Compliance Framework for RBI master directions for NBFC
Problem Statement Customer was required to adhere to RBI Master Directions IT Framework for NBFCs before 30th June 2018 Services Delivered Value Provided
Maturity Model Assessment for Leading Indian logistics Company
Problem Statement Customer wanted an independent and objective assessment of Information Security against ISO 27001:2013 ISMS, to understand the gaps and opportunities for enhancing the security posture. Services Delivered Value Provided
Top 5 Benefits of Cloud Infrastructure Security 2023
Fifteen years ago, cloud infrastructure was a new and untested concept. Today it is the dominant form of data storage and computing services. With this shift, cybercriminals have also found ways to make their attacks more effective for smaller organizations. To prepare for the coming year, we have compiled 5 benefits of cloud infrastructure security […]
Five Board Questions That Security and Risk Leaders Must Be Prepared To Answer
Executive leaders of organizations and board members are ultimately responsible for ensuring the long-term security of their organization, and it helps in mitigating cyber risks. As board members realize how critical risk and security management is, they ask leaders more nuanced and complex questions. Interest in security and risk management (SRM) is all-time high at […]
New Year 2021 Resolution for the CISO
Wish you all a very happy 2021 and be a year filled with success, good health, and happiness to you and all your loved ones. With the year 2020 and the pandemic overwhelming us, we must be conscious of the increase in cyber security threats that are looming in front of us. Here are a […]
Best Practices For Conducting Cybersecurity Audits In Crisis Situation
Providing insights in the changed risk and opportunity landscape Global situations relating to the COVID-19 pandemic have impacted the business and has also impacted the work of auditors. The current situations challenge the conventional methods adopted for an audit. The current uncertainty and unpredictability may create risks of material misstatement in the audits. There anyone […]
Privilege Escalation by Exploiting WordPress Vulnerability
Introduction WordPress is a free and open-source PAAS structure that is being used by millions across the globe as a content management system. Its features include the integration of various plugins and themes. Also, there are many vulnerabilities associated with the plugins and themes being used within WordPress to date. According to the statistics, 73.2% of […]
Blockchain Implementation in Cyber Security and Cyber Forensics
Introduction Blockchain is an emerging technology that is quite popular nowadays due to the popularity of cryptocurrency. Apart from blockchain being used in cryptocurrency, it is also marketed as a cure for a lot of things including cybersecurity. Blockchain is considered to be a nearly impenetrable technology as by design, blockchain is resistant to modification […]
Malvertisements
Introduction Malvertisements are malicious advertisements distributed in the same way as legitimate online advertisements. It is one of the common practices to use spread malware. Cybercriminals use the advertising strategy by pretending as legitimate campaigns. Those malvertisements will either attempt to download malware directly onto visitor’s systems/devices or redirect visitors to websites meant to spread […]