Keeping the Big Wheels Turning: Inside Apollo Tyres' Cybersecurity with Mansi Thapar

The role of Chief Information Security Officer (CISO) has undergone profound changes, transitioning from technical expert to strategic advisor. Today, CISOs sit at a critical juncture, influencing business strategies and digital transformation initiatives. With global cybercrime expected to cost organizations around $10.5 trillion annually by 2025, the strategic importance of this role has never been clearer.

Gartner anticipates that by the year end, 40% of company boards will have a dedicated cybersecurity committee led by qualified experts, underscoring the critical nature of cybersecurity in the broader organizational framework.
In a recent interview, Mansi Thapar, Global Head – Cybersecurity & Infra at Apollo Tyres, provided insight into her expansive role, describing it as a "blend of strategic leadership, risk management, and technical expertise." Crucially, she positioned her role as bridging the gap between technical teams and executive leadership, turning cybersecurity from merely a defensive stance into a proactive business enabler.

Cybersecurity today means anticipating threats proactively, translating complex technical risks into clear business language, and aligning our security initiatives with the company's broader objectivesMansi Thapar, Global Head – Cybersecurity & Infra, Apollo Tyres

Indeed, the effectiveness of a proactive approach is validated by IBM’s Cost of a Data Breach report, which found organizations emphasizing comprehensive employee training and fostering a robust cybersecurity culture reduced breach-related expenses by 14%. Thus, fostering resilience through structured policies, rigorous incident response drills, and widespread organizational awareness is essential.The Three Cybersec Pillars
Thapar’s cybersecurity strategy rests firmly on three pillars: perimeter defense, internal controls, and organizational preparedness. She described how tools such as managed detection and response, Secure Access Service Edge (SASE), next-generation firewalls, and meticulous internal audits strengthen their proactive stance. Frequent penetration tests, vulnerability assessments, and rigorous certification processes underpin a continual state of readiness, allowing her organization to confidently face potential breaches.

Corroborating Thapar’s views on the importance of security assessments, PwC’s 2023 cybersecurity report reveals that organizations conducting regular penetration testing report significantly greater confidence in their cybersecurity posture compared to those that do not.Budgets and Investments: How Thapar Cracked the Code
Discussing budgeting, Thapar emphasizes the importance of framing cybersecurity as an investment rather than merely a cost center.

To convince the board, you must clearly link cybersecurity investments to measurable business outcomes, compliance needs, and strategic risk managementMansi Thapar, Global Head – Cybersecurity & Infra, Apollo Tyres

Deloitte's research goes on to support this – approximately 60% of executives now view cybersecurity as a critical driver of business value rather than simply an operational cost.

Looking ahead, Apollo Tyres plans significant investments in automated and AI-driven cybersecurity technologies, including Cloud Native Application Protection Platforms (CNAAP), Data Security Posture Management (DSPM), Kubernetes Security Posture Management (KSPM), enterprise browsers, and just-in-time access tools.

IDC forecasts global spending on AI-based cybersecurity solutions will surpass $40 billion by 2027, reflecting widespread corporate recognition of AI’s potential to enhance security operations and efficiency.

A Solid Support System
Despite the pressures inherent in the role, Thapar remains mindful of work-life balance, quipping, "My weekends see far fewer phishing attempts than my inbox." Underneath the levity, she emphasizes the importance of balance, particularly for women leaders in demanding roles. She credits her success to clear boundaries, effective delegation, mindfulness practices, and a solid support system at home.

Creating a collaborative, resilient workplace culture is also essential. "Cybersecurity is a team sport," she says, emphasizing that regular training, clear communication, cross-functional exercises, and continuous skill development build collective confidence. This preparation ensures teams can swiftly and effectively handle crisis situations.

Still, vigilance is unending. She wittily remarks, "Hackers don't respect 'Do Not Disturb' signs," but the reality is serious. Verizon’s 2023 Data Breach Investigations Report highlights ransomware and supply-chain vulnerabilities among the fastest-growing and most pressing threats for organizations.
Above and Beyond the Call of Duty
Thapar stresses on the transformative power of effective communication—skills in negotiation, storytelling, and collaboration. In her opinion, moving beyond technical jargon to relatable narratives tailored to different stakeholders positions cybersecurity as a strategic partner rather than a mere technical necessity.

Citing from experience, Thapar shares some best practices: “Use relatable analogies, real-world examples, and clear metrics to illustrate how security investments mitigate risks and drive business value.”

Effective negotiation, she adds, is built on preparation, empathy, and mutual understanding. “Start by identifying the priorities of each stakeholder and framing cybersecurity as a shared objective rather than a hurdle.”

Collaboration, in her definition, is about breaking down silos and building bridges across the organization. “Engage regularly with diverse teams, be it IT, legal, or business units to create a common language around security. Invest in cross-departmental training sessions and workshops that not only increase cybersecurity awareness but also promote a culture of joint problem-solving. By positioning yourself as both a technical expert and a strategic partner, you can transform cybersecurity from a reactive afterthought into an integral part of your organization’s strategy,” she advises.
Ultimately, today’s CISOs are strategic business partners, trust-builders, and enablers of growth and innovation. They are leading the charge in reshaping how cybersecurity integrates into the very fabric of organizational strategy in the digital age.