Mallik Prasad

In the wake of the recent global outage, numerous phishing domains quickly surfaced to exploit the situation. 🔗 Check out Agnidipta Sarkar's must-read blog on the importance of breach readiness for maintaining business continuity amidst such vulnerabilities: 👉: https://bit.ly/3Slwplv To discover more about breach ready microsegmentation, reach out to us. #technology #outage #BeBreachReady #CyberSecurity #Microsegmentation

18

Pleased to announce that I'll be giving a keynote session at TechSommet on elevating the Zero Trust strategy in the age of AI. The goal of the session is to explore cutting-edge approaches to enhancing Zero Trust framework to meet the evolving needs of today's AI threat landscape. #security #iam #zerotrust #ai #aisecurity

154

16 Comments

📣📣 ICYMI: Saket Modi speaks to CRN about how SAFE is transforming third-party and first-party cyber risk management: https://lnkd.in/dBGumwCz Read the article to discover: 🚀 How #TPRM will change forever with Safe 🚀 Why companies need to revisit their cyber risk management strategy 🚀 How channel partners are set to play a pivotal role in Safe's growth trajectory Read the complete article: https://lnkd.in/dBGumwCz #cyberriskmanagement #cybersecurity#cyberrisk #cyberriskquantification

41

“I feel that today is when you should invest in breach ready segmentation, if you have not done it yet.” – emphasizes Agnidipta Sarkar, our VP and CISO Advisor on the recent global outage. Don’t miss to read this article with several experts voicing their opinions on the fiasco: https://bit.ly/3YyiBIh It’s time to think about breach readiness and we’re here to help you! #ciso #outage #BeBreachReady #CyberSecurity #Microsegmentation

28

If you’re at the Zywave Cyber Risk Insights conference today, look for me! I’ll be joining a panel at 1:45 to discuss whether we’ve reached a critical mass yet with data to adequately model and manage #cyberrisk. https://lnkd.in/dK2d3HHe

13

1 Comment

The report provides an in-depth analysis of the current cybersecurity landscape in India, revealing alarming statistics and trends. The study identified a staggering 369 million malware detections across an installation base of 8.44 million in India, highlighting the scale and intensity of cyber threats facing the nation. Notably, 85.44% of detections relied on signature-based methods, while 14.56% came through behavior-based detection, emphasizing the need for adaptive security measures. Vishal Salvi Vinayak Godse

3

Improving awareness is the first step in fighting cyber fraud. Thanks to Vishal Salvi for this excellent article and the work being done by Seqrite in fighting cyber fraud.

6

Join SecPod at the ET CISO Annual Enclave, which will be held from September 19th to 22nd, 2024, at the Novotel in Vishakhapatnam. You'll have the opportunity to network with like-minded security leaders and learn how SecPod's latest technology can improve your IT security risk posture. #ETCISOAC24 #secpod #cybersecurity #vulnerabilitymanagement #ciso #itsecurity #informationsecurity

9

𝗣𝗿𝗲𝗽𝗮𝗿𝗲𝗱𝗻𝗲𝘀𝘀 𝗶𝘀 𝗸𝗲𝘆 𝗶𝗻 𝗶𝗻𝗰𝗶𝗱𝗲𝗻𝘁 𝗿𝗲𝘀𝗽𝗼𝗻𝘀𝗲. Try this 𝗙𝗶𝘃𝗲 𝐬𝐭𝐞𝐩 𝐜𝐨𝐧𝐭𝐚𝐢𝐧𝐦𝐞𝐧𝐭-𝐟𝐨𝐜𝐮𝐬𝐞𝐝 𝐚𝐩𝐩𝐫𝐨𝐚𝐜𝐡 provided by our Digital Forensics & Incident Response Team. It might just change how you handle cyber threats moving forward. 𝗦𝘁𝗲𝗽 𝟭: 𝗗𝗲𝘁𝗲𝗿𝗺𝗶𝗻𝗲 how critical systems' availability impacts your business operations. Identify any financial implications. 𝗦𝘁𝗲𝗽 𝟮: 𝗘𝘀𝘁𝗮𝗯𝗹𝗶𝘀𝗵 explicit guidelines on who has authority to make containment decisions and document all key decision points in your incident response plan. 𝗦𝘁𝗲𝗽 𝟯: 𝗜𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁 effective isolation strategies, such as isolating affected systems or using EDR solutions to minimize network traffic while allowing continued investigation. 𝗦𝘁𝗲𝗽 𝟰: 𝗠𝗮𝗶𝗻𝘁𝗮𝗶𝗻 comprehensive documentation throughout the process to ensure every decision and action is recorded for future audit and lessons learned evaluations. 𝗦𝘁𝗲𝗽 𝟱: 𝗥𝗲𝗴𝘂𝗹𝗮𝗿𝗹𝘆 𝗲𝘃𝗮𝗹𝘂𝗮𝘁𝗲 and update your incident response strategies based on post-incident reviews to continuously improve your containment effectiveness. 𝗣𝗿𝗼 𝘁𝗶𝗽 𝟭: Pre-define when to isolate or shut down systems to avoid improvisation during a crisis. 𝗣𝗿𝗼 𝘁𝗶𝗽 𝟮: Clearly delegate decision-making authority to avoid ambiguity during containment processes. 𝗣𝗿𝗼 𝘁𝗶𝗽 𝟯: Keep your documentation precise to streamline post-incident analysis and future incident handling improvements. You can't control the nature of every cyber threat, but you can manage your response by being prepared and organized. Watch the full video → https://lnkd.in/erfxushf ---  🛡 I'm a blue team leader and proudly work for SecurIT360, an MSSP focused on cyber protection at every level. Follow, connect and make it tough for bad guys to succeed.

1

The European Union's Digital Operational Resilience Act (DORA) mandates heightened focus on third-party risk, resilience, and testing for financial entities. The new regulations bring technical controls ambiguity, necessitating a comprehensive understanding of cybersecurity frameworks for compliance. Organizations need to prioritize aligning with DORA requirements, enhancing their resilience strategies, particularly in assessing and managing third-party risks and conducting regular testing. Stay ahead by proactively addressing technical control challenges to strengthen operational resilience and maintain regulatory conformity in the evolving cybersecurity landscape.

2

💡 Do I need to report PKI maturity level? Reporting your PKI maturity level isn’t just a checkbox! 🛠️ While not mandated by the PKI Consortium, documenting your PKI maturity level can: 📈 Highlight your current PKI status to stakeholders 🚀 Pinpoint key areas for improvement 📊 Track progress over time effectively Depending on your organization's needs, regulatory requirements, or improvement goals, reporting might be essential. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Paul van Brouwershaven Leigh Bailey

9

1 Comment

Using a third-party service provider for payment forms doesn't mean you're off the hook for PCI DSS compliance. In this Imperva blog, we explore the new applicability notes introduced in PCI DSS 4.0.1 and their implications for requirements 6.4.3 and 11.6.1. #PCI #PCIDSS #PCI4 #CyberSecurity

5

Some CISO are in view of having dedicated OT SOC while some are in view of extending IT SOC . let's break down the considerations for having a dedicated OT SOC versus extending the capabilities of an existing IT SOC 1. **Cost**: - *Dedicated OT SOC**: Higher initial setup costs due to the need for specialized tools, training, and personnel. - *Extending IT SOC**: Lower initial costs as it leverages existing infrastructure and resources, but ongoing maintenance costs may increase. 2. **Resource and Skill Sets**: - *Dedicated OT SOC**: Requires personnel with deep knowledge of industrial protocols, OT systems, and control systems security. Specialized training and experience are crucial. - *Extending IT SOC**: Relies on leveraging existing IT security resources. Additional training may be required to understand OT environments and protocols. 3. **ROI (Return on Investment)**: - *Dedicated OT SOC**: Potentially higher ROI due to specialized focus, leading to better risk mitigation in OT environments. - *Extending IT SOC**: Lower upfront investment but may have limitations in addressing unique challenges and risks in OT environments, potentially affecting ROI in the long term. 4. **Challenges**: - *Dedicated OT SOC**: Integration with existing IT systems and processes may be challenging. Ensuring alignment with organizational objectives and culture can also be a hurdle. - *Extending IT SOC**: Adapting to the unique requirements of OT environments, such as legacy systems, proprietary protocols, and operational constraints, poses challenges. 5. **Technical Feasibility and Integration with OT Systems**: - *Dedicated OT SOC**: Requires deep integration with OT systems and protocols, which may be technically complex but provides tailored monitoring and response capabilities. - *Extending IT SOC**: Integration may be less complex initially, but ensuring compatibility with diverse OT systems and protocols can be a technical challenge. 6. **Security Monitoring Tools**: - *Dedicated OT SOC**: Utilizes specialized tools designed for OT environments, offering granular visibility and control over OT assets. - *Extending IT SOC**: May need to adapt existing security monitoring tools or invest in new ones that can handle OT-specific requirements. 7. **Regulatory Compliance**: - *Dedicated OT SOC**: Helps ensure compliance with industry-specific regulations and standards governing critical infrastructure and industrial control systems. - *Extending IT SOC**: Compliance may be more challenging due to the need to address OT-specific regulations and standards. 8. **SOC Use Cases**: - *Dedicated OT SOC**: Tailored use cases for detecting and responding to OT-specific threats, such as unauthorized access to control systems, process anomalies, and equipment failures. - *Extending IT SOC**: May need to develop or adapt use cases to address OT security concerns, which may not cover all OT-specific scenarios.

43

10 Comments

The Star Health incident reminds us that CISOs play a crucial role not only in securing the organization but also in shaping a culture of transparency and accountability. It's essential for security leaders to document their decisions and demonstrate due diligence in their efforts. By doing so, we strengthen the organization and safeguard the integrity of leadership. Strong communication and collaboration with the executive team can help ensure that security efforts are fully supported and visible, empowering CISOs to lead confidently in an evolving threat landscape. #CyberSecurity #CISO #RiskManagement #Accountability #Leadership

6

1 Comment

We can't just do this alone. Having a platform that allows our customers to deploy thousands of users in time periods previously unheard of in the PAM industry is one thing, but it takes thought leaders like Jitin to make those projects a reality. Imagine what you could do with a PAM tool that exceeded your expectations?

4

ROI isn’t always the best way to measure cybersecurity. In my latest blog, I explore why focusing on risk reduction, resilience, and compliance gives a clearer picture of cybersecurity’s true value. Com Olho #cybersecurity #InfoSec #bugbounty #security #cyberattack https://lnkd.in/gNGkyUNN

29

1 Comment

There’s so much to digest around this topic. Join a fun conversation on what’s fair play when trying to protect yourself and your organization.

18

Seven prime cybersecurity threats were identified in 2024, with threats against availability topping the chart and followed by ransomware and threats against data, and the report provides a relevant deep-dive on each one of them by analysing several thousand publicly reported cybersecurity incidents and events. 19.9.2024, last report

26

1 Comment

I often hear the question "Where/What are our biggest security exposures?" Cyentia Institute recently had the opportunity to explore this question using data from hundreds of thousands of attack path assessments conducted through the XM Cyber Continuous Exposure Management (CEM) platform. The attached figure gives a categorical breakdown of what we observed based on all entities (digital assets), total security exposures, and exposures affecting critical assets. . The left-most chart represents the attack surface based on broad categories of digital entities discovered during attack path assessments. Active Directory constitutes just over half of entities identified across all environments. On-premises IT and network devices account for another 31% of entities and cloud environments house the remaining 17%. Not all entities, however, are exposed via attack paths. If we change the scope of the attack surface to include only vetted exposures (entities susceptible to attack techniques), things look different. The middle chart captures this perspective and Active Directory exposures dominate the attack surface. But not all of those exposures affect critical assets. To be truly effective, Exposure Management must encompass all environments and account for where critical assets are most at risk. If we once again rescope the attack surface to focus on exposures to critical assets, a very different picture emerges, which is captured in the rightmost chart. Cloud environments now encompass over half of all critical asset exposures, followed by AD at 33% and IT/Network devices at 11%. Does this sync with exposures across your attack surface? Which perspective/view/chart is your primary guide for managing exposures? The full report contains tons of additional insights on exposure management. Download here: https://lnkd.in/dPfqXG7y #cybersecurity #exposuremanagement #cyberrisk

48

8 Comments