securitylinkindia

MassMediaLink India LLP SecurityLink India

E-Commerce & Security of your Warehouse

Anil Puri CMD, APS group A first generation serial entrepreneur, thought leader and an action catalyzer rolled into one – Anil Puri is a rare combination of a visionary, an innovator and a strategic thinker. He has used this combination to innovate and implement on-ground many new business ideas. His rich experience in various businesses has enabled him to nurture & mentor innovative ideas and scale them up. Introduction E-commerce has come a long way since Michael Aldrich created online transaction processing in 1979. The term refers today to the buying and selling of goods or services using the internet, and the transfer of money and data to execute these transactions. From a customs perspective, it is used to refer to the sale of physical products online, including illicit ones (the risk of this is ever increasing). Driven by the increase in internet users worldwide as well as smartphone and mobile penetration, e-commerce has revolutionized the way businesses and consumers market, buy and sell goods and services, providing a vast choice of products as well as advance shipping, payment, and delivery options. There are now even specific terms to refer to mobile-commerce (M-Commerce) and social media commerce (S-Commerce – which integrates social media into e-retail sites and adds e-commerce functionality to social networks. Approximately 18% of e-commerce takes place via social media). Today, it is widely recognized that the growing e-commerce sector is an important growth engine for economies, providing and developing new trade modes, driving new consumption trends, and creating new jobs. It has ‘enabled’ growth opportunities to micro, small and medium-sized enterprises (MSMEs) in terms of wider access to larger markets by lowering entry barriers and reducing operational costs. E-commerce has become one of the largest industries in the world to function. Today, it is widely recognized that the growing e-commerce sector is beneficial to economies, providing new growth engines, developing new trade modes, driving new consumption trends, and creating new jobs. The evolution of technology and the internet led to the opening of infinite ways to engage with consumers worldwide. But larger the business, the greater the risk and this is the case for e-commerce as well. As an organization, it becomes imperative to protect the organization from various and varied threats. When you traverse along the Indian highways, every mile is dotted with mushrooming warehouses. Deploying security systems for the warehouse and logistics category can seem daunting to anyone outside of the security industry. Everything risk-related needs to be factored in, from theft prevention, access control, surveillance, fire and safety, to disaster recovery, data security. Environment monitoring has also become a part of the ‘security threat’ and needs to be continuously monitored and factored in. The days of the facilities manager simply contracting a single service provider or vendor (usually the lowest-quoted priced) for each risk category and hiring them to install and forget about it, are all but gone. ‘one or single point’ is an expression we in the security business use to describe the advantages of working with a single integrator to handle everything security-related. That way, when something needs to be addressed or fixed, there is only ‘a single point.’ The need for such ‘single point’ processes are gaining prominence as manufacturers, distributors and retailers look to optimize their supply-chain processes. Warehouses are evolving into highly automated centers equipped with the latest, cutting edge technology. Identifying risk and threats At its core, physical security refers to protecting people, property, and physical assets from the risk of physical actions and events such as fire, flood, natural disasters, burglary, theft, vandalism, and terrorism. Some of the most common processes for Security monitoring and prevention are the most basic – warning signs or stickers, fences, vehicle barriers, restricted access points, security lighting, etc. When physical security and ‘E-Security’ divisions operate in silos, they lack an overall and coordinated view of security threats targeting their enterprise. As a result, successful attacks are more likely to occur and can result in the theft of sensitive or proprietary information, economic damage, disruption of critical functions, or even loss of life. Physical Security & ‘E-Security’ – an ultimate solution Physical security integrates with ‘E-Security’ by limiting access to spaces where is needed and the reverse is also true. Physical security components connected to the Internet, such as RFID key card door locks, smartphones, and video surveillance cameras, are often vulnerable to cyber-attacks and are thus a security risk. Traditionally, physical security operations were run by professionals with expertise in maintaining the physical safety of a facility using solutions such as locks, cameras, guards, fencing, and alarms. While ‘E-Security’ was the exclusive domain of the IT department, which had responsibility for the computer systems and network. The two departments lacked an integrated approach to and in decision-making for security procedures. Physical security is a vital business practice to give a ‘human touch’ helping prevent unauthorized persons from entering your business and causing harm, protect your intellectual property from corporate espionage, and mitigate workplace violence, amongst other concerns. A strong ‘E-Security’ strategy safeguards and enhances the sensitivity of physical security. This combo strategy on security will enable network devices, applications, and software that power smart, cloud-based devices and security systems as well as the people who manage, monitor, and make business decisions for these functions based on real-time threat assessment and prevention and last but not the least an ‘informed reaction.’ Principles of application of convergence strategy Whether you are responsible for your organization’s physical security or ‘E-Security,’ you still need to apply the following principles: Identify and classify your assets and resources (what to protect). Identify likely vulnerabilities that threats may exploit (the likelihood). Identify plausible threats (who to protect it from). Identify the expected cost if bad things happen (the consequences). The Benefits of Integration The benefits of ‘E-Security’ and physical security integration can broadly be categorized as: Cost Saving. Incident response and management. Risk reduction. ‘E-Security’ Helps Build a Physical Security Framework ‘ E-Security’ supports and enhances the…

Read More

Can Regulations and Compliance be the Answer to Global Cybersecurity Risks?

For a CIO in 2022, there remains several challenges that need to be tackled but the major concern will always be security. Though businesses started moving their assets to the cloud even before the pandemic, the switch to a remote workforce further accelerated the process and with it, IT monitoring and security became one of the top priorities for a CIO. “With the increase in SaaS based applications, organisations are required to build stringent security controls at their edge networks,” said Saravanakumar Krishnamurthy, Executive Vice President – Technology Engineering – IT, Network & Cyber Security at YES BANK, “The underlined statement should always be to secure the data, whether it is on the cloud or on premises. At the same time I believe that internal threats, which are mostly unknown or internal dark web for many organisations will be one of the key issues CISOs need to address on a war foot basis. Cyberattack groups are openly challenging and stating openly they are injecting attacks on big organisations. The Lapsus$ group is one of the classic examples.” The BFSI (Banking, Financial Services and Insurance) sector has always remained a primary target of cybercriminals over last several years, given the amount of sensitive data that they have to deal with. As someone from the BFSI sector, Saravanakumar believes that some of the top cybersecurity threats that continue to threaten this sector are Ransomware, DDOS, Bots, Phishing, Data Exfiltration (Data Theft), DNS & Domain Hijack. “These are the most sophisticated attacks that give real threats to the BFSI sector,” he said. The need for Regulations & data protection laws A data breach or a cyberattack of any kind can have a long-term psychological effect on an individual or a business, while also impacting the reputation of a brand. Also, every society perceives threats differently and so every different kind of threat has to be measured and addressed in a different manner and approach. The key concern however still remains the ‘Awareness.’ “The amount of initiatives and programs relevant to Cybersecurity happening across the globe and in our country are still in a minuscule percentage as compared with the amount of cyberattacks taking place. Many countries in fact do not have adequate policies and strategies in place to combat these kind of cybersecurity issues,” Saravanakumar observed. In a country like India, where business model are mostly technology driven and businesses adopt all the latest technologies well in advance than many developed countries, Saravanakumar said that ground level issues should be addressed first before formulating any security policy. “Security policies, frameworks and standards should be aligned after addressing these issues and only then it will get easily assimilated into the culture itself,” he explained. The regulatory landscape is however slowly changing with most nations coming up with their individual data protection laws and regulations. But as Saravanakumar explains, before understanding exactly what we expect from a Data Protection law, we need to, as an organisation segregate the data as structured and unstructured; classify the data; secure the data and then should know how to govern the data. “We should first formulate a proper data lifecycle model first and then implement the data protection or privacy regulations. As far as the BFSI sector is concerned, the Reserve Bank of India (RBI) should bring more data awareness programs and publications and make an assessment of the industry,” he concluded.  

Read More

How Can Internet of Things (IoT) Transform Businesses

Prashanth G J, CEO of TechnoBind Organizations are quickly realizing the importance of IoT to their businesses. The IoT is a network of internet-connected gadgets that can gather and transmit data over a network. As it plays a critical part in the digital transformation, the IoT technology has recently progressed from the pilot stage to creating business value. The continued growth of this industry will serve as a digitalization force for all organizations. Healthcare, BFSI, energy, automotive, manufacturing, and transportation are being transformed by the IoT technology platform. As IoT is getting integrated into multiple industries, its market is expected to reach USD 6075.70 Million by 2030, growing at a 19.91 % CAGR between 2022 and 2030. Impact and Beneficial Aspect of IoT on Businesses IoT has had a massive impact on industries since 2011, acting as one of the catalysts driving the industry 4.0, representing a new stage in the organization and control of the industrial value chain. Industry 4.0 is built on cyber-physical systems, also known as smart machines. IoT is all about integrating sensors, devices, gateways, and platforms to business strategy and solutions. Businesses can make more informed decisions and structure more effective systems by centralizing all of the data. This facilitates businesses to meet the growing demand for high-quality, customized goods at a lower cost and with shorter turnaround times. However, IoT is much more than just data collection. Data must also be analysed and enriched in order to provide actionable insights to businesses. This is where AI, robotic process automation, and analytics come into play. These tools are used by intelligently designed software to uncover hidden trends, optimize business processes, and assist workers. Given the proliferation of IoT-connected devices, one may wonder, how does IoT affect business? The short answer is – in every way. IoT is an extraordinary asset to businesses. Access to large data sets, as well as autonomous data collection and exchange, make it easier to gain insights into things like customer behaviour and product performance. IoT also empowers continuous process optimization and has an effect on employee engagement and performance. When certain criteria are not met, IoT in business can direct systems to start executing operations in supply chains autonomously. If a business is thinking about how useful IoT is to their organization, they should first understand how it is already modifying management and operations. Here are some of the key areas that the IoT is transforming and empowering digital transformation today. Advanced Efficiency and Productivity: Businesses that implemented IoT technology saw increased productivity and efficiency. IoT collects data on processes, making it simple to improve them in the event of an anomaly. IoT can be used in a variety of industries, including manufacturing. IoT devices assist in tracking demand and managing part and material production accordingly. Businesses can boost their productivity by learning more about the market and its customers. In addition, IoT can aid in the orchestration of extensive automation and provide real-time feedback on operational efficiency. These innovations will enable businesses to operate at a lower cost, thereby expanding the landscape significantly as insertion becomes more cost effective and manufacturing becomes more feasible. Cost Reduction: The IoT makes cost cutting easier. Integrating IoT devices can save money on tasks that would otherwise be done by humans. Tracking of various operations or equipment, such as heating and cooling systems, might fall under this category. Since the data can be logged in real time by a central system, an unnecessary trip by an operator can be avoided. IoT benefits companies by lowering the costs of unplanned downtime, creating a digital twin that can be used to track assets and perform complex simulations, improving worker safety and satisfaction, and providing deep, actionable insights into process and equipment improvements. IoT can also provide manufacturing companies with agility and resilience, allowing them to thrive no matter what. Efficient Inventory Management: Many businesses are facing inventory management and monitoring difficulties. Poor inventory management can cause a variety of problems, including order fulfilment delays. In the long run, this will harm a company’s productivity and profits. Businesses, thankfully, now have the option of automating business inventory by implement ing IoT software in their storage facilities. This technology will help ensure that your inventory is efficiently monitored and managed, giving the company more time to focus on core business operations. Analyse Consumer Behaviour: Customer preference and behaviour analysis is critical for the success of any industry or business. IoT benefits retail companies by allowing them to retrieve, track, monitor, and analyse data collected from the internet, video surveillance, social media, and mobile usage. This scenario allocates necessary insights to predict consumption patterns and forthcoming business trends, allowing companies to design products and provide personalized services for higher levels of engagement. Companies will be able to retain their target consumers and cultivate brand loyalty with access to detailed customer profiles. How can Business Leverage IoT When it comes to how to use the Internet of Things in business, the key thing to remember is that new levels of interaction and interconnectivity have significant payoffs for almost any business. As a result, how each company decides to leverage IoT within its industry and sector is a critical decision. It is not a one-size-fits-all approach, but rather a highly customized method of developing a greater understanding of uplifting and enforcing specific business objectives. The evidence for IoT’s benefits is clear, and this is about to change how the IoT can help businesses. It not only boosts efficiency and revenue, but it also ensures that the best services and products are delivered to customers at the right time. Organizations that have implemented IoT will see increased business opportunities as they become more customer centric. That means that enabling business with IoT could put businesses on the cutting edge of changing business customer interaction trends.  

Read More

Hikvision India Showcases Cutting Edge Technologies & Solutions at Security and Fire Expo (SAFE)

Hikvision India participated in the Security and Fire Expo (SAFE) South India (17-18 June, 2022) in Chennai to showcase its cutting edge technologies, products, and solutions. The South India’s largest and most influential SAFE Expo was successfully organised at the Chennai Trade Centre. The SAFE Expo brought together internationally renowned exhibitors, consultants, industry experts and key government officials on a single platform from the Indian and the international industries. SAFE Expo was inaugurated by Honorable IT Minister of Tamilnadu Shri Thiru Mano Thangaraj T. in the presence of Yogesh Mudras, Managing Director, Informa Markets., and other key dignitaries from the Government and private sector. Hikvision India demonstrated the latest security and surveillance technologies, products and solutions at its elaborately designed booth at SAFE Expo. The ornate booth showcased its best-in-class products and solutions including, Video Security Cameras Empowered by Artificial Intelligence Technology, AcuSense & ColorVu Cameras, Video Door Phone. The booth also showcased Non-CCTV Products (Access Control, Facial Recognition Terminal, Intrusion Alarm and Inspection Products), EZVIZ Cameras, Thermal Cameras and Transmission, etc. Speaking on the Hikvision’s participation as a Premier Plus partner in the SAFE Expo, Ashish P. Dhakan, MD & CEO, Prama Hikvision India Pvt. Ltd. said, “Security Industry in South India is fast evolving to the next level. To leverage our latest security products and solutions in this potential market, we had participated in SAFE South India. This event is the convergence point for the security professionals, System Integrators end-users and security business representatives to grow the business.” The SAFE South India exhibition featured exhibitors from the security and fire safety domains. They showcased solutions and latest technological advancements. The Security and Fire Expo – South India event organized a unique two-day Technical seminar. An elaborate corporate presentation on Hikvision’s next generation of products and vertical solutions was given by Mr. Sandeep Shingade, Regional Sales Manager (RSM) – Projects, Prama Hikvision India Pvt. Ltd. The SAFE Expo concluded successfully with good footfall from the relevant visitors from the end-users and security professional community.  

Read More

PRAMA EXCELLENCE MEET Concludes Successfully in New Delhi and Mumbai, Creates Big Impact

India’s premier indigenous security and surveillance product manufacturing company, Prama India organized ‘PRAMA EXCELLENCE MEET’ events recently at New Delhi and Mumbai. Both of these events got an overwhelming response from the security industry and professional community. The ‘PRAMA EXCELLENCE MEET’ event was inaugurated on June 4, by the Chief Guest Dr. Vikram Singh, Former Director General of Police – Uttar Pradesh and Chancellor of Noida International University. There were other leading dignitaries present at the event, including, the Guest of Honour Dr. Firoz Zia Hussain, Chief Security Officer, Delhivery. The next stop for ‘PRAMA EXCELLENCE MEET’ event was in Mumbai on June 19, it was inaugurated by the Chief Guest Pujya Gnanvatasal Swamiji of BAPS Swaminarayan Sanstha. ‘PRAMA EXCELLENCE MEET’ is being planned to bring PRAMA security and surveillance products closer to potential consumers and end-users while creating brand awareness. ‘PRAMA EXCELLENCE MEET’ concluded the first phase of events after the successful shows organized in Ahmedabad, New Delhi and Mumbai. In his keynote address, Ashish P. Dhakan, MD & CEO, Prama India Pvt. Ltd. said, “The PRAMA EXCELLENCE MEET is organized to engage, enable and empower the partners’ community. The event is enabling a convergence of all the security professionals, dealers and distributor community associated with PRAMA. We are happy to offer our indigenously manufactured products and solutions to our ecosystem partners. They understand and serve the market requirements better.” He further added, “This event brings back the cherished memories and nostalgia of my formative years as an entrepreneur. At PRAMA we are embarking on a new journey to build brand, launch new products and develop new solutions while creating new milestones and setting new benchmarks. We will strive for the organic growth and expansion of the brand at pan-India level. This event showcases latest technologies, products and solutions. We sincerely hope that our initiatives are helping the PRAMA ecosystem partners to grow their business.” “Today being a security professional and entrepreneur, one has to think about the fast changing dynamics of the Indian security market instantaneously and apply appropriate strategies for the future roadmap. This is the crux of my entrepreneurial experience. The different phases of growth requires different strategies,” said Ashish P. Dhakan. “While moving forward with the vision of Aatmanirbhar Bharat, we at Prama India are working diligently to realise the dream of a self-reliant India into reality. As the industry moves to new technology frontiers, there is a need to focus on indigenous security product manufacturing. These security systems are helping to resolve the physical security challenges in the private, government and commercial segments,” said Ashish Dhakan. In his inspiring speech at the New Delhi event Chief Guest Dr. Vikram Singh said, “Those who respect and inculcate their parents blessings in their life, they are blessed to launch the successful enterprise like PRAMA. He emphasized on the importance of values in the current corporate world.” In his motivational speech during the Mumbai event Pujya Gnanvatasal Swamiji of BAPS Swaminarayan Sanstha said, “The most important aspect of a professional life is to keep values intact in a highly volatile social environment in the contemporary world. The first and foremost thing for an entrepreneur is to be peaceful, calm and patient while doing the business. The second thing is to be self-aware and focused on the implementation of plans to grow further.” While interpreting and referring to insights from the Book “Trillion Dollar Coach”, he further added, “The core team’s interpersonal relationship is the most important factor in achieving goals and success. No matter what kind of company or business you are in, it may be a start-up, retail, manufacturing or e-commerce venture, your team’s internal working patterns define the success in the long run.” An elaborate presentation on Prama India’s future roadmap of products and solutions were given by the senior management representatives. The events in New Delhi and Mumbai had product demo kiosks for delegates to showcase a wide range of products and solutions. There were many fringe programs at the event venue, including Quiz Show with exciting prizes. The key highlights were exclusive networking, meeting and felicitation ceremony for distributors and system integrators. ‘PRAMA EXCELLENCE MEET’ event created a big impact among the security industry professionals in New Delhi and National Capital Region (NCR). The event in Mumbai was successful due to spirited participation from the security professional community in the Mumbai, Nashik and Pune region.  

Read More

Arcserve Expands Award-Winning Onexafe Series to Provide Greater Scalability and Data Resilience

Arcserve, the world’s leading ransomware protection and unified data resilience platform provider, recently announced the expansion of its award-winning OneXafe family of immutable data storage solutions. The new Arcserve OneXafe 4500 Series enables a greater storage capacity of up to 216TB while providing a native immutable store for ransomware protection of growing volumes of backup and unstructured data for organizations of all sizes. Offering near-zero configuration, Arcserve OneXafe 4500 Series can be installed and available to users very rapidly without reconfiguration to accommodate various workload requirements. It also protects existing investments while lowering the total cost of ownership (TCO) through seamless integration with existing OneXafe 4400 Series clusters. Arcserve OneXafe 4500 Series features: Built-in protection against ransomware: Arcserve OneXafe 4500 Series is a native immutable store for unstructured data and backup, which supports customers’ 3-2-1-1 backup strategies (3 backup copies on 2 different media, with 1 located offsite and the crucial extra 1 is immutable storage). It provides a logical airgap allowing customers to retrieve unaltered copies of their data. The continuous data protection capabilities take a snapshot once every 90 seconds, including pointin-time recovery, and impose no limit on the number of snapshots taken. Seamless scale-out architecture: OneXafe supports one or multiple OneXafe nodes in a cluster and a single global file system thanks to its flexible and seamless scale-out architecture. As storage requirements change, organizations can rely on the agility of the OneXafe 4500 series to add any number of drives or nodes at any time in any capacity, without configuration changes or application downtime, saving businesses time and cost. Protect existing investments while lowering TCO: Customers with existing OneXafe 4412 or 4417 clusters can seamlessly increase their storage capacity by adding OneXafe 4512 nodes. OneXafe offers powerful global inline deduplication and data compression, allowing organizations to reduce their storage footprint and their overall associated power consumption. Minimal Configuration: The Arcserve OneXafe 4500 Series delivers a highly flexible, powerful, and easy to configure storage and recovery solution. OneXafe removes the burden of application downtime and configuration changes for nearly every storage management task. Said Matt Urmston, Executive Vice President of Product Management at Arcserve, “Today, organizations are grappling with the need to backup growing quantities of data within diminishing windows while protecting against ransomware. Arcserve OneXafe 4500 Series combines traditional NAS’ reliability and productivity advantages with the security benefits of immutable object storage to provide organizations with a safe and powerful secondary storage solution ideally suited to the modern world. Simply put, the OneXafe 4500 series delivers more. It represents a proactive response to our customer’s demand for more storage capacity, data protection, and improved TCO from their data resilience investments.”  

Read More

How IP intercoms Meet Evolving Security and Communications Needs

Intercom products address a crucial part of the security, communications and convenience needs in both residential and business sectors. They have evolved over time alongside the ‘leapfrog’ development in technologies created for better and safer living environments The transition from analog to IP technologies The intercom market is witnessing a significant transition from analog to IP. Traditional analog systems feature relatively poor audio and image quality and limited functionality. For example, they cannot be accessed using a mobile app or networked management systems. Although analog systems are often a more economical option, more manufacturers and installers have recommended their customers shift to IP-based intercoms for their wider range of capabilities – including higher image resolution, mobile control, remote operation, and a series of smart functions. According to Allied Market Research1 , the IP intercom market is projected to experience robust growth. The global IP Intercom industry generated $2.2 billion in 2020, and is anticipated to generate $4.9 billion by 2030, witnessing a CAGR of 8.5% from 2021 to 2030. IP intercoms bring a new level of convenience Mobile control: IP intercoms let owners receive calls, play video, and open locks from anywhere through just a simple touch. For example, people often receive calls on their mobile devices for package deliveries or other services when they’re not at home. IP intercoms, however, allow users to give temporary access remotely to those who need it, just using a simple mobile application. This is more convenient and much safer than manually giving out passwords or key cards. User-friendly interfaces: IP intercoms commonly provide a user-friendly screen with a clearly visible interface, simple touch interaction, intuitive operation, and multi-functional information display (e.g., weather, news, announcements, etc.). These easy-to-use features help get modern consumers accustomed to using IP intercoms since they operate very similarly to mobile phones. High image quality: Compared to purely analog solutions, IP intercoms provide excellent imaging with higher resolutions and wider field of view. Wide Dynamic Range (WDR) and night vision are also supported to help users see clearly despite challenging light conditions, such as direct sunlight or high contrast environments during the day and darkness in the evening and night time. IP intercoms provide excellent imaging with higher resolutions and wider field of view. Intelligent authentication: IP intercoms also support multiple access methods, from ID cards and PIN codes to biometric recognition. Additionally, following recent trends in contactless solutions, IP intercoms simplify the action of opening doors while addressing common concerns about bacteria and viruses introduced by physical touch. All-in-one management: IP intercoms also offer opportunities for integration with other security systems, such as video and alarms. A unified control center ensures all-in-one linkage among various devices and systems and facilitates convenient device operation and management, improving security for businesses and home owners. Enter Hikvision Hikvision’s IP intercoms serve a wide range of scenarios including apartment buildings, single-family homes, and SMB offices. In residential applications, these advanced intercoms combine a better user experience with elegant design to suit any decor, as well as a touch-friendly screen for easy operation. Users can remotely open doors and talk to visitors by simply tapping the Hik-Connect mobile app on their smartphone or tablet. For Business applications, Hikvision’s IP intercoms enhance safety levels and management efficiency with strong integration capabilities. Hikvision’s All-in-One Indoor Station Series controls and manages all Hikvision access control, video security, and alarm devices through the built-in Hik-Connect app. The product series can also be converged with third-party applications to satisfy customized or personalized needs. Also Read:-Integration Streamlines in-Home Peace of Mind

Read More

Future of Work – The Need for Cloud Security to Have Behaviour-based Approach

Punit Thakkar, CEO & MD, Shivaami Cloud Solution According to corporate policy and regulatory requirements, 57% of organisations find it difficult to properly protect data in multi-cloud environments. As different environments have different built-in security controls and tools, it’s difficult to achieve consistent protection. With vulnerabilities present and threats waiting to pounce, cloud security challenges are everywhere. According to a report published this year, 27% of companies have had a security incident in their public cloud infrastructure. Cloud providers are under a lot of pressure to add new services and increase uptime as they are notable to understand whether the investment made in security to protect their customers’ assets is at a proper level. Tech-based approach is no longer enough There are several moving parts that facilitate today’s cloud security challenges, but one stands out in particular – human error. It isn’t due to a lack of standards, policies, or procedures, nor is it due to a lack of technical controls. The expected oversights, unsurprising incidents and predictable breaches will continue to occur in Cloud infrastructure. Network hosts, web applications and web service endpoints can all be attacked by virtually anyone on the internet, even in commoditized cloud environments that are assumed to be secure. The enterprises may not be aware of it, particularly if cloud vendors lack the visibility and control required for detection and response. How to overcome and minimize damages resulting by human error? Customers must better employ behavioural analytics with a focus on human trends, patterns, activities and habits to ensure cloud security for the enterprise as online information access behaviour is changing at light speed. User Behaviour Analytics (UBA) solutions analyse patterns of human behaviour and use algorithms and statistical analysis to identify meaningful anomalies that may indicate potential threats. It’s preferable to be proactive rather than reactive in this situation by users testing the cloud environments if allowed to. It is good to atleast request for a copy of the vendors’ most recent security audit and security assessment reports. Behavioural analytics can be used by businesses to create and lay out a standard baseline of expected standard data usage activity. Only then it is possible to set the trap for abnormalities that could indicate malicious intent or a mistake and take up the necessary steps as needed. It’s always a good idea to verify by asking tough questions about the flaws. Only by using such a defensible approach it is possible to successfully address the cloud security challenges that might occur in the future. Cyber security will increasingly require a blended approach of technological safeguards and a focus on the human touch, as it continues to be an extremely complex and multi-layered problem caused by humans. Each of these vulnerabilities has one thing in common i.e. observable and correctable human behaviour. As a result, the cloud security landscape must now become more behavioural-based.  

Read More

Zero Trust is the Way Forward for Businesses Dodging Cyberattacks

Nirav Shah, VP and CTO, Forcepoint India Innovation Center Over the last two years, work has transitioned rapidly to remote and hybrid modes. Hackers embraced this move and profited from flaws and vulnerabilities in organisations’ security architecture. In 2021, corporate networks saw a 50% increase in cyber-attacks per week compared to the previous year, for example. Cybercriminals targeting business-critical and sensitive data such as personally identifiable information (PII), intellectual property (IP), and financial data, are keenly aware of how today’s cloud environments can be ideal targets. The way modern organisations operate means that legacy security approaches aren’t good enough. The boundary between an organisation’s network and the outside world is no longer as clearly defined. Data is constantly being shared, stored and accessed from all kinds of locations. With so much happening in cloudbased environments, the way organisations manage their cybersecurity and network security needs to evolve. Zero Trust is one approach that helps them face up to this new reality. Understanding Zero Trust Security Zero Trust is a network security concept based on the idea of ‘never trust, always verify’. No one individual or device in an organisation’s network should be allowed access to documents or data until they have been verified. No one is above this robust authentication and authorisation process, and any device and person must satisfy this whenever they seek access to part of a network or specific files. Part of a Zero Trust philosophy can include UEBA (user and entity behaviour analytics). By continuously monitoring network activity, and how users are interacting with data, a baseline of ‘normal’ activity is established. If there is a sudden change in that behaviour from normal patterns it can be flagged for someone to more closely monitor and increase security provisions as needed. For instance, let us take a scenario where an employee who usually signs in from Mumbai, India, is suddenly attempting to access company data from Istanbul, Turkey. UEBA would identify this abnormality in the employee’s behaviour and flag it. The employee may be served with an authentication challenge to verify their identity, even if their username and password were submitted successfully. Zero Trust takes security a step further from traditional perimeter-based security as it is location-agnostic. Even if attackers gain access to a company’s network, it doesn’t automatically mean all data and applications are up for grabs, because further authentication is required. Many firms allow far too many processes to operate openly on the network, making them easy targets for hackers hunting for enterprise networks with the bare minimum of security. Since the network is accessible for everyone inside the company, anyone can share information, which is concerning. Risks don’t just come from external actors, but insider threats too, as difficult as that may be for an organisation to face up to. A Zero Trust network is flexible enough to accommodate for these realities. How can organisations benefit from Zero Trust The best solution in a world where cybersecurity teams are struggling to keep up with the disparate tools and vendors they are juggling every day is one unified cloud service. This simplifies security, and allows distributed organisations to adapt to a hybrid workforce without putting business resources at risk. Building a zero trust philosophy into the way the corporate network and access management is designed is ideal for this. One of the benefits of this approach is that it reduces the attack surface. With Zero Trust, users connect directly to the apps and resources they need, as opposed to entire networks. A direct connection between users and apps is established, which eliminates the possibility of lateral movement to other services and data. Even if a single device gets infected, it happens in isolation – they aren’t connecting to a VPN which grants them the keys to everything, including other devices. Another important aspect of Zero Trust is that it integrates consistently into the experience users have. If a security tool is too intrusive and disruptive, employees will seek workarounds, which ultimately can open up security blind spots and flaws that cybercriminals can exploit. By operating at a network level, across all documents and data an employee might access, security teams can ensure authentication remains rigorous, without creating risks like shadow IT that come about when ‘official’ means of getting work done is seen as too challenging and convoluted. In a world where hybrid working is the norm, a simplified solution to cybersecurity is the only way business leaders can secure their users and data across all kinds of locations and services. By moving everything to one central platform, teams can ensure one set of policies is applied consistently from one cloud platform. As a business grows, this protection can also be scaled alongside it. Zero Trust is a critical element of the straightforward fix that organisations desperately need to manage their cybersecurity.  

Read More

Fintech Industry Success: Formula Security, Data Analytics & Product Development Driven by AI

Vishal Singhal, Co-Founder, CellStrat Digital Payments are estimated to grow at a rapid pace to account for more than 70% share of all payments by 2025. The continued innovation and increased performance in digital technology, consumer demand for onetouch payments, policy push towards financial inclusion, desire to marginalize cash, and an exponential rise in digital applications and services are the mega-trends that are driving the Digital Payments revolution. This increase in digital transaction has led to the growth in breach of data in 2021 by 10% YoY, with the average amount of financial damages caused to a record $4.24 million. Fraudsters who obtain this information can carry out various kinds of frauds, ranging from locking the users out of their online accounts to full-blown identity theft. AI is by far the most effective preventive measure against financial fraud, as it can review through huge amounts of data to identify the risk patterns. Suspicious activities and individuals can then be separated for further review to distinguish between actual fraud and false positives. Artificial intelligence is being actively used to reduce the latest financial crime in bonuses from new deposit accounts or credit cards, as well as monthly subscription purchases made online. The Fintech industry is one of the first to embrace data science. It makes extensive use of algorithms to create services that are both faster and more precise than those provided by traditional banking institutions. The payment industry is increasingly being driven by information and data, as technology is the backbone of the Fintech sector, allowing financial institutions to quickly respond to changing customer preferences and emerging trends to drive future growth. The ecosystem, which includes loan issuers, credit card companies, retailers, and insurers, has recognised that big data processing techniques will not only simplify complex tasks like risk management and financial inclusion, but will also enable Fintech players to better serve potential customers. Benefits Fintech industry can reap by using AI: Stronger Security: AI in cyber security comes in the form of chat-bots that convert FAQs into simulated conversations. They have the ability to reset forgotten passwords and grant additional access as required. Artificial intelligence can analyse large amounts of data and improve successively over time using machine learning. Artificial intelligence is being used to identify fraudulent activity, suspicious transactions, and provide a boost to processing sensitive financial documentation, reducing security risk, by being able to discern patterns and suspicious behaviours. Enhancing operations through automation: AI has the ability to generate financial reports much faster and with a lower risk. It has the technological capabilities to provide employees with tracking and automating processes, data entry, fraud and security. It has the ability to watch, learn and verify events for anomalies. Improved customer service: Artificial intelligence has improved customer service, which is one of the most prominent area of fintech. Transactional calls and traditional helplines will become less important as deep learning algorithms and AI’s ability to understand hu man language and formulate convincing responses improve. AI can understand and follow workflows with minimal risk of error or duplicated processes, resulting in significant reductions in manual management. Analytics and insights: AI provides Fintech companies with game-changing insights, which are reliant on collecting and processing client data. Artificial intelligence (AI) solutions are extremely useful for fraud detection and claims management, as the AI tools are used to track behaviour patterns and detect fraud by identifying warning signs. AI systems can adapt and incorporate undiscovered cases into their detection capacities over time with their self-learning abilities. Virtual assistants and chatbots: Fintech firms provide appropriate data and advice for each transaction. Personalization is becoming increasingly important in the fintech sector as the cost of labour in offshore outsourcing and robotics have increased. Chatbots and assistants powered by AI can reduce costs, as text-based personal assistants provide expertise and human-like interaction without having to increase the manpower. Automatic Damage assessments and claims management: Fintech firms provide damage assessment for assets like cars, mobile devices, goggles, shoes, cycles and many other kinds of assets in case of accidents or mishandling. However, it requires lot of manpower and at times logistics costs as well which becomes a huge cost for the customers and companies both. However, computer vision based Artificial Intelligence solutions mitigate the need of manpower involvement and decreases logistics costs to a great level thus benefitting the brands positively on the bottom line while taking the customer service experience too to next levels. As technology continues to rapidly advance, artificial intelligence might be the future of the Fintech industry. The ability to conduct financial transactions without the use of a traditional banking intermediary, technology is no longer centralised to monolithic databases and transaction engines. It is all about giving customers and employees the freedom to work smarter, make better decisions, and focus on what matters most. It is the best time to embrace the potential of AI as the driving force for the growth and development of the Fintech businesses.  

Read More