Content by Geetha Nandikotkur

Building an Effective Ransomware Mitigation Strategy

Geetha Nandikotkur  •  October 19, 2020

To mitigate the risks posed by ransomware attacks, enterprises need to move from file-based security to a behavior-based approach, says Jennifer Ayers, vice president of the OverWatch division of Crowdstrike.

PSD2 Compliance: Sizing Up the Challenges

Geetha Nandikotkur  •  September 4, 2020

European banks are not ready to meet the Dec. 31 deadline to comply with the PSD2 regulation, which requires strong customer authentication when providing API access to banking platforms, says Dr. Steven J. Murdoch, a principal research fellow at University College of London.

The SASE Model: What's Driving Adoption?

Geetha Nandikotkur  •  August 31, 2020

The need for enhanced business agility and secure remote access to support digital transformation has led to the adoption of the security access service edge, or SASE, model, says Rajpreet Kaur, senior principal analyst at Gartner.

Securing Remote Access With Risk-Based Authentication

Geetha Nandikotkur  •  August 19, 2020

Implementing an adaptive, risk-based authentication process for remote system access is proving effective as more staff members work from home during the COVID-19 pandemic, says Ant Allan, a vice president and analyst at Gartner.

Thwarting BEC Scams That Target Privileged Users

Geetha Nandikotkur  •  August 13, 2020

To help mitigate the risks posed by business email compromise scams that target privileged users, enterprises need to create a detailed enterprise risk management plan that spells out procedures to secure accounts, says Espen Otterstad, CISO at Norwegian telematics company ABAX AS.

Deception Technology: Maximizing the Impact

Geetha Nandikotkur  •  June 19, 2020

Organizations deploying deception technology must make sure to integrate it with other technologies to reap the full benefits of intrusion alerts, says Anuj Tewari, global CISO at IT Services HCL Technologies.

Using the 'Zero Trust' Model for Remote Workforce Security

Suparna Goswami , Geetha Nandikotkur  •  May 20, 2020

The massive shift to remote working as a result of the COVID-19 pandemic means more organizations are adopting the "zero trust" model, taking such steps as implementing proper access controls, monitoring user behavior and building data governance policies.

Addressing Shadow IT Issues During COVID-19 Crisis

Suparna Goswami , Geetha Nandikotkur  •  April 17, 2020

With the massive shift to telework as a result of the COVID-19 pandemic, shadow IT is becoming a more critical security issue around the world. Security experts offer tips on mitigating the risks involved.

Citrix Vulnerability Could Affect 80,000 Companies: Report

Geetha Nandikotkur  •  December 26, 2019

Researchers at Positive Technologies say they discovered a vulnerability in enterprise software offerings from Citrix that potentially could put 80,000 companies in 158 countries at risk of a cyberattack.

Mozilla: Firefox Add-On Developers Must Use 2FA

Geetha Nandikotkur  •  December 17, 2019

To help enhance security, Firefox extension developers will be required to set up their accounts to support two-factor authentication beginning early next year, Mozilla, the open source community that supports the browser, has announced.

PSD2 Authentication Deadline Extended: Here's What's Next

Geetha Nandikotkur  •  October 23, 2019

Now that the deadline for all e-commerce card-based transactions in the EU to comply with the new PSD2 "strong customer authentication" requirement has officially been extended to Dec. 31, 2020, authorities are emphasizing the need to make a smooth, uniform migration to the new forms of authentication.

Open Cybersecurity Alliance: In Pursuit of Interoperability

Geetha Nandikotkur  •  October 17, 2019

Eighteen technology companies have formed the Open Cybersecurity Alliance to foster the development of open source tools to improve interoperability and data sharing between cybersecurity applications. But some observers say getting all players to agree on a common platform will be challenging.

PSD2 Authentication Deadline Needs to Be Firmed Up - Now

Geetha Nandikotkur  •  September 30, 2019

Delayed enforcement of the "strong customer authentication" requirements for online transactions under the European Union's PSD2 regulation is hampering efforts to enhance security. That's why the European Banking Authority should act quickly to develop a new timeline.

PSD2 Authentication Requirements: The Implementation Hurdles

Geetha Nandikotkur  •  September 13, 2019

Because banks, fintech firms, merchants and payments processors in the EU have struggled to meet the Sept. 14 deadline for compliance with the new PSD2 "strong customer authentication" requirements for electronic payments, it may take a while for European consumers to notice authentication changes.

Cloud IAM: Integration Issues

Geetha Nandikotkur  •  July 23, 2019

A major misconception about cloud IAM is that it's easy to implement, says Mark Perry, CTO for APAC at Ping Identity. Implementation poses challenges, and cloud IAM must be carefully integrated with other systems, he says.