Content by Geetha Nandikotkur

Panel: How Automation Enhances Detection and Response

Geetha Nandikotkur  •  November 8, 2022

When it comes to advanced threat response, most financial institutions say their current abilities are average. Only one-third say automation is crucial to how they identify and respond to threats. This panel of APAC and ANZ experts analyzes the state of security automation in financial services.

Identifying the 'Unknowns' With Purpose-Built Sensors

Geetha Nandikotkur  •  September 8, 2022

Today's big challenge for practitioners is identifying the "known and unknown" attack surface faster than the hackers. There is a need to build purpose-built sensors and asset management strategies to discover unknown attacks, says Debashish Jyotiprakash, vice president - Asia at Qualys.

Establishing User Authentication Using Blockchain

Geetha Nandikotkur  •  April 11, 2022

Security leaders are leveraging blockchain's decentralized approach to establish user identity, as it is designed to ensure the correction of transaction through reliable sources that help to contain fraudulent transactions, says Edmund Situmorang, CTO at Prodigi, Sinar Mas Group.

Profiles in Leadership: Sujit Christy

Geetha Nandikotkur  •  March 16, 2022

Sri Lanka-based Sujit Christy, group CISO at John Keells Holdings PLC, says his passion is empowering security practitioners with the right skills and knowledge and ensuring they speak the right language. He discusses cybersecurity adoption and enablement.

Need for Hyperautomation to Implement Cybersecurity Controls

Geetha Nandikotkur  •  January 31, 2022

In 2022, CISOs need to build an adaptive and cyber-resilient enterprise through hyperautomation in order to implement any kind of cybersecurity controls, says Vishal Salvi, CISO and head of the cybersecurity practice at Infosys.

Increase in Ransomware in 2022 Will Kill Cyber Insurance

Geetha Nandikotkur  •  January 28, 2022

As ransomware threats continue to grow in 2022, cyber insurance companies have clearly stated that they do not want to talk about the "cyber" part of insurance, says Sri Lanka-based Sujit Christy, group CISO at John Keells Holdings PLC.

Profiles in Leadership: Shaik J. Ahmed

Geetha Nandikotkur  •  January 18, 2022

To fight threats, security practitioners need to develop a proactive, offensive risk quantification strategy to establish cyber resilience, says Shaik J. Ahmed, vice president of risk, governance and information security at Mashreq Bank.

A Structured Response to the Log4j Vulnerability

Geetha Nandikotkur  •  January 17, 2022

"We came up with a structured, documented approach to respond to mitigating the Log4j vulnerability using the EDR scanning tools along with a code validation, containerization, and sandboxing of our applications and networks," says Ian Keller, security director at Ericsson.

Using CASB to Establish User Access, Control of Critical Assets

Geetha Nandikotkur  •  January 5, 2022

Applying cloud access security broker’s three functionalities - API-level integration with managed device transfer for visibility, in-line CASB for proxy and other devices, and its control over cloud and other access points - helps provide better control and the ability to protect and secure user access, says Thomas...

Securing Artificial Intelligence Products Against Cyberattacks

Geetha Nandikotkur  •  December 22, 2021

CISOs need to harden the algorithms written for artificial intelligence, as cybercriminals always leverage AI to launch a zero-day vulnerability, says Manojkumar Parmar, technical global program director at Bosch.

Multifaceted Extortion Rising in Southeast Asia in 2022

Geetha Nandikotkur  •  December 2, 2021

The Southeast Asian region will see a spike in multifaceted extortion with more public breaches, along with an increase in ransomware-as-a-service operations in 2022, says Singapore-based Yihao Lim, principal intelligence adviser at Mandiant Threat Intelligence.

Using Behavioral Biometrics to Secure Against Digital Fraud

Geetha Nandikotkur  •  December 2, 2021

A risk-based approach to secure against digital fraud requires putting in the correct security controls in proportion to the organizational risk, which is determined by understanding the customer's subconscious habits, says Australia-based Tim Dalgleish, senior director, a global advisory, at BioCatch.

Profiles in Leadership: Steven Sim Kok Leong

Geetha Nandikotkur  •  November 23, 2021

CISOs need to be open to ideas and suggestions from their peers and other functions and exhibit thought leadership to establish collective defense thinking in fighting threats, says Steven Sim Kok Leong, president of ISACA, Singapore chapter and chair of OT-ISAC Executive Committee.

Implementing an IAM Framework for a Hybrid Workforce

Geetha Nandikotkur  •  November 19, 2021

A comprehensive IAM program requires integration with HR and legacy systems to enable multifactor authentication, SaaS, and Identity-as-a-Service to provide secure user access and a secure user experience, says Hong Kong-based Varun Kakkar, group head of cybersecurity at Tricor Group.

Enterprise Backups Are Becoming Targets for Cybercriminals

Geetha Nandikotkur  •  October 29, 2021

In ransomware attacks, cybercriminals attack through the backups because they know that security practitioners rely on backups to save themselves after a ransomware attack. Therefore, it is essential to have multiple backups, says Tom Kellermann, head of cybersecurity strategy at VMware.