New Delhi, India – July 9, 2026 – EY India today unveiled its Cyber Performance Management (CPM) platform, marking a significant shift in how professional services firms approach cybersecurity. Described as the first integrated cyber platform developed by a professional services firm, CPM is designed to counter the rapidly evolving landscape of AI-powered cyber threats.
Murli Rao, Partner and Cyber Leader at EY India, emphasized that the launch reflects a strategic pivot for the firm. "We decided around two years back that we will change our DNA from a people-based economics to an intellectual property-based economics," Rao stated. He highlighted that customer priorities have shifted, with enterprises seeking integrated, intelligence-led solutions to reduce costs while managing complex threats, rather than fragmented point solutions.
Addressing the AI-Driven Threat Landscape
The advent of Artificial Intelligence has fundamentally altered the nature of cyberattacks. Rao noted that AI has significantly lowered the barriers to entry for sophisticated attacks. "Anybody can launch an attack today. You don't need specialised skills anymore," he explained, pointing out that AI reduces the time, effort, cost, and expertise previously required to compromise enterprise systems.
This paradigm shift necessitates a new approach to prioritizing cyber risks. CPM is engineered to identify the most effective intervention capable of breaking an entire attack chain, an innovative strategy Rao termed "breaking the patch cycle." Instead of patching every individual vulnerability, the platform focuses on strategic, high-impact fixes.
Integrated Capabilities and Client Benefits
The CPM platform integrates AI and cybersecurity capabilities to achieve several critical objectives:
- Identify exploitable vulnerabilities across an organization's systems.
- Map potential attack paths to understand threat vectors.
- Quantify business risk by translating cyber exposure into financial impact.
- Provide a real-time inventory of hardware, software, APIs, and AI assets, addressing a common lack of visibility for many organizations.
EY states that CPM integrates with over 50 security tools, while allowing organizations to maintain data sovereignty and operational control. The firm invested significantly in AI-driven cyber capabilities over the past two-and-a-half years, building dedicated engineering teams to develop the platform.
CPM is already deployed across eight Indian clients in sectors including banking, insurance, manufacturing, and pharmaceuticals. These early adopters have reported substantial improvements:
- 45-60% reduction in alert noise.
- 30-50% faster response times to incidents.
- 50-65% improvement in analyst efficiency.
- Up to a 55% reduction in total cost of ownership by consolidating multiple security tools.
Rao concluded that as AI makes cyberattacks faster and more autonomous, the future of the industry lies in platforms that seamlessly combine cyber intelligence with business decision-making. "Customers are looking for solutions here and now. That is the shift we are building for," he affirmed.