Content by Suparna Goswami

Union Budget 2019: What Does it Mean to Cybersecurity?

Suparna Goswami , Geetha Nandikotkur  •  July 5, 2019

Union Finance Minister Nirmala Sitharaman presented the budget for the year 2019-20, laying emphasis on skills development around new technologies, expanding the scope of Aadhaar and giving impetus to start-ups through tax incentives.

Vulnerabilities Found in Yet Another Government Website

Suparna Goswami  •  July 4, 2019

A security researcher reports that Uttar Pradesh State Road Transport's website had a vulnerability that could have been exploited by hackers. The news comes as the Indian government promotes greater digitization, yet so many public sector sites appear to be riddled with exploitable flaws.

Huawei Offers 'No Backdoor' Assurance, But Tests Are Needed

Suparna Goswami  •  July 3, 2019

Last week, Chinese telecom equipment maker Huawei offered the Indian government a "no backdoor" agreement. But the government urgently needs to set up test beds to check equipment imported not only from China but also other nations to ensure their security as the nation prepares for 5G.

Third-Party Risk Management: Asking the Right Questions

Suparna Goswami  •  June 28, 2019

An effective third-party risk management program starts with asking the right questions, says Brad Keller, chief strategy officer and senior vice president at the Santa Fe Group, a strategic advisory company, who spells out key issues to address.

Parliament Considers Bill to Modify Aadhaar Use

Suparna Goswami  •  June 27, 2019

The India parliament is considering a new Aadhaar amendment bill that would introduce a host of changes in line with the Supreme Court's decision that Aadhaar cannot be made mandatory for identification and authentication for certain private-sector purposes.

Investigators Probe Attacks on At Least 3 Bangladesh Banks

Suparna Goswami  •  June 26, 2019

Authorities in Bangladesh are investigating hacker attacks against at least three banks in that nation last month. Dutch Bangla Bank Ltd. lost as much as $1.4 million in an attack, which apparently involved planting malware in an ATM switch, according to news reports.

Developing a Robust Third-Party Risk Management Program

Suparna Goswami  •  June 24, 2019

Too many organizations around the world take a "bare minimum" approach to third-party risk management, says Jonathan Ehret, founder of the Third Party Risk Association, who offers risk mitigation insights.

Despite Shift to EMV, ATM Fraud Persists

Suparna Goswami  •  June 21, 2019

Despite India's move to EMV-chip payment cards, ATM fraud continues to take place. Experts say risk of skimming is not eliminated with chip cards if they still have magnetic stripe and ATMs continue to read these stripes.

A CISO Offers Third-Party Risk Management Tips

Suparna Goswami  •  June 14, 2019

An essential component of a vendor risk management program is to understand how an organization's risk posture changes when a new vendor is added - especially if they have subcontractors, says Jagdeep Singh, CISO at InstaRem, a Singapore-based fintech company.

Government Mulls Banning Cryptocurrencies

Suparna Goswami  •  June 13, 2019

Regulators from government ministries, as well as law enforcement authorities, are considering a ban in India on the sale, purchase and issuance of all types of cryptocurrencies, including Bitcoin, according to news reports.

Key Vendor Risk Management Steps

Suparna Goswami  •  June 6, 2019

Key vendor risk management steps include determining upfront how much the vendor will interact with various stakeholders and interact with the news media in case of a breach, says Satyavathi Divadari of Cognizant.

Why Breach Simulation Exercises Are Essential

Suparna Goswami  •  June 6, 2019

Businesses need to move beyond security certifications and conduct breach simulation exercises for employees to ensure they're well-prepared, says Rakesh Kharwal of Cyberbit.

Managing IoT Device Risks

Suparna Goswami  •  June 4, 2019

All companies must follow certain guiding principles when it comes to managing thousands of IoT devices, says security specialist Minatee Mishra of Philips HealthTech India.

The Impact of Data Localization on Security

Suparna Goswami  •  June 4, 2019

Dharmaraj Ramakrishnan, senior director at FIS Global, sizes up the potential impact of data localization in India as well as the pending data protection bill.

CCPA vs. GDPR: A CISO's View

Suparna Goswami  •  June 3, 2019

Unlike the European Union's General Data Protection Regulation, the California Consumer Protection Act is very prescriptive in nature, says Subhajit Deb of Dr Reddy's Laboratories, a global pharmaceutical company. In a video interview, he offers compliance insights.