All Articles

What Actually Drives Pentest Pricing

Penetration testing quotes vary by an order of magnitude for what looks, on paper, like the same deliverable: "a pentest of our application." The variance is not random or purely a function of vendor markup. It co

Security teams are stretched thin right now. Threats don't wait, alert volumes keep climbing, and operators are expected to stay razor-sharp through brutal 12-hour shifts. Here's a number that should genuinely alarm you: after just 12 minutes of cont

As healthcare will become increasingly digitized, the upward push of connected clinical devices—normally called the Internet of Medical Things (IoMT)—is revolutionizing patient care. From wearable glucose monitors and pacemakers to smart infusion pum

In today’s fast-paced healthcare environment, efficiency, accuracy, and speed are more important than ever. One critical area where many healthcare providers face bottlenecks is the prior authorization process. Prior authorization, or prior auth, is

Welcome to the March edition of CISO Platform Highlights – your quick snapshot of the most insightful content, expert conversations, and community updates from the world of cybersecurity leadership.

This month, we explored one of the industry's most

Cybersecurity is on the brink of significant transformation as we approach 2025, grappling with escalating complexities driven by advancements in technology, increasing geopolitical tensions, and the rapid adoption of AI and IoT. In this blog, I’m ex

In the rapidly evolving landscape of data protection and cybersecurity, the India Privacy Act stands as a significant legislative milestone. To shed light on its nuances and implications, CESO platform recently hosted a panel discussion featuring

In an era marked by Shadow IT, hybrid working models, and rapid digitization, the landscape of cybersecurity is constantly evolving. With countless potential attack surfaces and vulnerabilities, organizations must prioritize understanding the unkn

In both the US and Canada, financial institutions face heightened regulatory demands, with regulators emphasizing the need for standardized cybersecurity practices and enhanced digital resilience. This blog explores the evolving regulatory landsca

Our community members Prabhakar Ramakrishnan (CISO, TNQ Publishing) and Dr. Jagannath Sahoo (CISO, Gujarat fluorochemicals) are speaking on “Digital Personal Data Protection (DPDP): Practical Approaches For CISOs”

The bill aims to protect individual

Multi-cloud? What it really means?  Is it really another approach towards risk segregation towards ensuring resilient IT infrastructure? We have seen a lot over last few decade. How IT evolved and we realised that enough is not enough. And indeed, da

There have been reports in media that the government of India has sounded an alert with all the top banks, and instructed them to inform about any breach in their IT systems within 120 minutes as the firewall against cyber hackers is strengthened in

Applying Auto-Data Classification Techniques for Large Data Sets

In the current data security landscape, large volumes of data are being created across the enterprise. Manual techniques to inventory and classify data makes it a tedious and expensive

Building an Effective Supply Chain Security Program

We’ve realized that the supply chain in most organizations is a potential weak spot for security controls and awareness. The time has come to shore up our approaches to supply chain management, inc

Designing Virtual Network Security Architectures

With the advent of virtualization and software-defined networking (SDN), the nature and design of today’s networks are changing rapidly. Network security models need to adapt to the virtual data cente

The effectiveness of cyber security portfolio of an enterprise depends on multiple factors.  Efficient Vulnerability Management Program is one of the critical parameters to be considered. Considering the dynamic nature of the attack vectors, it is im

Each application has several security settings that do not fit into any of the critical issues groups mentioned in our series of articles.Among such settings there are both standard settings (such as password length or the number of attempts given to

ISO 27001 certification in brief

• ISO 27001 formally specifies a management system that is intended to bring information security under explicit management control.
• Being a formal specification means that it mandates specific requirements.
• Organizati