Azar Jamal

Get Started with Protecte Technologies with Col Subhajeet Naha, Retd, CISSP ISO 27001:2022 certification is within reach with Protecte Technologies. Contact us today to learn how we can assist with your ISO 27001:2022 implementation journey, addressing every stage from initial assessment to certification and beyond. For a detailed look at our services, please refer to our brochure below: [Protecte Technologies ISO 27001:2022 Implementation Services Brochure] Inside, you’ll find: - A breakdown of ISO 27001:2022 benefits for your organization - Detailed descriptions of our ISO 27001:2022 consulting services - Real-world examples of how we’ve supported clients in achieving certification - Contact information to begin your ISO 27001:2022 journey with Protecte Technologies Trust Protecte Technologies to turn your ISO 27001:2022 goals into a resilient information security framework. #ISO27001, #InformationSecurity, #CyberSecurity, #RiskManagement, #Compliance, #DataProtection, #ISOStandards, #SecurityChecklist, #RiskAssessment, #ISMS, #ContinuousImprovement, #SecurityControls, #ITGovernance, #Privacy, #DataSecurity, #SecurityCompliance, #ISOImplementation, #InfoSec, #ITSecurity, #SecurityBestPractices

9

2 Comments

Security Audit: How to prepare for Security Audit कैसे ensure करें सिक्योरिटी ऑडिट में जीरो NC Kindly watch this Video Subscribe Like Comment and Share https://lnkd.in/dBHYghqF

28

3 Comments

🇵🇰 Happy Independence Day, Pakistan! As we celebrate the freedom that defines our nation, it's essential to turn our attention to a new kind of independence—#CyberAzadi. In our increasingly digital world, ensuring cyber freedom is vital for the growth and success of Pakistan's IT and cybersecurity sectors. However, restrictions imposed by those who may be unaware or misinformed can impede our progress. I believe it's our responsibility to raise our voices in a respectful and informed manner, advocating for cybersecurity awareness and education. By doing so, we can protect our digital landscape and ensure that our businesses continue to thrive. Let’s unite to achieve true independence in the digital realm. Here's to a secure, prosperous, and thriving Pakistan—today and always. Share and comment so we can spread the calls to sanity. #PakistanZindabad #IndependenceDay #CyberAzadi #DigitalFreedom #AwarenessForChange #Pakistan

20

Threat Intelligence is a hot topic in Cyber Security and now a must for NIST CSF 2.0 and ISO27001:2022. A short but an informative document on Threat Intelligence for you. #isssuk

23

6 Comments

Every corporate aspires to maintain discipline in their processes and document policies that sometimes remain at their desktop. Falcon Eye Cyber Security launches a tool "Cyber Risk Guard for Risk Management, and Smart Comply" for Compliance Management, ISO 27001/ ISO 22301/ ISO 27701 that ensures assignment of risk to the risk owner of relevant department and provides an effective layer of governance to attain and maintain compliance. During the launch at ISNR 2024, Abu Dhabi we received a tremendously encouraging response from visitors and exhibitors alike. ISNR 2024, Abu Dhabi is the premier national exhibition for Cybersecurity and National Resilience and is attended by ministry officials and dignitaries from UAE, Middle East and Africa. #isnr2024 #Cybersecurity #digitalforensics #nationalresilience #grc #iso27001 #iso22301 #iso27701 #riskmanagement #iso31000 #NIST800 #compliancemanagement #iso17025 #digitalization #homelandsecurity #digitalizationinhomelandsecurity #sharingintelligence #intelligenceledpolicing #falconeyecybersecurity

12

Good morning, all! Paul Gogarty and I are proud to be presenting a #webinar on the #CAF guidance framework next week! Are you a power generation company? Do you work in the energy industry? Perhaps you are a site manager for a critical infrastructure facility; if so, you may need to be aligned with #CAF soon! See the link below on the ABB Process Automation post to register your interest 💻🤓

12

Systems Limited with Nevis Security of Switzerland bringing a Disrupt in Authentication Security. Bringing #FIDO password less authentication replacing legacy MFA for Financial Sector and Enterprise. #SystemsLimited #NevisSecurity #PICG #InformationSecurity

12

Effective Human risk management including but not limited to rewarding as apposed to retaliating and role based awareness training for employees in the organization could change them from demotivating narrative of weakest link to first line of defense and greatest ally and ambassadors for cyber security team in the business. I touched on some key aspects of security awareness training in this part of the podcast with MUHAMMAD ALI(CCIE,CISA,CISSP,PMP,TOGAF,AWS,Azure,SDWAN). #cybersecurity #securityawareness

45

6 Comments

Over the past few years, I've realized that the future battlegrounds won’t involve bullets, armed tanks, or traditional weapons. Instead, the wars ahead will happen in cyberspace, with digital threats and cybersecurity taking center stage. Catalyic Security CEO Farhan Mirza's latest podcast, Controlling Cyber Attacks and Digital Terrorism, explores this evolving landscape and our challenges. It's a must-listen for anyone concerned about the future of security. #CyberSecurity #DigitalWarfare #Podcast #TechTrends #FutureOfSecurity

15

Dealing with Procurement and the Rs 20,000/- VAPT Expectation: Apples vs. Grenades 🍏     In my journey in the cybersecurity world, I've encountered numerous instances where companies expect us to perform Vulnerability Assessment and Penetration Testing (VAPT) for a mere Rs 20,000/- while the industry standard is Rs 4,50,000/-. It's a classic case of comparing "Apples to Grenades." 🧨     In VAPT, you can't equate a thorough assessment with a rushed, budget option. It's like a ticking clock, and if you treat it like a mere apple, you might be safe for a while. But if you pull out that grenade pin, be prepared for an imminent explosion and potential career fallout, reminiscent of CISOs in major security breaches. 🕰     Here are some points I'd like to highlight when dealing with procurement teams fixated on cost:     1️⃣ Look beyond the price tag and consider the real value: A low-cost VAPT may lack the expertise, processes, and corrective plans that a professional, high-quality service provides. Don't compromise on security for short-term savings.     2️⃣ Avoid the temptation of bundling multiple services with one vendor: This might seem cost-effective, but it often leads to mismanagement, as each service has different requirements and standards.     3️⃣ Long-term thinking is crucial: Partners offering cheap services might not have your best interests at heart. They could cut corners, leading to potential future issues. Evaluate their intentions and capabilities carefully.     4️⃣ Take ownership of your decisions: If a security breach occurs, it's on you and your procurement team. Your choices will determine whether your organization stays secure or faces a crisis.     5️⃣ Research the average industry costs: Don't just rely on the cheapest offer; consider the value, experience, and trustworthiness of your security partner.     6️⃣ Understand your partner's motivations: Some partners offer reduced rates due to long-term relationships or budget constraints, not subpar quality. It's vital to assess the reasons behind their pricing.     In a world where cyber threats are ever-evolving, security is not a place to cut corners. Let's aim for a robust, apples-to-apples comparison in VAPT, rather than risking the security of our organizations. 🍏🔒     #Cybersecurity #VAPT #Procurement #SecurityMatters #CyberSmithSECURE #SmithGonsalves Santosh Khadsare

140

12 Comments

Risk management is an important area of cybersecurity. It is about understanding what makes up risk, vulnerabilities and threats, and using that understanding to develop the necessary standards, procedures, policies, and deploying the necessary technical controls to protect you and your business.

6

Threat Modelling: A Crucial Step for Network Re-engineering For complex digital environments, safeguarding sensitive data and systems against cyber threats is critical, particularly for organisations within the BFSI sector. Attackers often target core enterprise applications and their underlying infrastructure, exploiting vulnerabilities that can cascade across interdependent systems. Thus, managing cybersecurity within enterprises is an ongoing and dynamic task, requiring continuous adaptation to changing environmental conditions. For organizations planning network re-engineering for enhanced security and regulatory compliances, conducting a thorough threat modelling exercise is vital: Defining Scope: Use data flow diagrams to outline the architecture and data movement. Identifying Critical Assets: Pinpoint key components and entry points within the network. Assessing Trust Levels: Understand the different levels of trust across systems and users. Threat Identification and Categorization: Apply relevant methodologies to identify and prioritize potential threats. Mitigation Strategy: Based on a detailed risk assessment, determine countermeasures and proactive solutions. By embedding threat modelling into the network redesign process, organizations can not only identify and address potential vulnerabilities but also align security efforts with business goals, ensuring a resilient and compliant digital transformation. #DigitalTransformation #CyberResilience #RiskAssessment #SecurityCompliance #ThreatModelling                                                  

13

What a SOC is made of A Security Operations Center, also referred to as SOC, consists of five main roles including: Investigator, Analyst, Auditor, Responder and Manager. Together, the team can identify security risks and act swiftly to neutralize them. Call us today on 0333 0508789 to learn how a SOC can provide your business 24/7 threat monitoring. #SOC #Kaseya #RocketCyber #CyberSecurity #MSP #Essex #immersiveit

12

Summary of Cybersecurity Incident at City Bank PLC In early 2025, City Bank PLC experienced a cybersecurity breach, exposing sensitive client financial statements , which were later found being sold on underground forums. The Bangladesh Cyber Security Intelligence (BCSI) identified the breach, attributing it to s ession management flaws that allowed attackers to bypass Multi-Factor Authentication (MFA). Key Findings: * Attackers exploited a session handling vulnerability , allowing unauthorized access to customer statements without sending One-Time Passwords (OTPs) . * The breach was traced to a " Statement Portal " glitch on January 2, 2025 , which let attackers access known account numbers . * City Bank addressed the issue promptly , revoking access, terminating bypassed sessions, and deploying real-time monitoring through their Security Operations Center (SOC) . * The bank assured customers that no financial transactions were compromised and implemented stronger security measures to prevent future incidents. BCSI’s Analysis: BCSI had previously warned City Bank in mid-2024 about potential exploitation risks . However, the breach indicates inadequate follow-up actions on those warnings. The breach highlights the critical importance of strong session management practices, proper MFA implementation , and 24/7 security monitoring for financial institutions to prevent future incidents. Action Steps Taken by City Bank: * Revoked unauthorized access and sessions . * Strengthened SOC monitoring and portal security . * Committed to preventing similar breaches through continuous system improvements. This incident underscores the urgent need for proactive cybersecurity measures across financial institutions to protect client data from evolving threats. https://lnkd.in/gkHk6r8P

24

2 Comments

Moderated a very powerful panel in International Infosec Conference having representation of financial, telecom and security services sectors. Topic: Challenges around embracing Cloud Esteemed panelists were of the view that embracing cloud provide right set of agility and security. Inherent risks, might not hinder growth of the cloud. Qasim Shafiq - Head Cyber Security Jazz, Michael Maier - CTO HBL Syed Fahd Azam - Meezan Bank Limited Kashif UlHaque - Cisco Mohamed Shenawy - Forcepoint Zekeriya Eskiocak - System Engg - Palo Alto Networks Hats off TOTAL Communications on hosting InfoSec_2024 Conference. #Cyber #Secuirty #cloud #cloudsecurity #managesecurityservices #availability #agility

445

27 Comments