All Articles

Welcome to the April edition of CISO Platform Highlights – your quick snapshot of the most insightful content, expert conversations, and community updates from the world of cybersecurity leadership.

This month, we delved into the often-hidden journey

My deepest appreciation to all the incredible cybersecurity luminaries who joined The Cybersecurity Vault podcast last year! Your insights, expertise, and thought-provoking discussions made each episode invaluable for the audience and myself. I appre

The CISO Platform, celebrating its 15th year, began with a vision to unite cybersecurity leaders beyond mere networking to create tangible community goods. Originating from a Defcon experience where hackers collaborated openly, the platform aimed to

The discussion explores the complex dynamics between regulatory actions, cybersecurity practices, and the responsibilities of CISOs. It delves into the consequences of regulatory overreach on the industry and contrasts differing viewpoints on the rol

We had Chennai Task Force session on "Digital Personal Data Protection (DPDP): Practical approach for CISOs" by Our community members. The bill aims to protect individual data and regulate data practices. CISOs should be aware of the new requirements

The latest RBI circular highlights the importance of safety in digital payments. As a part of CISO Platform’s next  BFSI webinar in association with FireCompass, we covered how safety in digital payments is changing and what the new regulations me

Numerous organizations have moved hurriedly to change their workforces during the COVID-19 pandemic so they can work remotely, actualizing new instruments and frameworks now and again as per the requirements.

According to new data, a poll revealed t

There has been a good deal of publicized chatter about impending cyberattacks at an unprecedented scale and how Artificial Intelligence (AI) could help stop them.  Not surprisingly much of the discussion is led by AI vendors in the cybersecurity spac

[Posted on Behalf of Pushkal Mishra, AVP IT & CISO  HDFC ERGO Health Insurance Ltd ]

There has been a wide adoption of A.I. (Artificial Intelligence) in the last few years. You might have seen them in chat rooms or on companies’ websites providing y

Threat hunting or monitoring is the practice of actively seeking out cyber threats in an organization or network. A threat hunt can be conducted during a security incident, or pre-incident time to discover new and unknown attacks or breaches. Threat

Avast was recently caught selling user's web browsing data.  Sensitive data like website destinations, search terms, and even what videos customers watched were collected by Avast software residing on customers' computers.  The data was repackaged an

This blog lists out 6 key metrics to measure the maturity and effectiveness of your Data Loss Prevention (DLP) program. All the metrics are operational and can be measured quantitatively to help you fine-tune your DLP program.

• Number of policy ex

SIEM tool is among some of the most complex security tools to manage and operate. Here in this learn about the key parameters which you can track to make your SIEM tool more effective:

1. Percentage reduction in False Positives/Negatives over a spec

Almost all security research has a question often left unanswered: what would be the financial consequence, if a discovered vulnerability is maliciously exploited? The security community almost never knows, unless a real attack takes place and the da

Existing techniques for bypassing wired port security are limited to attacking 802.1x-2004, which does not provide encryption or the ability to perform authentication on a packet-by-packet basis [1][2][3][4]. The development of 802.1x-2010 mitigates

Time is of the essence when protecting your organization from complex cyberthreats. The clock doesn’t start when you have been breached—it’s always ticking. The board must articulate risk tolerances, management must set the strategy and IT must execu

Based on investigations of real-world attacks, Microsoft Office 365 cybersecurity experts provide a prescriptive approach to identifying and implementing the most critical security controls to protect your Office 365 tenant. You will learn threats an

Sophisticated Attacks vs. Advanced Persistent Security

It appears that any successful attack these days is labeled, Sophisticated. The implication is that the attacks were unpreventable. The reality is very different. We dissect recent attacks, and