Content by Suparna Goswami

GDPR: A De Facto Global Standard?

Suparna Goswami  •  April 16, 2018

The European Union's General Data Protection Regulation, which will be enforced beginning May 25, potentially could evolve into a defacto global standard, says Pavan Duggal, advocate in the Supreme Court of India.

RBI Mandates Domestic Storage of Payments Data

Suparna Goswami  •  April 12, 2018

The Reserve Bank of India is requiring that payment system operators store all their data domestically. Many security practitioners and payment companies in India have lauded the move, stating that the mandate could lead to quicker resolution of breach cases.

Using Blockchain for Securing IoT Devices

Suparna Goswami  •  April 10, 2018

Blockchain can be leveraged to help address certain security problems in millions of IoT devices, says Ratan Jyoti, CISO at Ujjivan Bank. In an interview, he describes the uses for blockchain he envisions.

India's Ministry of Defense Website Defaced

Suparna Goswami  •  April 6, 2018

The website of India's Ministry of Defense was hacked Friday evening. Although officials suspect Chinese hackers were involved, some security experts say that's unlikely.

Iranian Hackers Allegedly Attacked 4 Singapore Universities

Suparna Goswami  •  April 5, 2018

Four Singapore universities were allegedly attacked by an Iranian hacking group accused of stealing more than 31 terabytes of data from universities all over the world, local officials confirmed. Some 52 accounts were targeted.

India's Proposed Healthcare Data Security Law: The Reaction

Suparna Goswami  •  April 5, 2018

Security leaders in India are sizing up a Ministry of Health and Family Welfare proposal to roll out a digital information security law for the healthcare sector that includes a breach notification requirement.

5 Steps for Implementing an Effective Cyber SOC

Suparna Goswami  •  April 3, 2018

Cyber SOCs, the next generation of security operations centers, need to use a new approach to detecting emerging attacks, says Aadesh Gawde of the IT risk consultancy ProVise Consulting, who offers implementation tips.

Vendor Risk Assessment: Essential Components

Suparna Goswami  •  April 2, 2018

Vendor risk management is becoming more critical as companies rely more on partners who have access to payment card data and other sensitive information, says Ramon Lipparoni, IT integration manager at ComAir, a South African airline. One critical step, he says, is conducting impromptu vendor audits.

Attack on Job Portal Compromises Data

Suparna Goswami  •  March 30, 2018

Hackers have reportedly compromised over one lakh resumes uploaded on Naukri.com, an India-based job portal. A preliminary investigation has revealed that the IP address of the laptop used for the hacking was from Nigeria, according to the Deccan Herald.

More Indian Government Data Security Vulnerabilities Alleged

Suparna Goswami  •  March 27, 2018

A security researcher claims that Prime Minister Narendra Modi's app, called the NaMo app, is vulnerable and has been sharing information about its users, without their permission, to a third party in the United States.

Facebook Controversy: India Raises Privacy Concerns

Suparna Goswami  •  March 26, 2018

The IT minister of India, where Facebook has 250 million users, is using harsh language to warn the U.S.-based social media company to protect users' privacy in the wake of the Cambridge Analytica scandal. Meanwhile, some security practitioners say the incident could be a catalyst for tougher privacy laws.

Cyber Insurance: Breaches Drive Demand

Suparna Goswami  •  March 23, 2018

In the wake of the Punjab National Bank breach and other bank breaches, cyber insurance companies are seeing an uptick in demand for their products, says Anup Dhingra of Marsh India, an insurance brokerage and risk management firm.

A Cyber Espionage Group Re-Emerges

Suparna Goswami  •  March 22, 2018

A group of suspected Chinese cyber espionage actors, dubbed TEMP.Periscope or Leviathan, has re-emerged, targeting the maritime industry as well as others, according to a report from FireEye. Many of those targeted have connections to the South China Sea.

Securing Digital Payments

Suparna Goswami  •  March 20, 2018

Developing nations that are moving to digital payments, especially for the unbanked, need to keep in mind security lessons already learned in other markets, including Europe, says Steve Marshall, founder at Risk-X, a U.K.-based audit and risk assessment consulting firm.

Government Website Vulnerabilities: Mitigating the Risks

Suparna Goswami  •  March 19, 2018

There seems to be no end to the bad news about Indian government website vulnerabilities. What can the government do to better protect citizens' data? For starters, they should promptly pay attention to warnings from local security researchers.