CyberPWN Technologies

Cybersecurity advisory and consulting Services 
-Application Security services 
-GRC Transformation services 
-Data privacy services 
-Cloud Security services 
-Identify and access management services

Co-Founder & CSO

Cloud Security Alliance Bangalore Chapter

As a part of my role, I aim to encourage the adoption of Cloud Security best practices among various IT communities, including academia and industry.

Technical Advisory board Member 

BSides Bangalore

To build and strengthen the community of cybersecurity professionals from across the globe working towards a common purpose of creating a safer digital future through collaboration, knowledge sharing and inspiring innovation.

Advisory Board Member

GlobalCISO Leadership Foundation

My focus on advancing the foundation's mission of CISO excellence will be a great contribution towards making a positive impact and achieving remarkable success.

Netpoleon India

He is a member of the Cybersecurity Advisory Council and will provide guidance and support to develop effective cybersecurity initiatives. He will also advise the Netpoleon leadership team to create a comprehensive cybersecurity content strategy and oversee the initiative as an external advisory member.

Advisory Council Member (Cybersecurity)

TechnoBind Solutions Pvt Ltd

As a data security professional, my responsibilities included managing various aspects of data security such as Information Rights Management (IRM) and Digital Rights Management (DRM), data classification, data discovery, data risk management, data encryption and key management, data masking, tokenization, hardware security module, Public Key Infrastructure (PKI), Identity and Access Management (IAM) including Multi-Factor Authentication (MFA), Single Sign-On(SSO), Privileged Identity Management (PIM), Privileged Access Management (PAM), Endpoint Privilege Management, Active Directory (AD) Bridge solution, privileged remote access, secure remote support, Security Information and Event Management (SIEM), and Security Orchestration, Automation, and Response (SOAR). Furthermore, I was also responsible for application security, including Static Application Security Testing (SAST), Dynamic Application Security Testing(DAST), and Runtime ApplicationSecurity Protection (RASP).

Head - Data Security

Compuage Infocom Ltd

I had the position of Head of Technology and served as the leader of the team.

Head of Technology

Exclusive Networks

During my tenure in Technology Consulting, I provided specialized guidance and recommendations to clients on various technological topics. My role encompassed a diverse range of tasks, including but not limited to assessing clients' technological needs, developing strategic plans, and implementing effective solutions.

Senior Technology Consultant

Arrow Electronics

During my tenure in Technology Consulting, I provided specialised guidance and recommendations to clients on various technological topics. My role encompassed a diverse range of tasks, including but not limited to assessing clients' technological needs, developing strategic plans, and implementing effective solutions.

Technology  Consultant

GOIP GLOBAL SOLUTIONS PRIVATE LIMITED

During this role, I gained valuable experience providing cutting-edge technology consulting services for network and endpoint security to empower clients to stay ahead of emerging security threats and safeguard their digital assets.

Technology Manager

Praveen's unwavering commitment and dedication to Cybersecurity has earned him a spot as the Global 40 under 40 in Cybersecurity for 2023. His impressive achievements include being globally ranked #20  for "Cybersecurity" influencer and being recognised as the Globally ranked #1 influencer for "National Security" By Thinker 360. 
He has been recognised as a LinkedIn Top Cybersecurity Voice and a Cloud Security Champion of 2022 by Cloud Security Alliance (CSA). His journey of excellence can be attributed to his PG Programme in Cybersecurity from IIT, his Diploma in Cyberlaw, and his certification in DPDP Law.

Praveen's passion for creating a safer digital world is evident through his certification as a Cybercrime Intervention Officer (CCIO) and voluntary work with the National Security Database.  

Praveen has amassed over 15 years of experience in cybersecurity consulting and strategic business management; he inspires and guides aspiring CISOs while leading multiple CISO communities in India. His dedication to building global cybersecurity communities is a true testament to his commitment to making the world a safer place. He is the Co-Founder and CSO at Cyberpwn Technologies Pvt Ltd. 

Praveen is relentlessly pushing the boundaries of innovation and excellence in cybersecurity. Praveen has been serving on a board of advisory members of the various cybersecurity communities, including Cloud Security Alliance (CSA), Besides, and Global CISO Leadership Foundation. This demonstrates Praveen's immense confidence in their abilities and their commitment to advancing the field of cybersecurity.

With his expertise in information security best practices, cybersecurity consulting, and data and cloud security, Praveen has become a trusted figure in the industry. His commitment to collaboration and willingness to explore new ideas has earned him the respect and admiration of his customers, partners, and vendors within the cybersecurity community. He inspires others to strive for excellence and make a positive impact in their work.

𝐒𝐢𝐦𝐩𝐥𝐢𝐟𝐢𝐞𝐝 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐞𝐫𝐢𝐞𝐬:  𝐓𝐨𝐩 𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐡𝐞𝐚𝐭𝐬𝐡𝐞𝐞𝐭
A network security cheat sheet is an important document that can be used as a quick reference guide to access critical information related to cyber security procedures, commands, tools, and guidelines. It is a comprehensive document that can be used by security professionals as well as beginners to gain knowledge about different aspects of network security. For instance, the OWASP Top 10 cheat sheet is one such document that provides a list of the most critical web application security risks that organizations should be aware of in order to protect their systems and data from potential threats. This cheat sheet can be an invaluable tool that can help organizations to stay ahead of potential security risks and maintain the integrity of their network security operations.
Image credit ByteByteGo
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).
Cloud Security Alliance Bangalore Chapter Security BSides Bangalore
#ciso #cybersecurity #cloudsecurity

Praveen Singh

𝐎𝐧-𝐏𝐫𝐞𝐦𝐢𝐬𝐞𝐬 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐧𝐭𝐫𝐨𝐥𝐬 𝐕𝐞𝐫𝐬𝐮𝐬 𝐀𝐙𝐔𝐑𝐄,𝐀𝐖𝐒, 𝐆𝐨𝐨𝐠𝐥𝐞, 𝐎𝐫𝐚𝐜𝐥𝐞, 𝐈𝐁𝐌 𝐚𝐧𝐝 𝐀𝐥𝐢𝐛𝐚𝐛𝐚,𝐓𝐞𝐧𝐜𝐞𝐧𝐭.
The comparison between on-premises security controls and those provided by various cloud service providers such as Azure, AWS, Google, Oracle, IBM, Alibaba Cloud, and TenCent is an important topic for organizations looking to secure their sensitive data. On-premises security controls refer to the security measures implemented within the organization's own premises, while cloud service providers offer a range of security controls to protect their customers' data stored in the cloud.

In this analysis, They aim to delve deeper into the strengths and weaknesses of each option to help users make an informed decision on which one to choose. We will explore the various security controls offered by each provider and compare them with the security measures that can be implemented on-premises. This comparison will help users understand the trade-offs between the two options and make an informed decision based on their specific security requirements.

The analysis will cover the major cloud service providers, including Azure, AWS, Google, Oracle, IBM, Alibaba Cloud, and TenCent. Each provider will be evaluated based on their security controls, compliance certifications, data protection policies, and other relevant security factors. By the end of this analysis, users will have a better understanding of the security landscape and be better equipped to choose the option that best fits their security needs.

 Credit -Managed Sentinel’s  and Adrian Grigorof 

𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s)

Cloud Security Alliance Bangalore Chapter , Security BSides Bangalore 
  
#ciso #cybersecurity #cloud #cloudseurity

𝐒𝐢𝐦𝐩𝐥𝐢𝐟𝐢𝐞𝐝 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐞𝐫𝐢𝐞𝐬: 𝐇𝐨𝐰 𝐒𝐈𝐄𝐌 (Security information and event management) 𝐖𝐨𝐫𝐤𝐬?
🔹 𝐋𝐨𝐠 𝐜𝐨𝐥𝐥𝐞𝐜𝐭𝐢𝐨𝐧: 
-Security information and event management (SIEM) systems help organizations manage security incidents.
 - SIEM systems collect and analyze logs from various endpoints such as servers, workstations, firewalls, and other network devices. 
- The logs contain valuable information that helps security analysts identify potential threats. 
- SIEM systems enable security analysts to respond quickly to security incidents.

🔹 𝐃𝐚𝐭𝐚 𝐏𝐚𝐫𝐬𝐢𝐧𝐠 : 
-Data Parsing in Security information and event management involves analyzing and interpreting large volumes of log data generated by various sources such as network devices, servers, and applications. 
- This process helps identify security threats and vulnerabilities in an organization's systems and networks. 
- Through normalization and categorization of log data, security analysts can gain valuable insights into the nature of security incidents, their causes, and potential impact. 
- This allows them to respond quickly and effectively to security incidents, minimizing the risk and potential damage to the organization.

🔹𝐀𝐧𝐚𝐥𝐲𝐬𝐞 𝐚𝐧𝐝 𝐫𝐞𝐩𝐨𝐫𝐭𝐢𝐧𝐠: 
- Security information and event management (SIEM) helps identify, monitor, and manage security events and incidents in organizations. 
- It collects and analyzes data from various sources to detect security threats.
 - Detected threats are assigned a threat score and prioritized based on their severity. 
- This helps organizations to quickly respond to security incidents, prioritize their resources, and take appropriate actions to prevent or mitigate potential threats.

🔹𝐀𝐥𝐞𝐫𝐭𝐢𝐧𝐠 𝐚𝐧𝐝 𝐧𝐨𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧
- It help to detect and alert on security events
- It enable effective incident management
- It provide an efficient analyst workflow
- It help to investigate and remediate security incidents
- SIEM systems can filter and prioritize alerts
- This reduces incident response time and enhances overall security posture
- Alerting and notification in SIEM provides better visibility into the security environment

Image Credit: Black perl 
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).
Cloud Security Alliance Bangalore Chapter Security BSides Bangalore
#ciso #cybersecurity #SIEM #SOC

𝐂𝐥𝐨𝐮𝐝 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞 𝐜𝐡𝐞𝐜𝐤𝐥𝐢𝐬𝐭 
In today's business landscape, most companies operate under some form of governmental regulation, regardless of the industry they belong to. These regulations exist to ensure that companies are following specific standards when it comes to data management, security, and access control. Some of the most common regulations that companies need to adhere to are HIPAA, PCI-DSS, and SOX.

When it comes to ensuring compliance with these regulations, companies need to undergo regular audits by third-party auditors. These audits typically cover a wide range of aspects related to data management and security, including data store, data location assets management, system and data access control, security requirements, configuration management, data encryption, shared or private resources, service level agreement (SLA), due diligence, data protection, compliance certification, incident response, and compliance report.

To ensure that they remain compliant, companies need to have robust data management and security protocols in place. They need to have a clear understanding of the regulations that apply to them, and they need to take steps to ensure that their systems and processes are up-to-date and meet the required standards. This can involve regular training for employees, regular testing of systems and processes, and ongoing monitoring and maintenance to ensure that any issues are identified and addressed promptly. By taking a proactive approach to compliance, companies can minimize the risk of regulatory violations, protect their reputation, and ensure the safety and security of their data.

Image credit: InCountry
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).

Cloud Security Alliance Bangalore Chapter Security BSides Bangalore 
#ciso #cybersecurity #cloudsecurity

𝐂𝐥𝐨𝐮𝐝 𝐒𝐚𝐚𝐒 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐩𝐚𝐭𝐭𝐞𝐫𝐧𝐬 𝐚𝐧𝐝 𝐬𝐨𝐥𝐮𝐭𝐢𝐨𝐧𝐬 𝐢𝐧 𝐀𝐖𝐒 𝐚𝐧𝐝 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐀𝐳𝐮𝐫𝐞.

Cloud SaaS security patterns and solutions refer to the various measures and techniques that are implemented to ensure the security and protection of software as a service (SaaS) applications that are hosted on cloud platforms. These measures can be broadly categorized into five main areas: identification, authentication and authorization, secure development, operation and administration, privacy and confidentiality, and secure architecture.

Identification involves verifying the identity of users and devices accessing the SaaS application, while authentication refers to validating the credentials of the users and devices. Authorization is the process of granting or denying access to specific resources and functionalities based on the user's role and permissions.

Secure development involves implementing security measures during the software development lifecycle (SDLC) to identify and mitigate potential vulnerabilities and threats. Operation and administration refer to the processes and tools used to monitor and manage the SaaS application's performance, availability, and security.

Privacy and confidentiality measures are implemented to ensure the protection of sensitive data, including personal and financial information, from unauthorized access and disclosure. Finally, secure architecture involves designing and implementing a secure and resilient infrastructure that can withstand potential cyber attacks and minimize their impact.

By implementing these security patterns and solutions, SaaS providers can ensure the security and privacy of their customers' data and build trust in their services.
Image source : ResearchGate 
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).
Cloud Security Alliance Bangalore Chapter Security BSides Bangalore 
#ciso #cybersecurity #cloudsecurity

𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐫𝐢𝐞𝐬 : 𝐀𝐳𝐮𝐫𝐞 𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐭𝐚𝐜𝐤 𝐯𝐬. 𝐍𝐈𝐒𝐓 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤-

The infographic below provides a high-level view of how various Azure security controls fall under NIST Cybersecurity Framework functions as well as the security data flows between them. The $ sign indicates that a control is a paid service. The shield icon identifies connectivity between the Azure security control and the Azure Sentinel SIEM through the built-in data connectors. Some services provide coverage for several NIST functions and they are shown either crossing two adjacent NIST functions or with a color-coded tag in the background.

Credit : Adrian Grigorof & Marius Mocanu
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).
Cloud Security Alliance Bangalore Chapter Security BSides Bangalore
#ciso #cybersecurity #cloudsecurity

#techtalkseries Demystifying Zero Trust Architecture, Foundations of the Zero Trust Model, Key Components & characteristics of Zero Trust Architecture, Principles of ZTA, Implementing ZTA, Benefits of ZTA, NIST steps for migrating to a ZTA, Zero Trust Architecture Best Practices. 

Zero Trust Architecture is a security model that assumes that every user, device, and network component is potentially hostile and should be verified before granting access. This model is a new approach to cybersecurity that emphasizes the importance of continuous authentication and monitoring of all resources, regardless of their location or trust level.

The Zero Trust model is becoming increasingly important in cybersecurity due to the rise of remote work, cloud computing, and mobile devices. These trends have made it more challenging for organizations to protect their networks and data from cyber attacks, as traditional perimeter-based security measures are no longer sufficient.

By implementing a Zero Trust Architecture, organizations can reduce the risk of data breaches and other security incidents by enforcing strict access controls, continuous monitoring, and real-time threat detection. This model can also help organizations comply with regulatory requirements and protect sensitive data from unauthorized access or disclosure.

An Article by Praveen Singh , An Infographics by Netpoleon India , Techtalk Series-An initiative by Mohan Kumar T L 
#ciso #cybersecurity #zerotrust

Zero Trust Architecture 

𝐂𝐥𝐨𝐮𝐝 𝐬𝐞𝐫𝐢𝐞𝐬 :  𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 𝐑𝐞𝐯𝐢𝐞𝐰 𝐎𝐟 𝐀 𝐂𝐥𝐨𝐮𝐝 𝐍𝐚𝐭𝐢𝐯𝐞 𝐄𝐧𝐯𝐢𝐫𝐨𝐧𝐦𝐞𝐧𝐭
🔹The architecture was as shown in the diagram below. Note that this again is only for reference.

🔹The workflow of the different entities from the diagram below i.e. cloud architecture in scope is described below:

1.Internet Gateway: Allows communication between Virtual Private Cloud (VPC) and the internet.
2.Application Load Balancer (ALB):  ALB manages traffic within the implementation and from external connections.
3. Front-end Server (EC2): Is placed in an auto-scaling group where the front-end web server is deployed on EC2 instances and serves as an application user interface (UI).
4. Back-end Server: Back-end web services are placed in a private subnet, deployed on EC2 instances.
5. Amazon RDS (Database): Application database is kept in a restricted subnet that interacts with back-end services.
6. AWS CloudTrail: Provides compliance, governance, operational and risk auditing of the AWS accounts.
7. AWS CloudWatch: CloudWatch helps you with monitoring of your applications, responds to any system-wide performance changes, and allows optimized resource utilization, and provides a unified view of its overall health.
8. AWS Cloud9: AWS Cloud9 is a cloud-based Integrated Development Environment (IDE) that lets you write, run, and debug code in the browser.
9. AWS CodeCommit: AWS CodeCommit is a fully-managed source control service that hosts secure Git-based repositories.
10. AWS CodeBuild: AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready for deployment.
11. AWS CodeDeploy: It is a fully managed deployment service that automates software deployment pipeline.

Image Credit : Anand Tiwari
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).

Cloud Security Alliance Bangalore Chapter Security BSides Bangalore
#ciso #cybersecurity #cloudsecurity

Techtalk series: Demystifying Network Access control (NAC), Quick overview NAC,Key components, NAC working, Implementation of NAC,Types of NAC, Capabilities and objectives of NAC, Benefits and Use cases NAC,Best Practices of NAC

Network Access Control (NAC) is a critical component for any enterprise that seeks to maintain a secure and reliable network infrastructure. NAC solutions provide a comprehensive approach to managing network access by enforcing policies that ensure only authorized devices and users are allowed to connect to the network. 

NAC systems perform several functions, including user authentication, endpoint security checks, device profiling, and network segmentation. By using NAC solutions, enterprises can prevent unauthorized access, protect against malware and other security threats, and ensure compliance with regulatory requirements.

Furthermore, NAC solutions provide visibility into network traffic, which allows enterprises to identify and mitigate potential security risks. They also enable IT teams to enforce security policies, quarantine infected devices, and remediate security incidents quickly.

In summary, NAC is of utmost importance for enterprises as it ensures the security and integrity of their network infrastructure, protects sensitive data, and helps maintain compliance with regulations.
An Article by Praveen Singh , An Infographics by Netpoleon India , Techtalk Seres-An initiative by Mohan Kumar T L
#ciso #cybersecurity  #NAC

NAC- Network Access control 

𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐑𝐞𝐟𝐞𝐫𝐞𝐧𝐜𝐞 𝐌𝐨𝐝𝐞𝐥 𝐟𝐨𝐫 𝐂𝐥𝐨𝐮𝐝 𝐂𝐨𝐦𝐩𝐮𝐭𝐢𝐧𝐠

Cloud computing has become one of the most popular ways for businesses to store and access their data. The cloud offers a number of different models including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Each model offers unique advantages and disadvantages, and it's important to choose the right one for your business.

In addition to the cloud models, there are also several different security control models to consider. These models help to ensure that your data is protected from unauthorized access, theft, and other security threats. The security control models vary depending on the cloud provider and the specific needs of your business.

Another important consideration for businesses using cloud computing is compliance with regulations such as PCI, HIPPA, SOX, and others. Compliance with these regulations is critical for businesses that handle sensitive data or financial information. It's important to choose a cloud provider that is compliant with the relevant regulations and can provide the necessary documentation to demonstrate compliance.

Finally, it's important to have a security reference model for cloud computing. This model helps to guide your security strategy and ensure that you are taking all necessary steps to protect your data. The security reference model should include best practices for data encryption, access control, and other security measures.

Image credit: UKDiss
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).

Cloud Security Alliance Bangalore Chapter Security BSides Bangalore 
#ciso #cybersecurity #cloudsecurity

𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐧𝐭𝐫𝐨𝐥𝐬 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 
Cloud security controls are classified into different categories
🔹 The categories include access control, network security, data encryption, logging and monitoring, inventory and configuration management, and compliance and vulnerability management
🔹A thorough assessment of these categories is crucial to identify potential security risks and vulnerabilities
🔹Access control focuses on managing user access to cloud resources and data
🔹 Network security deals with securing cloud networks and communication channels
🔹Data encryption ensures that sensitive data is protected from unauthorized access
🔹 Logging and monitoring enables the tracking of user activity and the detection of security incidents
🔹 Inventory and configuration management involves managing cloud resources and configurations
-🔹Compliance and vulnerability management focuses on ensuring compliance with industry regulations and standards, and managing vulnerabilities in the cloud environment
 Effectively implementing these categories of cloud security controls can ensure the safety and security of data and infrastructure in the cloud.

Image credit : RiverSafe 
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).
Cloud Security Alliance Bangalore Chapter Security BSides Bangalore 

#ciso #cybersecurity #cloudsecurity

𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐫𝐢𝐞𝐬: 𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤 : 8 𝐏𝐢𝐥𝐥𝐚𝐫𝐬 𝐨𝐟 𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 : 𝐈𝐦𝐩𝐥𝐞𝐦𝐞𝐧𝐭𝐚𝐭𝐢𝐨𝐧 𝐚𝐩𝐩𝐫𝐨𝐚𝐜𝐡 
🔶 8 Pillars of Cloud Security 

 🔹 Authentication
 🔹 Access control
 🔹 User behaviour analytics
 🔹 Logging & Reporting
 🔹 Assets & data classification
 🔹 Encryption
 🔹 Configuration Hardening
 🔹 Logical Segmentation

🔶 Implementation approach

 🔹Security assessment
 🔹Secure Landing Zone
 🔹 Monitoring & logging
 🔹 Continuous risk management
 🔹 Built Governance

Credit: coforge 
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).

Cloud Security Alliance Bangalore Chapter Security BSides Bangalore
#ciso #cybersecurity #cloudsecurity #cloud

𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐫𝐢𝐞𝐬 : 𝐀 𝐡𝐚𝐧𝐝𝐲 𝐜𝐡𝐞𝐚𝐭 𝐬𝐡𝐞𝐞𝐭 𝐟𝐨𝐫 𝐭𝐡𝐞 𝐦𝐨𝐬𝐭 𝐩𝐨𝐩𝐮𝐥𝐚𝐫 𝐜𝐥𝐨𝐮𝐝 𝐬𝐞𝐫vices 2024. 

What’s included? 
- AWS, Azure, Google Cloud, Oracle Cloud
- Cloud servers 
- Databases 
- Message queues and streaming platforms 
- Load balancing, DNS routing software 
- Security 
- Monitoring 

Credit: Alex Xu
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).

Cloud Security Alliance Bangalore Chapter Security BSides Bangalore
#ciso #cybersecurity #cloudsecurity #cloud

𝐂𝐥𝐨𝐮𝐝 𝐬𝐞𝐫𝐢𝐞𝐬: 𝐇𝐨𝐰 𝐃𝐨𝐞𝐬 𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐖𝐨𝐫𝐤?

𝐏𝐞𝐨𝐩𝐥𝐞 
🔹 Authentication : Authentication in cloud 
🔹Access control 
🔹Secondary approval 
🔹User behavior analytics
🔹Logging and Reporting 

𝐃𝐚𝐭𝐚 
🔹Data discovery 
🔹Assess and data classification 
🔹Encryption 
🔹Key management 

𝐈𝐧𝐟𝐫𝐚𝐬𝐭𝐫𝐮𝐜𝐭𝐮𝐫𝐞
 🔹 Configuration and Hardening
 🔹 Logical Segmentation
 🔹 Boundary enforcement 

Credit: Hytrust 
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).

Cloud Security Alliance Bangalore Chapter Security BSides Bangalore

#ciso #cybersecurity #cloudsecurity

𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐫𝐢𝐞𝐬 : 𝐎𝐧-𝐏𝐫𝐞𝐦𝐢𝐬𝐞𝐬 𝐯𝐬. 𝐀𝐳𝐮𝐫𝐞 𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐭𝐚𝐜𝐤
The purpose of the diagram is to offer a comprehensive and consolidated view of the entire Azure security stack. It focuses on Azure security technologies and provides additional details, such as the distinction between free and billable Azure services, the availability of third-party tools within Azure Marketplace, and the integration of these technologies with other Azure services, including monitoring tools. The diagram aims to serve as a useful reference for security professionals by presenting a detailed and visually clear picture of the various security components and their relationships within the Azure platform.
Credit: Adrian Grigorof & Marius Mocanu
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).
Cloud Security Alliance Bangalore Chapter Security BSides Bangalore
#ciso #cybersecurity #cloudsecurity

𝐂𝐥𝐨𝐮𝐝 𝐒𝐞𝐫𝐢𝐞𝐬:  𝐇𝐨𝐥𝐝 𝐲𝐨𝐮𝐫 𝐨𝐰𝐧 𝐊𝐞𝐲 [𝐇𝐘𝐎𝐊] 𝐜𝐨𝐧𝐜𝐞𝐩𝐭.
The concept of [HYOK]
“Hold Your Own Key” gives organizations full control over their cryptographic keys. The keys remain in the possession of the end-user at all times. With HYOK, data is encrypted before it is sent to the cloud. There is no decryption of the data until it is back on-premise. Therefore, HYOK ensures that sensitive data stays encrypted while in the cloud at all times. Meanwhile, the end-users encryption keys are never exposed.

For organizations that require a higher level security to meet the stringent requirements for data security as it relates to their industry, like banking, finance and healthcare, HYOK provides more stringent security because 
🔹The end-user retains physical ownership and logical control of its managed encryption keys, thus always possessing their keys.
🔹HYOK allows for the immediate revocation of access by deactivating the key’s URL.
🔹Data associated to a deactivated key is immediately made inaccessible or crypto shredded until if and when the key’s availability is restored.
🔹HYOK is ideal for organizations that must adhere to strict regulation and compliance policies.

Credit: Prof Bill Buchanan OBE 
𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫 - This post has only been shared for an educational and knowledge-sharing purpose related to Technologies. Information was obtained from the source above source. All rights and credits are reserved for the respective owner(s).
Cloud Security Alliance Bangalore Chapter Security BSides Bangalore
#ciso #cybersecurity #cloudsecurity

🎉 Exciting Announcement! Introducing Our New Cyber Ambassador 🎉

Hey Cyber explorers!!

We are thrilled to announce that Praveen Singh has joined our team as our official Cyber Ambassador! Please join us in welcoming him to this pivotal role in promoting cybersecurity awareness and digital safety.

His impressive achievements include being globally ranked #20 for "Cybersecurity" influencer and being recognized as the Globally ranked #1 influencer for "National Security" By Thinker 360. 

He brings a wealth of experience and a deep passion for cybersecurity to our organization. With his extensive knowledge and dedication, we are confident that he will play a crucial role in enhancing our cybersecurity efforts and fostering a culture of digital resilience.

He will collaborate with our team to develop innovative strategies, engage with stakeholders, and champion initiatives aimed at strengthening our cybersecurity posture.

Please join us in congratulating Praveen Singh on his new role as Cyber Ambassador at Cloud Security Alliance Bangalore Chapter. Together, we are committed to making the digital world a safer place for all.

If you're ready to embark on an exciting journey to protect and secure our digital future, we want to hear from you! Join us in our mission to make the digital world a safer place for all.

Register here : https://lnkd.in/gepvVVhk

Let's make a positive impact together! 💻🛡️

#Cybersecurity #DigitalSafety #CyberAmbassador #DigitalDefender #InfoSecInspiration #csabangalore

Taplio

Praveen Singh's Linkedin Analytics

Praveen Singh

What is Praveen talking about?

Who is engaging with Praveen

Praveen Singh's Best Posts (last 30 days)

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Praveen Singh's Linkedin Analytics

Praveen Singh

What is Praveen talking about?

Who is engaging with Praveen

Praveen Singh's Best Posts .css-qqfgvy{font-size:var(--chakra-fontSizes-md);}(last 30 days)

Want to drive more opportunities from LinkedIn?

Praveen Singh's Linkedin Analytics

Praveen Singh's Best Posts (last 30 days)