Content by Suparna Goswami

Zero Trust Continuous Authentication: Getting It Right

Suparna Goswami  •  December 6, 2022

An important aspect of zero trust is continuous adaptive authentication, in which a user is authenticated continuously throughout the session, but implementing this technology poses many practical challenges. Three experts discuss ways to overcome technical issues and user resistance to change.

What India's Data Protection Bill Means for CISOs

Suparna Goswami  •  November 28, 2022

What does the latest version of India's data protection bill mean for CISOs, and what impact does it have on security practitioners? Khushbu Jain, advocate, of the Supreme Court of India, shares some of the fine print in the draft legislation and discusses some changes that CISOs may need to make.

India's Data Protection Bill 2.0: What Works, What Doesn't

Suparna Goswami  •  November 24, 2022

India's current Data Protection draft bill is a sea change from its earlier version. What works in the new bill and what does not work? Three experts share their views on the expected practical implementation of some of the requirements of the bill.

The Art of Doing More With Less in Cybersecurity

Suparna Goswami  •  November 23, 2022

As organizations look to consolidate security portfolios to reduce cost, the question in the minds of CISOs is: How can I do more with less? Iftekhar Hussain, principal product manager of cyber threat hunting with Microsoft India, discusses how to use AI and fewer tools to avoid manual work.

Authorized Payment Scams: Why Banks Are So Slow to Respond

Suparna Goswami  •  November 22, 2022

Banks are getting better at catching a wide range of scams targeted at customer accounts, but they are still struggling with stopping authorized payment fraud through peer-to-peer payment companies such as Zelle, says David Pollino, former divisional CISO with PNC Bank.

Cracking the Problem of Credential Stuffing

Suparna Goswami  •  November 18, 2022

Why is credential stuffing hard to solve? Are weak passwords the only reason behind credential stuffing attacks? Experts Sanjay Singh, head of DevSecOps at Games24x7, and Navaneethan M., CISO at Groww, explain how geo-based authentication, user behavior analytics and monitoring can detect breaches.

A Data-Centric Approach to Zero Trust Strategy

Suparna Goswami  •  November 17, 2022

How can companies take a data-centric approach to their zero trust strategy? Two experts - Scott Leach, vice president Asia Pacific at Varonis, and Maheswaran Shanmugasundaram, country manager for South Asia at Varonis - share why getting a handle on your data helps improve cybersecurity.

Modernizing the SOC to Meet Today's Threats

Suparna Goswami  •  November 17, 2022

CISOs today are dealing with many kinds of attacks, and the volume of activity is overwhelming employees in the security operations center, potentially leaving the enterprise open to breaches, says Manish Sinha, director of sales engineering at Trellix.

Addressing the Top Security Priorities of CISOs in India

Suparna Goswami  •  November 16, 2022

In India, ransomware attacks, phishing, botnets and nation-state attacks - including attacks on supply chains and critical infrastructure - are all on the rise. Plus, there's a huge cybersecurity skills gap. Terence Gomes of Microsoft in India discusses how the company addresses these issues.

Should Banks Be Held Liable for Authorized Fraud?

Suparna Goswami  •  November 11, 2022

The United Kingdom and many other countries are considering ways to make banks liable for authorized payment fraud and lift the burden from millions of victims of online scams. Trace Fooshee, strategic adviser at Aite-Novarica Group, shares his views on why this might not be such a great idea.

How to Balance Simplicity and Scale in Cybersecurity

Suparna Goswami  •  November 10, 2022

As businesses grow, a key challenge for CISOs is to scale security and at the same time keep it simple, says Jagdish Mahapatra, vice president, Asia, at CrowdStrike. Mahapatra shares the three tenets of cybersecurity for CISOs and how to mitigate the impact of cloud migration on security.

The Rise of Online Scams, Why New Security Tools Are Needed

Suparna Goswami  •  November 1, 2022

With fraudsters evolving their tactics and tricking a growing number of people with authorized payment scams, it's time for banks and security solution providers to explore new ways to protect consumers who are left holding the bag, says Ian Mitchell, managing partner at Omega FinCrime.

Tools to Reduce Authorized Payment Fraud and Scams

Suparna Goswami  •  October 27, 2022

Since Zelle fraud has increased 109% in the United States, the banking industry is struggling to reduce authorized push payment scams. Ken Palla, former director at Union Bank, shares tips for combating fraudsters, including delays on large transactions, education and behavioral analytics.

Banks on Alert for Check Fraud, Insider Fraud and Scams

Suparna Goswami  •  October 20, 2022

Fraudsters are using tried-and-true tactics such as check washing as well as Zelle scams and a host of insider threats to scam banks and their customers. Frank McKenna, chief fraud strategist at Point Predictive and author, explains why fraud is on the rise and the steps banks can take to stop it.

Sri Lanka Data Protection Act: How Companies Must Comply

Suparna Goswami  •  October 13, 2022

Earlier this year, Sri Lanka became the first South Asian country to pass privacy legislation, which will go into effect in 2023. ISMG talked to several privacy experts about the highlights of Sri Lanka's Data Protection Act and what companies are doing to comply with the new regulations.