Preeti Singh

Good to see regulators taking stringent action against non-compliance. For two consecutive years, the bank was assessed to be deficient in its IT risk and information security governance, the RBI said. During subsequent assessments, it was non-compliant with corrective action plans issued by the RBI in 2022 and 2023. #compliance #riskmanagement #kotak #auditing

29

2 Comments

Another small write up on the evolving Cyber Threats and Growing Security Opportunities in BFSI sector. From the recent learnings and evolving threats, the entire globe is getting triggered by various cyber crimes/ data breaches and facing high challenges in protecting their Data. Based on the increasing uncertainties, It's always important to understand the current threat landscape, analyse and adapt to the growing technologies by enabling the right set of security controls to be resilient in nature. Have shared some of my views here in this article. Thank you INDUSTRY 4.0 and the entire team for publishing this article Today! #Evolvingthreats #growingsecurityopportunities #emergingtrends #needforsecurity #beingresilient #securitymatters #continouslearning

34

5 Comments

I'm speaking at 20th Edition DataCenter Suummit & Awards 2024 on 𝗙𝗼𝗿𝘁𝗶𝗳𝘆𝗶𝗻𝗴 𝗗𝗮𝘁𝗮 𝗖𝗲𝗻𝘁𝗲𝗿 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆: 𝗔 𝗦𝘁𝗿𝗮𝘁𝗲𝗴𝗶𝗰 𝗔𝗽𝗽𝗿𝗼𝗮𝗰𝗵 𝘁𝗼 𝗥𝗲𝘀𝗶𝗹𝗶𝗲𝗻𝘁 𝗣𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻, stay tuned for more updates #ubsforums #datacentersummit #datacentersecurity

37

2 Comments

One cyber incident or data breach can lead to data loss of millions of data and people records. And, also have a strong impact on organisations financial and reputation loss. Cyber Security plays a very important part in the current threat landscape to protect the business and people from hackers. Understanding the importance of cyber security and business resilience, I have penned down some thoughts on "Why Cyber Recovery is Important"! #dataprotection #cyberresilience #datadriven #Privacymatters

16

1 Comment

Vulnerabilities in web applications have resulted in victim organisations incurring significant remediation expenses. S Kumar Subramania discusses the top 5 vulnerabilities discovered by K7’s VAPT team across numerous assessments of web applications, with mitigation measures. https://lnkd.in/dex_TkEj #vapt #vaptteam #webapplication #k7 #cybersecurity #brokenauthentication #paymenttampering #sqlinjection #crosssitescripting #xxs #middleeast

9

#Reporting #cyber fraud to the police is vital, as seen with Mumbai Police's recovery of Rs 100 crore and their resolution of 35,918 complaints. The #helpline #1930 has been instrumental, demonstrating that "prompt reporting empowers authorities to take swift action and protect victims." Read complete article below: https://lnkd.in/gNgYgeiU

18

#Resilience_by_Design_and_Its_Effective_Execution From past few days, i had been thinking about writing on Cyber resiliency. However, after watching the ICC T20 world cup final match between India vs South Africa yesterday, thought flashed through my mind about how INDIAN team resiliently handled the situation. When the Indian team was under attack by Klaasen (The Threat Actor) in the 14th and 15th over of the match, everyone thought that “Match to Gayi Hath Se”. But the magic happened in the 16th over, the way Indian team withstood to that attack is the testament of Resilience by Design and its effective execution. After the match, captain said in an interview 1️⃣👉 How he strategically managed the situation by using the right bowlers at the right time. 2️⃣👉 How continuous practicing helped team to navigate high-pressure situation. 3️⃣👉 How the involvement of each team player and support staff helped team to withstand in crucial situations. 4️⃣👉 How continuous collaboration and communication between team helped India to win. 5️⃣👉 How each boy’s stood up as a team and played their own game well. These principles are equally applicable while building cyber resiliency in an organisation. Many organisations are well equipped with state-of-the-art technologies, skilled people and robust processes to fortify their defences. However, to build true cyber resiliency, we should nurture the learnings from T20 world cup final: 🔶 Develop the strategies for unforeseen circumstances (attacks)and a comprehensive Cyber crisis management plan. 🔶 Don’t limit to cyber/information security team only, involve all stakeholders holders/departments/teams and clearly define their roles and responsibilities, process and SOPs. 🔶 Foster the habit of regularly practicing these plans (e.g. every quarter) by simulating scenarios like actual cyber attacks (any attack scenarios), so that everyone knows their part of job during crisis. 🔶 Establish effective collaboration and communication channel with each departments and teams. 🔶 Create an environment where everyone feels like part of one team and working towards one goal and guide them to play their roles effectively. By taking clues from the principles demonstrated in sport, organisations can fortify their defences and effectively navigate the complexities of today’s cyber threats landscape. #CyberSecurity #CyberResilience #CyberAttackSimulation

94

6 Comments

Keynote address by Narendra Nath Gangavarapu, Joint Secretary, National Security Council Secretariat, Government of India at the 2nd Edition of the ObserveNow Digital Bharat Cybersecurity Summit & Awards 2024. #ObserveNowCybersecurity #ObservenowMedia #Cybersecurity #DigitalBharat #GenAI #policymakers #industryleaders #DataProtection #ObserveNowGovernance #AI #ArtificialIntelligence #Security #Summit #NewDelhi

13

1 Comment

Looking forward to the CXO panel discussion with Industry Leaders

26

Key Highlights Massive Financial Loss: Over Rs 7,061 crore of Indian public money siphoned off in the first four months of this year High Volume of Complaints: More than six lakh complaints related to these cybercrimes have been received by the Indian Cybercrime Coordination Centre (I4C). Diverse Scams: Major scams include investment and stock market scams, digital arrests, fake gaming apps, and romance scams. Enforcement Actions: I4C and state law enforcement agencies froze debits from 3.25 lakh mule accounts, blocked over 3,000 URLs, and 595 apps under Section 69A of the IT Act. Telecom Measures: 5.3 lakh SIM cards and 80,848 IMEI numbers have been suspended since July 2023 to combat cybercrime. Money Transfer Methods: Cybercriminals use various means to transfer money, including cryptocurrency, cash withdrawals, physical gold, and international fund transfers. Sophisticated Operations: Cybercriminals employ deceptive strategies, using social media to lure victims with fake jobs and launder money through complex financial channels. #cybercrime #databreach #cyberattack CYTAD Innvikta Cybersecurity Solutions Pvt. Ltd. Rivedix https://lnkd.in/grpxdXit

33

2 Comments

“CISO fighting a battle alone is most likely to fail.. cyber governance is key to restructure risk management and making board and other stakeholders accountable. Make security top down.” - Rajesh Thapar at ETCISO annual conclave 2024 panel with Shivkumar Pandey #ETCISOAC24 #ETCISO #CyberRiskGovernance #RiskManagement

16

27 lakh complaints related to cyber fraud were registered in India last year. Unrecorded cases are much higher! Quick Heal’s AntiFraud can keep you safe. PreBook Today - https://lnkd.in/dgnbjDnM #AntiFraud #FightWithCyberFraud #ProtectYourDigitalLife

80

Exemplary service by Hyderabad Cyber Crime Cops and prompt reporting by the victim within the golden hour of cyber crime incident occurance helped preventing the fraudulent financial transaction. Hopefully the fraudsters will be traced soon. #cyberincident #ekycfrauds #incidentresponse #securityawareness

6

The Reserve Bank of India on 30 Apr 24 updated its "guidance note" on operational risk management for the financial sector, and also extended it to the NBFCs, including housing finance companies. The 2005 'Guidance Note on Management of Operational Risk' previously covered only commercial banks. One of the key changes carried out in the updated guidance note is that its applicability has been extended to all non-banking financial companies (NBFCs), housing finance companies, co-operative banks, and financial institutions, in addition to commercial banks. The 2005 guidance note, was applicable to only scheduled commercial banks. One of the major change vis-a-vis the Repealed Guidance Note dated October 14, 2005 is that It has separate Principles for mapping of internal and external interconnections and interdependencies, incident management, ICT, and disclosures whereas the older guidance was silent on the mapping of internal and external interconnections and interdependencies, incident management, ICT, and disclosures. Impact. ICT and Cybersecurity were categorised as Technology Risks earlier. With the change in categorisation to operational risks will bring in more scrutiny by boards and auditors. Banks have to priortise ICT and Cybersecurity as key levers to operations. Some financial companies have been impacted by RBI actions wherein they have been asked to stop operations or part of business due to lack of IT and Cybersecurity practices. I scrutinized some Annual Reports of impacted banks and could find their ICT or Cybersecurity spending either in Capex or Opex. Hopefully, with this guideline in place the security measures in place should improve and bring in more transparency for regulators, board, investors alike. https://lnkd.in/gphrCGgt

45

1 Comment

Kudos to SEBI (Securities and Exchange Board of India). SEBI in a landmark descision releases new cyber security framework CSCRF for regulated entities. The framework will be implemented in 2 phases, one set of entities has to ensure compliance by January 1, 2025, and another set by April 1, 2025. Post the given deadlines, the entities are expected to conduct cybersecurity audits as per the CSCRF and submit reports to the appropriate authorities within the stipulated timelines. CSCRF contains provisions with respect to various areas such as requirements of IT services, Software as a Service (SaaS) solutions, hosted services, classification of data, audit for software solutions/applications/products used by regulated entities etc. #SEBI # cyberresilence #cybersecurity #cyberawarenss #financialfraud Government of India #kudos Read more here 👇 https://lnkd.in/gaYVrE-F

33

1 Comment

Cybersecurity #breaches surge due to #skills shortage in India A whopping 92% of Indian organizations reported breaches last year, largely blaming the cybersecurity skills gap. Fortinet's 2024 Global #Cybersecurity Skills Gap Report reveals a startling link between cybersecurity breaches and skills shortages in India. A whopping 92% of Indian organizations reported breaches last year, largely blaming the cybersecurity skills gap. Additionally, 80% acknowledge that this gap escalates their cyber risks. John Maddison , Chief Marketing Officer at #Fortinet, stresses the need for a comprehensive strategy to tackle this issue. "Organizations must adopt the right security technology, upgrade skills through training, and build a cyber-aware workforce," he explained. Fortinet aims to train one million people in cybersecurity by 2026 and is on track, having already educated nearly half a million.

21

1 Comment

Modern Cybersecurity: Lessons from the Ramayana 1. *Lakshmana Rekha as Firewall*: Just as Lakshmana draws a protective circle around Sita to keep her safe from harm, a firewall in cybersecurity serves to guard data by filtering incoming and outgoing network traffic based on security rules. 2. *Ravana's Disguise as Phishing*: In the tale, Ravana deceives Sita by masquerading as a sage, similar to phishing attacks where cyber criminals disguise malicious links or emails as trustworthy, in order to steal sensitive information. 3. *Hanuman's Search for Sita as Data Recovery and Incident Response*: Hanuman's mission to find Sita reflects the critical roles of data recovery and incident response teams who work to retrieve and restore compromised data, while mitigating the damage from security breaches. 4. *Vibhishana as Insider Threat Protection*: Vibhishana switching sides to help Rama mirrors the need in cybersecurity to manage and mitigate risks from insiders who may have access to sensitive information and the potential to misuse it. 5. *Building the Bridge to Lanka as Secure Access*: The bridge to Lanka symbolizes secure access in cybersecurity, ensuring that only authenticated and authorized users can reach sensitive network resources. 6. *The Golden Deer as Social Engineering*: The golden deer that captivates Sita's attention can be likened to social engineering tactics where cyber attackers use attractive offers to lure individuals into traps, leading to potential security breaches. 7. *The Burning of Lanka as Network Penetration Testing*: Just as Hanuman sets fire to Lanka to create chaos and test its defenses, penetration testing in cybersecurity involves deliberate attacks on a system to identify vulnerabilities and ensure that defenses are effective. 8. *Jatayu’s Intervention as Intrusion Prevention System (IPS)*: Jatayu's attempt to stop Ravana from kidnapping Sita acts like an Intrusion Prevention System (IPS), which actively monitors for malicious activities and attempts to stop attacks in progress. 9. *The Vanara Army as Distributed Denial of Service (DDoS) Mitigation*: Just as Rama’s vast army of Vanaras helps him recover Sita, DDoS mitigation involves mobilizing multiple resources to diffuse traffic and protect target systems from being overwhelmed by attacks. 10. *Agastya’s Blessing as Encryption*: The blessing given to Rama by the sage Agastya, which empowers him to defeat his enemies, is similar to encryption in cybersecurity. Encryption acts as a powerful tool that encodes data, making it inaccessible to unauthorized users and thus protecting sensitive information.

48