- Gartner client? Log in for personalized search results.
Gartner Expert
Khushbu Pratap
VP, Team Manager
Khushbu is VP team manager of cybersecurity experts specializing in cloud security and infrastructure protection within Gartner's business and technology insights business. Her team delivers marquee insights on thriving in hybrid environments by securing the network edge, developing zero trust strategy, and identifying right-fit network segmentation approaches. They also deliver evidence-based measurement to threat prioritization and securing web applications in the cloud. She has spent over a decade advising CISOs and CIOs, senior leaders, and board members on practical implementation of risk management strategy. As an analyst, she researched cyber risk quantification, role evolution in risk management, risk-based security compliance initiatives and risk management across the cloud. Areas of interest were third party due diligence, risk roll up into ERM, Board reporting and risk narratives. She's authored/co-authored over 50 publications on risk, audit, compliance, and program management and spoken at Gartner security summits, CIO Association of Canada, and Factor Analysis of Information Risk Conference among many others. When not working on client initiatives, her time is dedicated to improving the work environment for her teams and beyond. Most recently, she is Americas lead at Mosaic - Gartner's employee resource group. Mosaic fosters an inclusive community bringing together associates and allies from multiple cultures, racial and ethnic backgrounds, generations and life stages - recognizing commonalities and celebrating differences.
Previous experience
As Research Director within Gartner's Adaptive Resilience, Trust and Risk Management group, Khushbu led the firm's cyber and IT risk management research and advised C-suite executives in designing fit-to-purpose risk management operating models. At the time Ms. Pratap's focus and interest were in organizations' risk expression journey and application of quantitative risk models to digital environments. As such through researching these journeys and combining her consulting and audit experience she spoke to simplifying and scaling risk decision making. She is a recognized speaker at Gartner and industry events and is known for invoking "purpose" and "action" in risk strategy.
Prior to joining Gartner, Ms. Pratap led the governance, risk and compliance division at a boutique consulting firm called Network Intelligence (India) (also called NII Consulting), managing and servicing key customers. Her experience at NII covered risk assessments, IT assurance, IT service management (ISO 20000), Information Technology Infrastructure Library (ITIL), security and IT audits, business continuity management (BS 25999 and other guidelines), information security management systems (ISO 27000 series), Payment Card Industry Data Security Standard (PCI DSS), COBIT, COSO, and IT governance. Key accounts she worked with included Bahrain Telecommunications, Amdocs Managed Services, World Customs Organization, Capgemini India, Atos Origin, m-Check Payment Solutions, ICICI Prudential and HSBC Mutual Funds.
Professional background
NII Consulting, Practice Lead, Governance, Risk and Compliance Division, 6 years
Gartner, Director/Senior Director, Analyst, 7 years
Gartner, Principal/Senior Principal Research, 3 years
Areas of coverage
-
Cyber Risk
Education
M.S., Information Technology, Mumbai University
B.S., Information Technology, Mumbai University
Certified Information Systems Auditor (CISA)
Certified Business Continuity Management Systems Lead Auditor (BS 25999 LA)
Certified Information Security Management System Lead Implementer (ISO 27001 LI)
Top Issues That I Help Clients Address
Setting up IT risk management functions - people, process, and technology
Quantifying Cyber Risk
Navigating roles, accountability, outcomes in risk management
Scoping risk assessments and continuous monitoring
Adapting and automating risk operations to digital environments