On 7th October 2022, Quantic India hosted the Cyber Security Excellence Awards – Mumbai Edition at Hotel Novotel, Juhu. The round table conference was a major success, as it gathered 200+ attendees from various fields of cyber security. It provided a platform for experts to share their knowledge and experiences in the domain. Speakers discussed a range of topics including GRC, Zero Trust Framework, Cyber Insurance, key management & Block chain Technology.
Key Highlights of the panel discussion:
- Creating a security culture is essential for the success of any organization. This can be achieved by providing employees with the right training and guidelines to ensure that they are aware of the security risks and principles associated with their function. Training should cover topics such as data protection, cyber security, physical security and information management systems in order to ensure that employees understand the importance of keeping confidential information secure both inside and outside the organization. Furthermore, having clear policies and procedures in place will help reinforce an apt security culture within all functions of the business.
- When it comes to application security, achieving compliance and balancing investment can be a difficult task. Compliance is essential for organizations to maintain security standards, but investing in the right AppSec resources can be expensive and time consuming. It’s important to find the right balance between compliance and cost-effectiveness when it comes to securing applications. Organizations should focus on developing an effective strategy that allows them to achieve compliance while also maintaining a reasonable level of AppSec investment.
- In order to ensure the safety and security of sensitive data, it is important to take a smart approach to protect it. This includes adopting stricter identity verification and authentication measures, such as two-factor authentication, as well as implementing encryption for stored and transmitted data. Additionally, organizations should strive to stay up-to-date with the latest technologies and practices related to secure transactions, in order to keep their data safe while allowing enough scope for new transaction practices.
- The API security tool market is constantly shifting and it can be difficult to determine who is responsible for API security. This creates additional challenges in detecting the expansive attack surface, as it requires more resources to stay up-to-date on the latest developments. Organizations must continuously review their security protocols and practices in order to remain secure against potential attacks. Ultimately, this means investing in reliable tools and services that can provide adequate protection against a range of threats.
- As the Unified Payments Interface (UPI) continues to be widely adopted across India, banks and payment providers are working hard to make sure that users can trust the platform with their transactions. To make UPI secure, they are upgrading security protocols and implementing measures to tackle the growing threat of fraud. These measures include the introduction of two-factor authentication in all transactions, dedicating teams to monitor suspicious activities on a daily basis, increasing user education and awareness around safe payments, and using analytics to detect any fraudulent attempts. All these efforts will help ensure that users have an experience that is secure and reliable.
- With the rising incidence of zero-day threats, unified endpoint management is an essential tool for staying safe. Such threats include unpatched software vulnerabilities, phishing, malicious ads, DDoS attacks, advanced persistent threats (APTs), and ransomware. Unified endpoint management provides a centralized platform for managing all endpoints connected to the network and keeping them up to date with the latest security patches and protocols. This helps organizations protect their data and systems from cyber-attacks and other security threats.
- AI and machine learning are becoming increasingly important in the realm of data security. These technologies act as a last line of defense, providing real-time detection for any signs of cyber threats. They also offer instant investigation capabilities to pinpoint the source of the attack and provide an immediate response to prevent any further damage. By leveraging advanced AI and machine learning algorithms, organizations can stay ahead of potential cyber risks and ensure their data remains secure.
- One of the biggest implementation challenges associated with DevSecOps is staying up to date with the latest security tools and best practices. As new technologies and threats emerge, organizations need to quickly adapt in order to remain secure and compliant. Furthermore, security teams must become more agile and be able to rapidly respond to any changes or vulnerabilities that arise which requires a shift in both processes and culture. Implementing DevSecOps requires an understanding of the entire system from development to operations, as well as how these components interact with each other, making it a complex process for many organizations.
- Automation can quickly detect and respond to malicious activities, enabling lean security teams to focus on other aspects of cybersecurity. Furthermore, automated solutions can also collect and analyze large amounts of data from across an organization’s systems and networks, helping CISOs better understand the threat landscape and make informed decisions about their security policies.
Expert Moderator for the Panel: Amit Patil – SVP & Head – Threat Management, IDFC First Bank
Our Eminent Panellists for the Panel:
- Prajit Nair – Director –SecOps, Dream 11
- Mathan Babu Kasilingam – Chief Technology Security Officer & Data Privacy Officer,Vodafone Idea Ltd
- Subramanian V – CISO, IDBI Bank Ltd.
- Dharmesh Rathod – Head of Cyber Security, Welspun Group
- Dhaval Kamani – Vice President & Head ISS (India), DBS Bank
- Vaibhav Tole – Global Director of Cyber Security, Cyient
The panel session was highly beneficial and provided a great opportunity to gain insight into the industry from experts & was also very informative, as the speakers gave us tips and advice that can be used in real-life scenarios to help us improve our skills and productivity. You can soon join us at the 2nd Annual Cyber Security Excellence Awards 2023 – Mumbai Edition.