Anish Mitra is a Partner in KPMG in India's Cyber Defense & Incident Response practice with over 15 years of experience helping organisations strengthen cyber resilience across Operational Technology (OT), Artificial Intelligence (AI), Post Quantum Cryptography and enterprise security domains. He leads KPMG in India's OT Security capability and is a member of KPMG International’s Global OT Security Core Committee, Global Quantum Security Working Group driving the development of cybersecurity strategies and services for critical infrastructure, energy, manufacturing, healthcare, and financial services organisations.
Anish specialises in adversary simulation, red teaming, exposure management, and AI security. He has led complex red team exercises and threat-led security assessments for global enterprises, enabling organisations to evaluate their ability to detect, respond to, and recover from advanced cyber threats. In the AI security domain, Anish advises organisations on securing AI and machine learning systems throughout their lifecycle. He has led AI security assessments, governance reviews, threat modeling exercises, and adversarial testing engagements across industries, helping clients address emerging risks associated with large language models (LLMs), generative AI platforms, and AI-enabled business processes.
Throughout his career, Anish has advised multinational corporations, critical infrastructure operators, and public-sector organisations on cyber strategy, security transformation, incident preparedness, and regulatory compliance. He is a frequent speaker at industry forums and executive briefings and regularly contributes thought leadership on topics related to OT security, AI security, cyber resilience, and emerging cyber threats. He has extensive experience designing and implementing exposure management programs that combine attack surface management, threat intelligence, vulnerability prioritisation, and security validation to help organisations focus on the risks that matter most. His work enables security teams and executives to move from reactive security operations toward continuous, intelligence-led cyber resilience.