It is very important to properly define the right Information Security Metrics for an organization to estimate the security structure and to communicate it efficiently to the Board level executives.There is a growing interest from the Board and the C

CASB Workshop Part 2 by Gaurav Bhatia:

• Technology Taxonomy For Cloud Security
• Key Components of Cloud Security Architecture
• Blue Print To Build Your Cloud Security Program
• Basics of Cloud Security Access Brokers 

CASB Workshop Part 2 Video by Gaurav Bhati

Threat Intelligence Workshop by Bikash Barai:

• Key Components (People,Process and Technology)
• Threat Intelligence Maturity Model
• Threat Collection & Analysis
• Integrating Actionable Intelligence
• Technology & Vendor Landscape 

( Read More: Beyond Secure Softw

Webinar on "Defusing Cyber Threats Using Malware Intelligence" Video by Arun Lakhotia.

• How a Malware can be source of intelligence about the attacker
• How Large scale, automated malware analysis to extract intelligence is feasible
• How Malware intelligenc

CASB Workshop Part 1 by Bikash Barai:

• Technology Taxonomy For Cloud Security
• Key Components of Cloud Security Architecture
• Blue Print To Build Your Cloud Security Program
• Basics of Cloud Security Access Brokers

Network Forensic Tools & Techniques Workshop by Tamaghna Basu:  

• Introduction,Basic Protocol Analysis,
• Forensic Analysis Network/Web/Malware,
• Basic Packet Analysis Challenges

Network Forensic Tools & Techniques Workshop video by Tamaghna Basu:  

Application Security Workshop Part 1 by Jitendra Chauhan:

• Web Attack Chaining
• Understanding IAST/RASP
• Realtime Polymorphism

Application Security Workshop Part 1 Video by Jitendra Chauhan:

What Is Bad USB?

The phenomenon of using the USB for malicious intent can be termed as Bad USB. USB Thumb Drives are the last considerations of malicious intent. However, if manipulated, they can takeover almost everything.

Some interesting demonstra

Governance, Risk and Compliance is sometimes a managerial step or a mandatory step to adhere with regulations & maintain compliant systems. It widely helps in Risk Management.

Some of the major components of IT GRC are:

1. IT Policy Management
2. IT Risk

Free/Opensource Tools -

• IT GRC Asset Management
  Some functions can be used for technical controls to policy enforcement
  OTRS http://www.otrs.com/en/
  Redmine http://www.redmine.org/
  Mantis http://www.mantisbt.org/
• IT GRC Risk Management-
  GLPI http:

Here is a comprehensive checklist to Evaluate SIEM Vendors. We highly appreciate this community contribution.
by Sunil Soni, CISO, Punjab National Bank

Vendor Selection Framework For Integration Of Threat Intelligence With SIEM

Key Selection Cr

Here's a list of World's Best and Most Popular IT Security Conferences. Details such as Tentative Time, Pass Price and Locations are mentioned so you can plan your Calendar.

Top IT Security Conferences In The World:

1. Black Hat

Claims to be the mo

Technical Skills:

Major Areas Of Focus:

• Incident Response
• Computer Forensics
• Network Security
• Secure Architecture

( Read More: CISO Platform Top IT Security Influencers (Part 1) )

Conceptual (Understand How-It-Works):

• Fundamental security conce

The next Leap(26th leap) Second will be on 30 June,2015. The last one was on 30 June,2012.

What Is It?

Earth's rotation is slowing down around it's own axis, so we need to Leap a few seconds to catch up. Occasionally seconds are added to UTC to comp

CISO Platform Launches India’s First Ever Study Of The Salary Of Cyber Security Professionals

New Delhi, Bangalore, India, June 4, 2015: CISO Platform, an online community for senior IT Security Professionals announces the official launch of its co

Gaana.com, one of the  popular music streaming service got hacked. It is reported that 10 million username, email addresses, MD5-encrypted password, date of births, and other personal information has been stolen. 

It is reported by their CEO that the

We had a long and nice week at RSA Conference 2015 in San Franciso. Some of you might have missed the event or missed some of the good talks even though you were there. so we have handpicked the best of RSA  just for you.

Important Note:

• All presen

RSA expo floor is the madness that we love. The fringes are more interesting to me than the center. If you want to spot the new go to the fringes. We tried to have a bit of fun this year by analyzing the buzzwords as seen in the expo floor.

How we di

I am on my way back from RSA Conference 2015 @ San Francisco. It is a cloudy day at New York. Perfect day to write a quick blog. Here's my interpretation of Amit Yoran's talk with a bit of my thoughts poured into it.

Taller walls won't solve the pro

Watch Video: (Webinar) RIOT( Raiding Internet Of Things)

(Read more:  Annual Survey on Cloud Adoption Status Across Industry Verticals)

Quick Glimpse

Fairly technical content with demos where Jacob Holcomb speaks on Internet Of Things, Threat Mode