companies can secure their position in the
     and business models, altering the competitive landscape.
                                                                            market and drive future success.
35% 22%
Pre-Covid Post-Covid
1
 Accelerating-Growth-Through-Innovation-2.pdf
2
 Accelerating-Growth-Through-Innovation-2.pdf
3
 7500.pdf
4
 IBEF – Tech based solutions for Indian MSME Landscape - https://www.ibef.org/blogs/tech-based-solutions-to-empower-the-indian-msme-landscape
5
 MSMEs and Digital Technology: New pillars of the Indian Economy - https://www.crn.in/columns/msmes-and-digital-technology-new-pillars-of-the-indian-economy/
6
 Digital Safety Net Helps Small Businesses Survive During COVID-19 - https://connectedcouncil.org/digital-safety-net-helps-small-businesses-survive-during-covid-19/
                                                                                                                                                                       13
                            Customer-centric growth in the
          2                 digital era: A paradigm shift
     Key trends in driving digital growth                                             Key strategies for success
                                                                                      To take full advantage of this level-playing field, businesses
         1. Removing barriers for a fairer digital                                    should focus on the following strategies:
            marketing space                                                           a.    Microtargeting and niche audiences
                                                                                            Instead of trying to appeal to broad demographics,
     Digital marketing has traditionally been dominated by large                            businesses should identify and target niche audiences
     enterprises with substantial budgets and resources. However,                           that align closely with their offerings. By leveraging
     recent advancements in technology and the proliferation                                advanced targeting capabilities provided by digital
     of accessible digital tools have democratized the marketing                            platforms, even small businesses can achieve high
     landscape, enabling smaller businesses to compete on a more                            engagement rates and conversion metrics.
     level-playing field. This shift is driven by several factors:
                                                                                      b.    Content-driven marketing
     ■      Sachet-sized advertising platforms: Social media                                Content remains king in the digital age. High-quality,
            platforms such as Facebook, YouTube, Instagram,                                 relevant content—whether it is blog posts, videos,
            and LinkedIn offer sachet-sized and pay as you use                              or social media updates—can help establish thought
            advertising solutions that allow small businesses to reach                      leadership, build trust and foster long-term relationships
            targeted audiences without breaking the bank. This                              with customers. Businesses should invest in creating
            enables firms to make small investments in marketing                            valuable content tailored to their audience’s needs
            and visibility through focused targeting, which was                             and preferences.
            difficult in the era of billboards, newspaper ads
            and signages.                                                                   With the advent of Generative AI (GenAI), content
                                                                                            creation has become more accessible and efficient than
     ■      Automation tools: Marketing automation platforms such
                                                                                            ever before. 40% of Generative AI (GenAI) solutions will
            as HubSpot, Mailchimp, and Marketo provide scalable
                                                                                            be multimodal (text, image, audio and video) by 2027,
            solutions for managing campaigns, nurturing leads,
                                                                                            up from 1% in 2023, according to Gartner, Inc.7
            and analyzing performance. These tools are easy to
            implement, intuitive to adopt and have less upfront                             Tools such as GPT-powered platforms can generate
            investments, which enables manufacturing and MSMEs                              engaging articles, social media captions, email
            to adopt, experiment and scale basis their appetite                             campaigns, and even video scripts within minutes,
            for investment.                                                                 saving businesses significant time and resources. For
     ■      Data accessibility: The availability of data analytics tools                    example, a small e-commerce brand could use GenAI
            (e.g., Google Analytics, SEMrush) empowers businesses                           to create personalized product descriptions at scale
            of all sizes to make informed decisions based on real-                          or draft SEO-optimized blog posts that resonate with
            time insights.                                                                  its target audience. By automating repetitive tasks,
                                                                                            marketers can focus on strategy and creativity, ensuring
                                                                                            that the final output aligns perfectly with their goals
                                                                                            while maintaining authenticity.
     7
      Gartner Predicts 40% of Generative AI Solutions Will Be Multimodal By 2027
     8
      IBEF – Tech based solutions for Indian MSME Landscape - https://www.ibef.org/blogs/tech-based-solutions-to-empower-the-indian-msme-landscape
     9
      https://softlinkglobal.com/how-saas-can-help-the-indian-logistics-msme-sector/#:~:text=Correspondingly%2C%20India’s%20logistics%20sector%20is,to%20start%20
     and%20scale%20up
■     Mobile-first mindset: With mobile devices accounting           ■    Grocery retail transformation: Reliance JioMart’s
      for most of the online traffic, businesses must ensure              adoption of UPI has streamlined payments for grocery
      their websites and apps are optimized for mobile                    deliveries, helping first-time digital shoppers
      users. Especially for MSMEs, the rise of Indian start-              onboard seamlessly.
      ups has helped drive adoption across CRM, customer             ■    Support for small businesses: Kirana stores widely
      services, credit assessment, accounting products, social            adopted UPI QR codes during the pandemic, enabling
      commerce platforms and Cloud service providers, which               contactless payments and enhancing
      are providing India and MSME specific offerings.8                   customer convenience.
■     Omnichannel integration: Customers expect consistent           By eliminating payment friction, UPI has boosted conversion
      experiences across multiple channels, including physical       rates and customer satisfaction, making it a model for
      stores, e-commerce platforms, social media and                 seamless digital transactions across industries.
      customer service portals.
■     Instant gratification: Fast shipping, easy returns and         b.   Personalized recommendations
      instant access to information are now considered                    AI-powered recommendation engines have redefined
      standard practices rather than differentiators. With the            customer engagement by offering tailored products and
      rise of Indian logistics as a service player, these services        content suggestions. Companies like Netflix and Amazon
      can be enabled for firms across sectors and specifically            use advanced algorithms to analyze user behavior,
      for the MSME sector.9                                               driving satisfaction and retention.
                                                                                                                                      15
     Beyond these giants, the rise of open-source solutions has               ■    Fairer revenue distribution with lower commission fees
     made personalization accessible to businesses of all sizes.
                                                                              ■    Greater control over branding and customer relationships
     Platforms like Odoo, Magento, and Drupal provide flexible,
     cost-effective tools for implementing                                    ■    Enhanced supply chain transparency to improve
     recommendation systems:                                                       operational efficiency
     ■      Retail customization: Magento’s open-source                       Across sectors, ONDC is driving innovation, enhancing supply
            eCommerce platform allows retailers to integrate AI-              chain transparency, and enabling a more equitable digital
            driven product recommendations based on browsing                  ecosystem that prioritizes collaboration over monopolization.
            behavior and purchase history, creating a more relevant
            shopping experience.
                                                                              b.   Pay-as-a-service model
     ■      Content personalization: Drupal’s modular framework
                                                                              Today, most digital platforms offer Pay-as-a-service and
            enables content-heavy websites to deliver personalized            freemium models, allowing businesses to experiment with
            content streams to users.                                         technology before committing to full-scale adoption. This
     These open-source ecosystems reduce costs, encourage                     model is widely used across industries, including:
     innovation, and empower even small businesses to compete
                                                                              ■    Streaming services and hyperscalers that provide
     with industry leaders in delivering hyper-personalized
                                                                                   consumption-based pricing
     experiences.
                                                                              ■    E-commerce and SaaS platforms offering tiered services
     c.     Investment in technology
            Adopting emerging can redefine customer engagement                ■    Backend functional platforms that charge based
            and set brands apart. Innovations such as augmented                    on usage
            reality (AR), virtual try-ons, and AI-powered chatbots
                                                                              For MSMEs, freemium models provide a means of
            are transforming how customers interact with products
                                                                              experimenting with the technology. Freemium models offer
            and services:
                                                                              basic versions of products or services for free while charging
     ■      AR and virtual try-ons: Brands like Lenskart and Nykaa            for premium features. Many of these models fit to the
            leverage AR to allow customers to try on glasses or               requirement of MSMEs.
            makeup virtually, reducing purchase hesitation.
     ■      AI chatbots: Businesses integrate conversational AI to            c.   Direct-to-Consumer (DTC)
            provide instant support, enhancing service efficiency                  By bypassing intermediaries and selling directly to
            and customer satisfaction.                                             consumers, brands can maintain greater control over
                                                                                   pricing, branding and customer relationships. DTC
                                                                                   pioneers like Warby Parker and Casper have disrupted
         3. New business models for customers                                      industries once dominated by established players. With
                                                                                   the raise of e-commerce and quick commerce models
     The rise of digital technologies has led to innovative                        in India, DTC has now become one of the key consumer
     business models that cater directly to evolving consumer                      expectations. Increasingly, manufacturing companies
     demands. Companies are moving beyond traditional                              are focusing on DTC to drive profitable growth by
     commerce paradigms by adopting approaches that offer                          disintermediating their channels and monetizing the
     flexibility, accessibility, and enhanced customer experiences.                strength of their brands.
     Emerging models shaping the digital economy                              The DTC model has significantly empowered MSMEs by
                                                                              enabling direct customer interactions, which provide
     a.     Raise of multi-entity digital platforms                           unfiltered feedback to refine products and services. For
            Multi-entity digital platforms, such as the ONDC, are             example, a local artisanal pickle brand can use customer
            transforming how businesses operate by fostering                  reviews to improve recipes or packaging, ensuring a better
            inclusivity and reducing dependency on centralized                market fit. Additionally, the rise of Logistics as a Service
            e-commerce giants. ONDC’s open architecture enables               (LaaS) players like Delhivery and Shadowfax has made it
            seamless interoperability between buyers, sellers and             easier for MSMEs to deliver products directly to customers’
            service providers, democratizing access to digital                doorsteps, even in remote areas. This eliminates the need
            commerce for businesses of all sizes.                             for costly warehousing or logistics setups, allowing small
     For MSMEs, this model eliminates entry barriers, allowing                businesses to focus on quality and innovation. By combining
     them to compete on a level-playing field with established                direct feedback with efficient delivery systems, MSMEs can
     brands. By providing access to a wider customer base                     enhance customer satisfaction, build trust and strengthen
     without the need for significant investments in proprietary              their brand reputation, driving sustainable growth while
     platforms, ONDC empowers small businesses to scale                       maintaining control over pricing and customer relationships.
     efficiently. Additionally, the decentralized nature of such
     platforms ensures:
                                                                                                                           17
     Cross reads from early adopters                                          Flipkart:
     across sectors                                                           Flipkart, the e-commerce giant of India, understood the need
                                                                              for a platform that catered to a price-sensitive and digitally
                                                                              evolving consumer base. Their customer-centric
     E-commerce and retail                                                    approach includes:
Urban Company:
Urban Company offers a variety of on-demand services like
beauty treatments, home repairs and fitness classes. Their
customer-centric approach includes:
                                                              19
                             Digital manufacturing:
                             Powering industrial innovation
          3                  with smart technologies
     Key trends in cost optimization
                                                                                    Primary focus of Gen AI Initiatives
          1     Automation as a cost enabler
                                                                                Customer Experience/Retention                                        38%
     operational efficiency.
                                                                                           Business Continuity        7%
a. Condition monitoring
10
    Lights-Out Production Will Be a Reality by 2025
11
    Two Unilever sites named most digitally advanced factories | Unilever
                                                                                                                                        21
                Predictive maintenance for downtime                                           Enhancing yield with
          3                                                                             4
                reduction                                                                     Digital Twins
     Unplanned downtime is a major contributor to operational                       Digital twins are virtual replicas of physical assets, processes
     costs in manufacturing and other asset-intensive industries.                   or systems. They simulate real-world conditions to test
     Predictive maintenance uses data analytics and machine                         scenarios, optimize performance, and identify opportunities
     learning to anticipate equipment failures before they occur,                   for improvement. In manufacturing, Digital Twins are
     enabling timely interventions that minimize disruptions and                    particularly valuable for enhancing yield—the percentage
     repair expenses.                                                               of usable output relative to input materials. According to
                                                                                    Gartner, 13% of organizations implementing IoT projects
     Key applications of predictive maintenance                                     already use Digital Twins, while 62% are either in the process
     a.       Rotating equipmen                                                     of establishing Digital Twin use or plan to do so.12
     12
       Gartner: digital twins beginning to enter the mainstream
     13
       (6) Gartner predicts IoT market to grow to $991 billion by 2028 | LinkedIn
     14
       First collaborative robots in India - Bajaj auto
     15
       Digital Twin Technology in System Design - GeeksforGeeks
     16
       Honeywell OT Cybersecurity Solutions: Helps Protect What Matters
■    Manufacturing is at the forefront of the fourth industrial   Digital Twins simulate entire production lines or individual
     revolution (Industry 4.0), characterized by the              machines, enabling manufacturers to test changes virtually
     integration of IoT, AI, robotics and big data analytics.     before implementing them in the physical environment. For
     These technologies are driving operational efficiencies,     example, Tesla uses Digital Twins to model its production
     reducing downtime, and enabling mass customization.          lines and vehicle designs. This allows the company to test
                                                                  new configurations virtually, reducing development time
                                                                  and improving product quality.15
Key trends supporting digitalization in
manufacturing                                                     G.   Cybersecurity for manufacturing systems
A. Internet of Things (IoT) and Connected Devices                 As manufacturing becomes more connected, robust
                                                                  cybersecurity measures are essential to protect sensitive
IoT-enabled sensors embedded in machinery collect real-           data and prevent disruptions. For example, Honeywell
time data on performance metrics such as temperature,             developed advanced cybersecurity solutions to safeguard
vibration and energy consumption. Gartner predicts the            industrial control systems, ensuring uninterrupted
IoT market will nearly double, soaring from US$546 billion        operations for its clients in critical sectors like oil and gas.16
in 2022 to US$991 billion by 202813. This data is analyzed
to optimize production processes and predict maintenance
needs. For example, Siemens uses IoT to monitor equipment         H. Sustainability and green manufacturing
health in its factories, achieving up to 30% reductions in
                                                                  Digitization supports sustainability by optimizing resource
unplanned downtime.
                                                                  usage, reducing waste, and promoting eco-friendly
                                                                  practices. For instance, Adidas partnered with Carbon Inc.
B.   Industrial data lake                                         to use 3D printing technology for its Futurecraft sneakers,
                                                                  reducing material waste and enabling localized production
As manufacturing becomes increasingly data-driven,                to cut carbon emissions.17
the ability to collect, store and analyze vast amounts
of information is critical. For instance, an automotive
manufacturer uses an industrial data lake to aggregate data       I.   Augmented reality (AR) and virtual reality (VR)
from assembly lines, robotic systems and supplier networks.       AR and VR are transforming training, remote assistance,
By applying AI algorithms to this data, the company can           and design visualization in manufacturing. For example,
identify inefficiencies in production workflows, and              Volkswagen uses AR glasses to guide technicians during
reduce downtime.                                                  complex repairs. The glasses overlay step-by-step
                                                                  instructions onto machinery, reducing errors and speeding
C.   Artificial Intelligence (AI) and Machine                     up maintenance tasks.18
     Learning (ML)
AI and ML are used for predictive maintenance, quality
control and process optimization by analyzing vast datasets.
For instance, General Electric (GE) uses AI-powered
predictive maintenance to monitor jet engine performance.
This has reduced unplanned downtime and extended the
lifespan of critical components.
D.   Robotics
Robotics, particularly collaborative robots (cobots) and
autonomous systems, are becoming integral to modern
manufacturing. These technologies handle repetitive,
dangerous, or highly precise tasks, freeing human workers
for more strategic roles. For example, Universal Robots have
implemented collaborative robots at Bajaj Auto Ltd and
have enabled Bajaj to improve its production capabilities
and evolve its multi-model offerings.14
                                                                                                                                       23
                         Cybersecurity: Building
        4                resilience and ensuring privacy
     In today’s digital environment, cyber disasters are not               Market drivers for cyber resilience
     just a possibility; they are inevitable. As the global
     landscape shifts and new technologies emerge and
     evolve, organizations are becoming more deeply                        CXOs today are re-writing the organizational technology
                                                                           strategy to embed cyber resilience, with an aim to
     integrated with technologies, like Machine Learning,
                                                                           building resilience-by-design, rather than an after-
     Artificial Intelligence, Blockchain, quantum computing                thought. Digital transformation and global changes in
     and the Internet of things (IoT), among others. In this               the workplace have introduced various digital layers
     light, the impact of a major cyber-attack on businesses               within organizations. Over 20 billion devices of various
     is compounded many times over. However, what                          types from IoT devices, connected vehicles, drones
     characterizes an organization’s strength is its ability to            to fitness trackers are connected to the internet,
     plan, prepare and test its capability to continue providing           with millions more being connected daily. The attack
     services to customers, recover from breaches and emerge               surface is increasing at an alarming rate and with it, the
                                                                           spiraling number of security flaws and vulnerabilities.
     stronger as a result.
                                                                           The estimated annual economic cost of cyber-crime is
     Cyber warfare is an ever-present threat with far-reaching             reaching over US$1 trillion, with an average of 150+
     consequences for businesses, governments and society.                 days being the time to spot a sophisticated cyber-attack.
     Attacks take various forms, from ransomware crippling                 This leads to increased cyber threats at various levels.
     critical infrastructure to sophisticated operations                   Below are some examples:
     designed to destabilize entire organizations. The loss of             At the employee level: The increasing number of
     sensitive data is often just the beginning; threat actors             employees working from home leads to growing
     frequently aim to disrupt operations, erode stakeholder               cybersecurity concerns as the vastness of the attack
     confidence and undermine societal trust.                              surface increases.
                                                                           ■   At data or organizational level: This includes protecting
                                                                               data, which is now being accessed from a multitude
                                                                               of different locations or stored across multiple data
     Cybersecurity and cyber resilience                                        centers, various public clouds or SaaS applications
                                                                               spread across the world.
     Cybersecurity and cyber resilience are inherently                     ■   At the supply chain level: Supply chain cyberattacks,
     interconnected, with cybersecurity focusing on                            including those targeting software providers, pose
     safeguarding systems and data and detecting threats,                      significant risks to organizations. Attackers exploit
     while cyber resilience ensures an organization’s ability to               vulnerabilities in third-party vendors or software
     recover and adapt in the aftermath of an attack. While                    updates to breach systems and disrupt operations.
     cybersecurity aims to prevent breaches, cyber resilience                  A single compromised link can lead to widespread
     ensures business continuity by enabling rapid recovery                    consequences, emphasizing the need for strong
     and minimizing operational disruption. Together, these                    cybersecurity across multiple partners.
     strategies form a comprehensive approach that not
                                                                           ■   Regulatory changes: Compliance requirements for
     only defends against cyber threats but also ensures
                                                                               data are increasing globally with regulations like GDPR,
     organizations can swiftly restore operations and maintain
                                                                               DORA and India’s DPDP Act, 2023. Penalties for
     long-term security and continuity.
                                                                               non-compliance can be substantial, with GDPR fines
                                                                               reaching millions of dollars.
                                                                                        “
                                                                  than recovery; it is ensuring
                                                                  your operations continue
                                                                  seamlessly, even amidst
                                                                  a cyberattack
                                                                                                   Pradeep Eledath
                                                                                                   Partner,
                                                                                                   Technology Consulting,
Broadly, cyber resilience can be split into four major
                                                                                                   EY India
components — anticipating, withstanding, responding /
recovering and learning/adapting from cyber threats.
■   Anticipate threats: Adopt a proactive approach
    by thinking like an attacker rather than a defender.
    Shift from a reactive stance to a strategic, forward-
    looking posture by identifying vulnerabilities,
    predicting attack vectors, and implementing
    preemptive measures to stay ahead of evolving
    cyber threats.
■   Withstanding attacks: Develop ability to endure and
    sustain operations amid cyber threats. This requires
    a multi-layered defense strategy, integrating robust
    security frameworks, redundancy and restoration
    measures, and well-orchestrated incident response
    protocols to mitigate operational disruptions and
    safeguard critical assets.
                                                                                                                            25
           Key takeaways for cyber resilience
          Cyber resilience is a critical component for organizations to effectively manage and recover from cyberattacks while
          maintaining business continuity. A well-defined and proactive incident response plan enables organizations to quickly
          detect, contain and mitigate the impact of cyber threats, preventing further damage and disruption. Coupled with this, a
          comprehensive and effective cyber recovery strategy, underpinned by secure, up-to-date cyber backups and automated
          restoration processes, ensures rapid resumption of essential services with minimal downtime.
          Post-incident analysis plays a vital role in strengthening resilience, providing valuable insights that refine response
          protocols and recovery procedures for future incidents. Furthermore, organizations must invest in building a resilient
          workforce, equipped with the knowledge and skills to handle cyber crises effectively through ongoing training,
          simulations and awareness programs. By integrating these response and recovery strategies into their broader
          cybersecurity framework, organizations not only protect themselves against evolving cyber threats but also enhance
          their ability to adapt and thrive in an increasingly complex digital environment, ensuring long-term security and
          operational resilience.
■   Performance
                    of any law or in the interest of sovereignty   ■    Classification
                                                                                        of data fiduciaries for clarifying data
      integrity of India or security.                                      retention periods
■   To
     issue any subsidy, benefit, service, certificate, license     ■    Class
                                                                                of data fiduciaries and purposes that are
     or permit.                                                            exempted from the conditions of processing
                                                                           children’s data
■   Compliance
              with any legal judgement, decree, order.
■   Responding
               to a medical emergency involving a threat to
      the life.
■   In
     case of an epidemic, outbreak of disease, or any other            Key nuances of the 2025 Rules
     threat to public health.
■   For
        safety in case of any disaster, or any breakdown of        Below are the key nuances of the Rules that every business
      public order.                                                 must understand to ensure compliance and protect personal
■   For
         the purposes of employment or those related to            data of the Data Principals:
      safeguarding the employer from loss or liability.             ■    Notice and consent: Data Fiduciaries need to assess
Penalties of non-compliance (examples):                                  if their privacy notices and consent banners are
                                                                         in alignment with the DPDP Rules and provide all
■   Non-compliance
                     of the provisions by Data Fiduciaries is
      up to INR250 crore.                                                necessary information to the Data Principals.
■   Breach
             in observance of duty of Data Principal is            ■    Verifiable parental consent: Data Fiduciaries shall
      up to INR10,000.                                                   ensure a system is in place to obtain verifiable consent
■   Breach
             in not giving notice of personal breach is                 of the parents or legal guardian while processing
      up to INR200 crore.                                                personal data of children or person with disability.
■   Breach
             in observance of additional obligation in relation    ■    Data Principal rights: Data Fiduciaries must establish
      to children is up to INR200 crores.                                clear procedures, communication channels, and
■   Twelve
            Rules are directly applicable to Data Fiduciaries           systems to handle Data Principals’ rights requests and
      and mandate their compliance while the remaining                   ensure an effective grievance redressal system.
      seven focus on the establishment and operation of Data
                                                                    ■    Consent Manager: Data Fiduciaries need to ensure
      Protection Board. Additionally, one is for state, and its
      instrumentalities and two other provisions.                        that the Consent Manager being appointed meets the
                                                                         conditions of the Board and follows the obligations set
What do the 22 rules clarify?                                            by the Rules.
■   F
     urther clarification on the notice to be provided to          ■    Security safeguards: The Rules have provided
     Data Principals
                                                                         reasonable security safeguards to be implemented by
■   Registration
                and obligations of Consent Manager                      the Data Fiduciaries for the protection of personal data
■   Reasonable
                 security safeguards: Technical and                     and preventing personal data breaches.
      organizational measures                                       ■    Personal Data breach: Data Fiduciaries need to inform
■   Personal
              data retention timelines as per class of                  affected Data Principals and the Board without delay
      Data Fiduciaries                                                   and provide a detailed report to the Board within 72
■   Timelines
              for intimation of Personal Data breach to the             hours, which includes broad facts, circumstances,
      Board: 72 hours                                                    remedial measures, findings, etc.
■   Verifiable
                consent for processing of personal data of         ■    Data retention timelines: Data Fiduciaries are now
      child or of a person with disability who has a                     required to ascertain a time on the data erasure of the
      lawful guardian                                                    personal data processed by them depending on the
                                                                         class of Data Fiduciary they fit in as specified by the
                                                                                                                                     27
            Rules( specific implications mentioned for ecommerce,             ■   Journalistic exemption: The Rules do not provide any
            gaming, social media companies).                                      exemptions for journalists and media organizations
     ■      Processor due diligence: Data Fiduciaries must exercise               in relation to complying with the Act’s obligations,
            greater due diligence when outsourcing tasks to third                 particularly in balancing these obligations with the
            parties and establish comprehensive data processing                   freedom of expression and the right to information in the
            agreements with such processors, explicitly outlining the             public interest.
            processors’ obligations.                                          ■   Exemptions for start-ups: The Rules do not specify
     ■      Significant Data Fiduciaries: Significant Data Fiduciaries            the threshold for volume, nature of personal data and
            must conduct Data Protection Impact Assessment,                       class of Data Fiduciaries, including Start-ups who are
            annual audits, ensure algorithmic software protects data              exempted from specific obligations relating to notice,
            rights, and comply with data transfer restrictions                    DPIA, retention timeline and Data Principal Rights as per
            outside India.                                                        the Act.
                                                                              ■   Restriction on special category of Personal Data: The
     The unknowns:                                                                Rules have not specified the categories of personal data
                                                                                  and definition of traffic data on which restriction on
     ■      Significant Data Fiduciaries: The Rules have not                      cross-border data transfer by Significant Data Fiduciaries
            specified the specific of Data Fiduciaries that will                  shall apply.
            be considered as Significant Data Fiduciaries. The
            Significant Data Fiduciaries will be notified by the central      ■   Notification of data breach to Data Principals: The
            government based on an assessment of relevant factors.                Rules mention that as part of data breach notification
                                                                                  to the Data Protection Board within 72 hours, details
     ■      Consent Manager— Internal vs. External: The rules do                  on notification to data principals shall also be provided.
            not clarify whether the Data Fiduciaries are permitted                However, there is no clarity if it is mandatory to report
            to appoint an in-house Consent Manager and if allowed,                every data breach to the data principal and whether such
            would that need to be registered with the Board, and                  intimation needs to be provided to each data principal
            whether such an appointment would constitute a conflict               before it is reported to the Board.
            of interest. Furthermore, rules do not elaborate if and
            how organizations can continue using existing consent
            management mechanisms adopted proactively or for                  The journey to compliance: 10 steps every organization
            compliance with global data protection regulations.               must adhere to
     ■      Exemptions for children’s data processing: The Rules              ■   Data privacy assessment: Assess the current data
            outline five categories of Data Fiduciaries and list                  privacy posture, working practices and documentation
            certain purposes of data processing that are exempt                   against the requirement of the DPDP Act and Rules
            from certain obligations for processing children’s
                                                                              ■   Data discovery and mapping: Identify the Personal Data
            data. However, the rules do not specify whether this
                                                                                  touch points and conduct data discovery and
            exemption applies to all other Data Fiduciaries that do
                                                                                  mapping activities
            not offer child-directed or lucrative* products
            and services.                                                     ■   RoPA and data flow diagram: Document personal
                                                                                  data processing activities and its flow across various
     ■      Retrospective consent: The Rules have not
                                                                                  processes, systems, applications, third parties, etc.
            provided clarity on what consent obtained prior to
            commencement of the Act will be acceptable as valid               ■   Consent and notice management: Prepare consents,
            consent i.e., whether implied consent with a fresh notice             cookie banners, cookie policies and privacy notices to be
            would suffice, or should it be an explicit valid consent for          implemented across touchpoints, where personal data
            specific purposes along with a fresh notice.                          is collected
     ■      Timeline for Data Principal Rights and grievance                  ■   Privacy impact assessment: Identify data privacy
            redressal: The Rules have not prescribed any time-                    risks by performing privacy impact assessments
            period for Data Fiduciaries to address the rights of                  for processing activities and define controls to be
            Data Principals. Additionally, the Rules have given                   implemented for mitigation
            Data Fiduciaries the option to specify the time for their
                                                                              ■   Third-party risk management: For third parties
            grievance redressal system.
                                                                                  processing personal data, ensure organizational and
     ■      Requirements for cross-border data transfer: The Rules                technical security measures are implemented through
            have not specified any list of countries with restriction             inclusion within contracts and strong
            on transfer of personal data along with instruments                   governance practices
            to be put in place for such cross-border data transfer.
                                                                              ■   Technical safeguards: Identify and implement the
            Any such requirements shall be specified by the central
                                                                                  required technical safeguards to ensure protection of
            government by general or special order.
                                                                                  personal data from data breaches
                                                            29
                         Generative AI: Data-driven
        5                insights for the future
     GenAI in India: New vectors of disruption                             This will rapidly begin to augment and in some
                                                                           cases replace the current app-based point and
                                                                           click model. Over time, one can even imagine an
     India’s GenAI landscape is rapidly evolving,                          LLM dynamically generating the UI based on the
     characterized by unique market dynamics and                           context of the transaction.
     a burgeoning ecosystem of innovation. Unlike
     developed markets, India’s GenAI trajectory is                        This is already beginning to happen. More than
     shaped by its vast and diverse population, a                          one-third of Google searches in India are voice-
     young and tech-savvy workforce, and specific                          based, a stark contrast to just 5% in developed
     socio-economic challenges. In this chapter, we                        markets. This growing preference for voice
     explore five key vectors driving GenAI disruption                     interaction is evident in initiatives like the
     in India, highlighting both the tailored adoption of                  AskDisha chatbot by CoRover, which supports
     global solutions and the emergence of indigenous                      ticket bookings on the IRCTC app through voice,
     products and solutions designed to meet                               chat, and point-and-click interfaces. Similarly, the
     local needs.                                                          National Payments Corporation of India (NPCI)
                                                                           has pioneered solutions such as Hello! UPI, which
                                                                           enables transactions via simple voice commands.
                                                                                                                31
     How business strategies could differ for India 1 and India 3
        Industry             Digital model                      India 1 strategy                        India 3 strategy
                                                   Personalized investment management,        AI-based micro-lending, regional
                                                   AI-driven wealth advisory, predictive      language support in financial apps,
                            Fintech                analytics for portfolio performance        voice-based banking interfaces
                                                                                                                 33
     How GenAI models amplify overall system capabilities
           Construction             Recommendation
                                                                     Financial                                   Industry
             project                engines in online                                     Education
                                                                     services                                  4.0 + GenAI
           management                  commerce
         Advanced project             In e-commerce,              Loan applicants      Adaptive testing        GenAI combines
            management               images — such as          interact with GenAI-       has evolved           traditional ML
            software now              those of a living         powered chatbots          with GenAI,            models with
        incorporates drone         room — are analyzed          to provide detailed   extending beyond          diverse inputs
         footage to assess           using multi-modal           information and        multiple-choice          like workers’
         construction sites.        vision models. The           answer follow-up      to include long-       logs and product
          GenAI processes              interpretations             questions. The      form subjective          manuals. This
          this visual data,           inform classical             collected data        answers. This        fusion enhances
         providing insights                ML-based               is processed by        advancement               predictive
           that integrate            recommendation                traditional ML      allows for more           maintenance
         with traditional AI       engines, suggesting           models, refining       comprehensive        strategies, leading
        models to enhance               optimal décor             credit decision-       assessments,        to more informed
          project oversight              options from            making processes     tailoring question       decisions on the
            and decision-               catalogs. This             and improving        difficulty based         factory floor
               making.                    integration             accuracy in risk        on previous            and reducing
                                         improves the               assessment.         responses and              downtime.
                                        relevance and              The ensemble       providing a deeper
                                     personalization of             significantly       understanding
                                    recommendations.              reduces time to          of student
                                                                      decision.           capabilities.
     AI/ML techniques, classical programming, and                            all of these through traditional AI and GenAI to
     external tools like internet search APIs. This                          deliver personalized recommendations for each
     approach marks a big shift from relying solely                          doctor, including tailored product suggestions,
     on monolithic models to employing multifaceted                          comparisons to regional peers, and relevant
     systems that leverage the strengths of various                          disease trends.
     components.
                                                                             The evolution of Compound AI systems signifies
     GenAI exemplifies this paradigm by enhancing                            a transformative approach in AI, where the
     existing systems across diverse industries. Rather                      integration of GenAI with traditional methods
     than serving as standalone solutions, GenAI models                      leads to more robust, efficient, and intelligent
     are increasingly embedded within traditional AI                         applications across various sectors. As this trend
     and ML processes, creating synergistic effects that                     continues, we anticipate the development of
     amplify overall system capabilities.                                    innovative products that harness the combined
                                                                             strengths of these technologies, driving significant
     Compound AI systems are already prevalent today.
                                                                             advancements in their respective fields.
     A leading Indian pharmaceutical company relies
     on its field sales force to engage doctors and
     share product updates. Leveraging their extensive
     datasets such as visit logs, doctor feedback,
     prescription patterns, and local disease insights,
     which is a mix of quantitative and qualitative
     data. The revamped sales app now leverages
250
                   200           gpt-4-32k
$/million tokens
150
                         gpt-4
                   100
                                                                gpt-4-turbo
                   50                                                                           gpt-4o        gpt-4o-mini
                    0
                         4/1/23              7/1/23   10/1/23            1/1/24            4/1/24             7/1/24
                                                                                                         Source: Elad Gil on X
                                                                                                                                 35
     05 The evolution of an Indic AI
        ecosystem
                                                                           The global AI community has also expressed keen
                                                                           interest in Indic languages. For example,
                                                                           Abu Dhabi-based G42 introduced Nanda, a Hindi
                                                                           LLM trained on 2.13 trillion tokens, aiming to
     A lot has been said about India being the use case                    empower over half a billion Hindi speakers with
     and data capital of the world. With more than                         GenAI capabilities. Similarly, BharatGen, the first
     700 million connected consumers and the lowest                        government-funded multimodal LLM initiative,
     data rates in the world, India will play home to                      focuses on creating efficient and inclusive AI
     many sunrise industries that will seek to infuse AI                   tailored to Indian needs. Tech Mahindra’s Project
     at scale across their business models. There is also                  Indus further advances the development of Indic
     now a significant focus on integrating AI into India                  foundational models, beginning with Hindi and
     Stack to buttress its already strong digital public                   its over 37 dialects, bridging linguistic gaps for
     infrastructure. Will India see an Indic AI stack with                 enterprises. TWO.ai, another notable player,
     tools that compete with global offerings and is                       has introduced SUTRA, a multilingual AI engine
     relevant in an enterprise context?                                    supporting over 50 languages, including Hindi and
                                                                           Gujarati. SUTRA is designed to power immersive
     The race to build Indic LLMs and agents                               AI experiences that extend beyond text and voice,
                                                                           addressing India’s linguistic diversity effectively.
     One significant area of focus has been the
     linguistic diversity of India — there has been a                      AI4Bharat, a research lab at IIT Madras, has
     mushrooming of Indic LLMs that leverage                               been instrumental in advancing Indian language
     open-source models fine-tuned with Indian                             technology. Their contributions include extensive
     language datasets. A key initiative in this space                     open-source datasets like IndicCorp v2 and tools
     is Bhashini, a government-led AI project aimed at                     that underpin the growing Indic LLM ecosystem.
     creating an open-source Indic language dataset to                     Despite these advancements, challenges persist.
     expand internet and digital service accessibility in                  The lack of robust datasets across India’s diverse
     Indian languages. By facilitating content creation                    languages affects the training and performance
     in languages like Hindi, Tamil and Bengali, Bhashini                  of these models. Data often requires significant
     is democratizing the benefits of AI for India’s                       cleaning and processing to ensure usability, while
     multilingual population.                                              concerns about responsible data use, privacy, and
                                                                           ethics remain pressing. Initiatives such as Project
                                                                           Vaani, a collaboration between IISc and Google
                                                                                                                37
       Large funding deals in the GenAI in India
                                                                                                                            41
     capital investment is also provided through Credit Guarantee          Shaping the future: Digital transformation in
     Fund Trust for Micro and Small Enterprises (CGTMSE) in                India’s manufacturing sphere
     the form of collateral-free loans for MSMEs. In addition,
     the Ministry of Heavy Industries and Public Enterprises,
     Government of India, has launched SAMARTH Udyog Bharat                The infusion of digital technology is reshaping India’s
     4.0, with an aim to promote Industry 4.0 adoption through             manufacturing sector, with MSMEs at the heart of this
     Smart Manufacturing Demonstration Centres (SMDCs). So                 transformation. The integration of IoT, AI, cloud computing,
     far, five such centers have been established.                         robotics, and 3D printing is helping small manufacturers
                                                                           enhance efficiency, improve product quality, and compete in
                                                                           global markets.
     Challenges and suggested solutions                                    Start-ups are playing a vital role in making digital solutions
                                                                           accessible and affordable for MSMEs, while government
                                                                           interventions, along with initiatives like Make in India, are
     Despite the immense potential, MSMEs face several                     driving large-scale adoption.
     challenges in adopting digital technologies. These include:
                                                                           As India aspires to become a $5 trillion economy, the
     High implementation costs: Many small enterprises lack                modernization of its manufacturing sector will be key. By
     the capital to invest in advanced technologies such as AI             fostering innovation, strengthening policy support, and
     and robotics. The government can expand subsidies and                 addressing adoption challenges, MSMEs can emerge as
     incentives for technology adoption, thereby reduce the cost           global leaders in smart manufacturing, propelling India
     of capital. Promoting shared infrastructure using pay-per-            towards becoming a world-class industrial hub.
     use models can also reduce costs.
     1.   Lack of a skilled workforce: Over 60% of MSMEs
          lack employees trained in digital tools, limiting their
          ability to implement new technologies. Government-
          funded digital skilling programs should be expanded
          in collaboration with industry leaders. Start-ups can
          develop low-code/no-code platforms to reduce the skill
          barrier for technology adoption.
     2.   Cybersecurity concerns: Increased digitalization
          exposes MSMEs to cyber threats, necessitating
          robust security measures. MSMEs should be provided
          with cybersecurity awareness programs and easy-
          to-implement security tools. Government schemes
          can offer additional financial assistance for adopting
          cybersecurity measures.
     3.   Limited Awareness and decision-making challenges:
          Many MSMEs are unaware of the right digital
          technologies for their needs and struggle with decision-
          making. Industry associations and government
          bodies can conduct regular outreach and awareness
          campaigns. AI-driven recommendation platforms
          can guide MSMEs on technology adoption based on
          business needs.
                                                                                                                                45
     and reduce waste, while blockchain ensures transparency in            A call to action for emerging digital
     supply chains. Companies that embed sustainability into their         transformations
     digital strategies will not only meet regulatory requirements,
     but also appeal to environmentally conscious consumers
     and investors.                                                        To navigate digital transformation effectively, adopting a
                                                                           ‘start small, scale fast’ approach is key. Begin with focused
     4.   Decentralized marketplaces                                       pilots, assess their success, and quickly scale proven
                                                                           solutions across the organization. This roadmap provides
     Blockchain technology is giving rise to decentralized                 a clear, phased strategy to guide businesses from initial
     marketplaces that eliminate intermediaries, reduce costs,             assessment to sustained digital leadership.
     and enhance trust. These platforms enable peer-to-peer
     transactions, making it easier for MSMEs to access global
     markets. Additionally, decentralized finance (DeFi) solutions         Below is a phased approach tailored for industry leaders,
     are democratizing access to capital, empowering smaller               MSMEs and traditional companies:
     players to scale their operations without traditional
                                                                           Phase 1: Assess and strategize (0–6 Months)
     banking constraints.
                                                                           1. Conduct a digital readiness assessment:
     5.   Edge computing and 5G networks                                   ■   Evaluate current digital maturity levels across
                                                                               processes, technologies, and workforce skills
     The proliferation of edge computing and 5G networks will
     transform how data is processed and utilized. By enabling             ■   Identify gaps and areas of opportunity
     real-time insights at the source, these technologies will
     enhance applications such as autonomous vehicles, remote
                                                                           2. Define clear objectives:
     healthcare, and smart manufacturing. For industries reliant
     on speed and precision, edge computing offers a competitive           ■   Align digital initiatives with overarching business goals
     advantage, reducing latency and improving decision-making.                (e.g., cost reduction, revenue growth,
                                                                               customer satisfaction)
     6.   Human-AI collaboration                                           ■   Set measurable KPIs to track progress
     The future of work lies in collaboration between humans and
     AI. As AI takes over repetitive and mundane tasks, human              3. Build leadership buy-in:
     workers can focus on higher-value activities like strategy,
                                                                           ■   Ensure top management understands the importance
     creativity, and problem-solving. This shift will lead to a more
                                                                               of digital transformation and commits resources.
     productive and engaged workforce, driving innovation across
     sectors. Upskilling employees to work alongside AI will be            ■   Appoint a Chief Digital Officer (CDO) or Transformation
     crucial for organizations aiming to maximize this synergy.                Leader to oversee the initiative.
                                                                                                                                47
      Notes
Ernst Young LLP is one of the Indian client serving member firms of EYGM
Limited. For more information about our organization, please visit www.
ey.com/en_in.
EYIN2502-024
ED None
SA1
www.cii.in
cii.in/facebook