Page 23 - Information Security Edition Dec 2021

Throwing more light on the
information security landscape,
Ambrish Singh highlights how
the focus has predominantly
shifted on cybersecurity, unlike
earlier, where the assessment of
traditional IT infrastructure was a
norm.
Info Security Operational Trends
in the past couple of years
At present, the focus is on
c y b e r s e c u r i t y a s i t
organizations to prevent their
data and other assets from
being compromised. Before this,
the emphasis was primarily on:
Assessment of only Traditional
IT Infrastructure that further
left organization vulnerable.
Classification of vulnerabilities
by Severity of Data.
Key Business Priorities &
Challenges
Endpoint security along with
stringent controls on WFH
i n f r a s t r u c t u r e a s w e l l
protection against ransomware
and DR readiness, are some of
our key business priorities. Our
challenges are related to:
Identifying the attack surfaces
using proper mapping of the
asset with criticality.
December 2021
Ensuring best cybersecurity
practices are followed that
leaves no single system
unaudited.
Measures for de-risking of
investments
Risk will always be present, and it
is just the cognizance as well as
strong SOC that follows the
framework for mitigation with
the respective industry. Also, it is
in line with using a vulnerability
h e l p s
m a n a g e m e n t t o o l t h a t
incorporates threat intelligence,
s o y o u c a n a d d r e s s
vulnerabilities that have exploits
known to be available in the wild.
Addressing people-centric
challenges post WFH
As organizations saw the
challenge being posed by the
pandemic, they decided to
enhance the BYOD and VPN as
well as virtual workspace using
Citrix and other virtualized
platforms. This allowed them to
extend the application to their
a s
employees to support the
customer's need and better
experience as well as ease of
working from anywhere.
Expectations from
Cybersecurity Solution Providers
They must improvise upon
identifying the threats and -
mitigation if same without BAU
impact and risk detection with
data as well as real-time
analytics comprising-
Anti-money laundering-
Finding potential transactions
a n d p r o fi l i n g b a s e d o n
r e g u l a t i o n s l i k e
FATCA/FEMA/FERA, etc.
Conduct - Analytics engines
can identify suspicious sales
patterns, connecting dots
across sales, product usage,
incentives, and customer
complaints.
Cyber Risk- Machine learning
can analyze sources of signals,
identify emerging threats,
replace existing rules-based
triggers, and reduce false-
positive alerts.
Predictions for 2022 & Beyond
This new culture of WFH is going
to continue across industries
and will generate more market
for Cybersecurity products along
with SIEM and SOC. Also, there will
be a surge in ransomware
a t t a c k s , e s p e c i a l l y f r o m
extortion.