Priyadarshi Prasad

We're bringing Endpoint Inspector SaaS to Amazon Web Services (AWS) Marketplace, helping businesses collect and analyze #data faster to best protect their organizations.    Cellebrite’s role in the Amazon Partner Network helps customers reduce risk, boost collaboration and lower costs. Offering this solution from our Case-to-Closure platform to millions of active AWS customers worldwide is critical to allow more people to deploy it simply and quickly.       Using AWS #cloud infrastructure, Endpoint Inspector SaaS will empower secure, real-time data access from a range of remote devices – without compromising on consent and #security. Read more from Cellebrite Enterprise Solutions: https://lnkd.in/d9Cc7Tfd

127

4 Comments

Struggling to understand the NIST CSF 2.0 framework? Download your copy of this guide to access an in-depth mapping of BeyondTrust solutions to the categories and sub-categories outlined in the NIST CSF 2.0 guidance, the CSF Reference Tool, and more! In this comprehensive free guide, you'll learn: 💡 The true impact of NIST CSF 2.0 across the cybersecurity landscape 💡 A breakdown of what's new and what’s changed in version 2.0 💡 How to increase your alignment to the framework Download now and strengthen your security posture. https://lnkd.in/ghyxyGFu #NIST #NISTFramework #Compliance #Cybersecurity #BeyondTrust

5

Just read a fascinating blog on the implementation of Firewall as a Service (FWaaS) for SMEs by Sanjay Seth. 🛡️ An eye-opener on how small and medium-sized enterprises can leverage FWaaS for robust cybersecurity without huge expenditures. Definitely worth a read for anyone looking to enhance their company’s security infrastructure. #CyberSecurity #SMEs #FWaaS #TechInnovation

2

Don't miss this insightful interview of Sanjeevi Kumar, Sales Lead India at Saviynt, as he discusses the strategic role of identity management in driving business success across the region. You can read the complete interview here https://lnkd.in/giJ9MdEC #Saviynt #IdentityManagement #DigitalTransformation

12

Hi Everyone! I'll be hosting a panel discussion on "The Advent of AI: Adapting to Emerging Threats and Balancing The Offensive and Defensive" at BSidesGoa this weekend! If you're attending the conference, be sure to stop by for this insightful discussion. It would be great to catch up and chat about AI in cybersecurity! Cyware Security BSides Goa #BSidesGoa #AI #Cybersecurity

50

1 Comment

RBI's stance on OTP usage and their emphasis on principle-based authentication, which is certainly shaking things up in the authentication landscape. A pertinent resource for deeper insights can be found in the article authored by Nilesh Dhande, titled " RBI says no to OTPs & releasing new guidelines on principle based authentication (https://lnkd.in/duhFZjnc)

28

CISOs - please don't squander your earned trust on dubious purchasing decisions. I cannot verify the veracity of this article, but even the mere premise of CISOs receiving kickbacks for their security product purchases is deeply disturbing. As a profession, we have worked too hard to earn trust and credibility, and can't have our decisions second-guessed. If you are doing this, then please stop. Say no to kickbacks and declare any conflict of interests / recuse yourself from any purchasing decisions 🙏🏼 https://lnkd.in/gXgfkvd3

6

Thanks Samrita Baruah Dr.Deepak Kumar Sahu and VARINDIA for amplifying our cybersecurity platform story with your readers of technology and channel.

27

1 Comment

Clause 6 of ISO 42001 is essential for compliance executives to effectively manage risks and opportunities in AI systems. Here are my thoughts on the key requirements and how to address them: 1. Address Risks and Opportunities (6.1)   - Identify AI risks and opportunities considering internal and external factors (6.1.1)   - Establish AI risk criteria to assess and prioritize risks (6.1.1)   - Conduct AI risk assessments to identify, analyze, and evaluate risks (6.1.2)   - Perform AI system impact assessments to evaluate potential consequences on individuals, groups, and societies (6.1.4)   - Develop AI risk treatment plans to mitigate identified risks (6.1.3) To comply, integrate AI risk management into your overall risk framework. Establish processes for regular AI risk and impact assessments, and document and implement risk treatment plans based on the results. 2. Set AI Objectives and Plan (6.2)   - Define measurable AI objectives that align with your AI policy and support organizational goals   - Determine resources, responsibilities, and timelines for achieving AI objectives To meet these requirements, collaborate with stakeholders to set specific, measurable, achievable, relevant, and time-bound (SMART) AI objectives. Allocate necessary resources and assign clear responsibilities for achieving these objectives. 3. Plan Changes (6.3)   - Ensure changes to the AI Management System (AIMS) are carried out in a planned and controlled manner Establish a robust change management process for the AIMS. This should include impact assessments, communication protocols, and documentation requirements to minimize disruptions and maintain the integrity of your AI governance framework. 💡 Key Takeaways 1. Adopting a risk-based approach is crucial for effective AI governance. Regular AI risk and impact assessments help prioritize mitigation efforts and allocate resources appropriately. 2. Aligning AI objectives with your AI policy and organizational goals ensures that AI initiatives are strategically focused and contribute to overall business success. 3. Managing changes to the AIMS in a controlled manner is essential to maintain the integrity and effectiveness of your AI governance framework. 🚀 Next Steps - Integrate AI risk management into your existing risk framework to ensure a comprehensive approach to risk governance. - Work with relevant stakeholders to define clear and measurable AI objectives that support your organization's strategic goals. - Develop a well-defined change management process for the AIMS, including impact assessments, communication protocols, and documentation requirements. By focusing on these key aspects of Clause 6, you can establish a strong foundation for responsible AI deployment and ensure compliance with ISO 42001 requirements. Proactive planning and risk management are essential for the long-term success of your AI initiatives. #ISO42001 #AIGovernance A-LIGN #TheBusinessofCompliance #ComplianceAlignedtoYou

11

With the acute shortage of security talent and limited budgets, our customers have consistently relied on our managed services teams for incident analysis and response. IncidentIQ Copilot unlocks new possibilities, helping customers avoid burnout and stay ahead of evolving threats like LLM injections, DDoS, bot, and complex API attacks

40

1 Comment

Clause 8 of ISO42001 focuses on operational planning and control to effectively manage your AI systems. See below for what compliance executives need to know. 📋 1. Plan and Control AI Operations (Clause 8.1) ✅What to do: - Establish criteria and processes for AI system development, deployment, and monitoring - Implement controls determined through risk assessment and treatment (see Clause 6) - Monitor effectiveness of controls and take corrective action if needed ❓What to think about: - How do our AI operations align with organizational objectives and policies? - Are our AI operational processes well-defined, documented, and understood? 🔍 2. Conduct Regular AI Risk Assessments (Clause 8.2) ✅What to do: - Perform risk assessments at planned intervals or when significant changes occur - Follow the risk assessment process defined in Clause 6.1.2 - Document and retain risk assessment results ❓What to think about: - How frequently should we conduct AI risk assessments based on our context? - Do we have the necessary expertise and resources to perform comprehensive assessments? ⚠️ 3. Implement AI Risk Treatments (Clause 8.3) ✅What to do: - Execute the risk treatment plan developed under Clause 6.1.3 - Verify effectiveness of risk treatment options - Review and update treatment options if risks change or treatments are ineffective - Document risk treatment results ❓What to think about: - Are our risk treatment options aligned with our risk appetite and tolerance? - How can we ensure risk treatments remain effective over time? 📊 4. Perform AI System Impact Assessments (Clause 8.4) ✅What to do: - Assess impacts of AI systems on individuals, groups, and society per Clause 6.1.4 process - Conduct impact assessments regularly or when major changes are proposed - Retain documented information on impact assessment outcomes ❓What to think about: - What are the potential unintended consequences of our AI systems? - How can we engage relevant stakeholders in the impact assessment process? 📝 5. Maintain Documented Information (Clause 8.1) ✅What to do: - Ensure appropriate operational planning and control documentation - Provide evidence that processes are carried out as planned - Control changes to operational processes and review unintended change consequences ❓What to think about: - What level of documentation is necessary to demonstrate operational control? - How will we manage and communicate changes to our documented processes? 👥 6. Manage Supplied Processes, Products and Services (Clause 8.1) ✅What to do: - Ensure externally provided processes, products and services are appropriately controlled - Apply operational controls to outsourced AI system components and services ❓What to think about: - How do we extend our operational controls to suppliers and partners? - What criteria should we use to evaluate and select external providers? For help getting started, please reach out! #ISO42001 A-LIGN #TheBusinessofCompliance #ComplianceAlignedtoYou

9

📣 Announcing Whiterabbit: A Cybersecurity Venture Studio Building the Future of Security I've partnered with Nir Polak (former founder & CEO of Exabeam) to create https://whiterabbit.vc. ## Who We Are 🚀 Whiterabbit is a venture studio assisting dreamers in turning ideas into industry-leading companies ## Why We Created Whiterabbit Because we believe in being more than just investors. While traditional VCs invest money and offer advice, we're founders and operators at heart. Our mission is to actively create and build cybersecurity companies from the ground up, not just invest in them. We're here to transform ideas into industry-leading companies by rolling up our sleeves and doing the work alongside passionate founders. We believe the best companies solve the most annoying and seemingly benign problems. We love starting from the smallest idea and pulling the string to create something amazing - that's how greatness is born. ## Who We're Not ❌ A VC investing in existing teams and companies ❌ An accelerator for an existing company ## What We Do ✅ Partner with passionate founders to build next-generation cybersecurity companies ✅ Identify and validate the right problems to solve in the cybersecurity industry ✅ Accelerate the process from ideation to acquiring customers ✅ Leverage our extensive network and reputation to help startups rise above the noise ✅ Assemble exceptional founding teams by attracting the best talent ✅ Work closely with founders, immersing ourselves in the challenges they face ✅ Write a $5m+ first check into the company ## We're Looking For 🔍 Passionate people who love cybersecurity and want to create companies to solve real problems 🔍 Advisors who deal with problems everyday and wished there was a solution to it no matter how big or small #Whiterabbit #Cybersecurity #VentureStudio #StartupInnovation #TechEntrepreneurship

1,001

125 Comments

When the SolarWinds and Codecov breaches unfolded, Ashish Kurmi and I were driving CI/CD security initiatives at our previous employers. The glaring lack of security in CI/CD pipelines that these incidents highlighted compelled us to start StepSecurity. We looked around, spoke with peers, and realized there was no solution to prevent such CI/CD attacks. So, a couple of years back, we started building our product in the open and offered it for free to help secure CI/CD pipelines for open-source developers. Little did we know that it would be the beginning of something special. 🎉 Today, we are thrilled to announce that StepSecurity has secured $3 million in seed funding to protect CI/CD pipelines for open-source communities and enterprises. This round is led by Runtime Ventures (David Endler and Michael Sutton), with participation from Inner Loop Capital (Justin Label), SaaS Ventures (Collin Gutman and Seth Shuldiner), DeVC (Aakash Kumar and Divyanshi Chowdhary), and several notable industry leaders as angel investors, including Anmol Malhotra, Ash Devata, Ashish Popli, David B. Cross, Deepen Desai, Kamal Shah, Lucas Moody, Prabhdeep (PD) Singh, Rinki Sethi, Sekhar Sarukkai, and Travis McPeak. 🚀🚀

404

79 Comments

CISO Desires checklist I can't grant desires like Lucifer but maybe I can help. DM me. Contact me to hear how we helped H**C reduce CWE density by 90%, P*****e to hit PCI audit goals while reducing CWEs 89% & F****v reduce Mean Time To Remediate (MTTR) by over 50% through real-time training in their commonest vulnerabilities. Our Customer Desires: Comprehensive and tailored security training programs for developers. Seamless integration of security into the software development lifecycle. Access to actionable threat intelligence and incident response capabilities. Collaboration and knowledge sharing among security professionals and developers. Adoption of secure coding frameworks and automated security testing tools. Clear governance and accountability for security responsibilities within the organization. Proactive identification and mitigation of security risks throughout the development process. Continuous monitoring and improvement of security posture across the organization. Investment in cutting-edge security technologies and solutions. Alignment of security objectives with business goals and priorities.

4

The shift from reactive to proactive cybersecurity has long been a priority for security professionals, and now, a solution is finally on the horizon. With the rise of intelligent Threat Exposure Management technologies, organizations can now take proactive measures against potential threats. According to Gartner, by the end of 2026, 40% of organizations will have already adopted intelligent and continuous Threat Exposure Management technologies. Exposure Management gathers findings from vulnerability management and other attack surfaces, applies active threat intelligence, and provides prioritized actions for maximum impact. It's time to take action and secure your organization with Exposure Management. Has your organization already looked into this game-changing technology? #dontgetexposed #exposuremanagement #withsecure

17

This partnership marks a pivotal moment in the automotive industry. This not only helps dealerships with encrypted digital exchange but ensures the safeguarding of sensitive information and streamlining business operations with Botdoc. KPA is the leader in compliance solutions. Our team is geared up to support the auto industry given the recent and ongoing cyber attacks. Its not just about compliance but rather BEING compliant to protect the consumers information against attacks. Our teams values align, our mission is in unison to educate dealerships on #cybersecurity and compliance. This brings us together as a cohesive team. #automotive #compliance #FTCsafeguards #innovation #technology #future #futurism #productivity #management #education Federal Trade Commission Our teams are ready to help: https://lnkd.in/g9JyWTBn

27

1 Comment

RSA 2024 Takeaway: AI or Die 🥵 Met dozens of CISOs, execs & founders at RSA this week. Quick observations: 1️⃣ Every vendor is AI-fying their pitch. They're leveraging AI/LLMs for various use cases - threat intelligence, SOC automation & more. Impressed by Google Cloud, CrowdStrike & Microsoft Azure security offerings with lots of LLM-powered automation across their stack 🤖 2️⃣ The other side of AI adoption? Security / Compliance / Safety. Many pitches around securing AI systems & data. AI safety will be a hot topic for a while. Congrats to Reality Defender Ben Colman for winning the RSA Conference Innovation Sandbox 👏 3️⃣ Enterprises are shifting towards unified security stacks driven by cost, simplicity & agility needs - EDR + ASPM + CNAPP + SIEM +...all-in-one. This'll trigger a new wave of acquisitions by major players like CrowdStrike, Palo Alto Networks, Zscaler, Wiz, SentinelOne. While there are many innovative exciting startups, I'm afraid most exits may be below $500M. 4️⃣ Critical infrastructure security is gaining more attention due to rising geopolitical threats. This is an urgent national security matter. I'm super proud to be an early investor in Eclypsium, Inc.. They are the MOST innovative critical infrastructure security platform for enterprises. 💪 (cc Yuriy Bulygin Alex Bazhaniuk) 5️⃣ Identity is the new perimeter. Loads of innovation here. A non-human identity layer is emerging rapidly. Cerby showcased many exciting product updates to secure new vulnerabilities in the identity stack. Watch this space 👀 Share if I miss others. #RSAC2024 #cybersecurity #IAM #EDR #SIEM #CNAPP #ASPM #criticalinfrastructure #supplychainsecurity #ai #ml #llm #largelanguagemodels

79

10 Comments

Another great wrap-up of #RSAC. If you’re in the identity market, this podcast is a must listen. Simon Moffatt and David Mahdi continue to provide shrewd insight on identity news and the every episode. This one is no different.

7

1 Comment