Prabh Nair

The session begins with a comprehensive introduction to Zero Trust Architecture (ZTA) and its practical implications, led by Pushpendra, a security expert. The discussion revolves around understanding Zero Trust beyond the common "never trust, always verify" approach, emphasizing the depth of its implementation and practical use in organizations. The session provides a practical, real-world insight into Zero Trust, offering guidance for organizations at any stage of their Zero Trust journey.Key Insights:Zero Trust Defined:Zero Trust is not just a security model or set of technologies but an evolving architecture that demands strict verification and monitoring of all access requests.It departs from the traditional parameter-based security and focuses on securing identities, devices, networks, applications, and data with continuous monitoring and authentication at all points.Cybersecurity Governance:Practical Implementation Challenges:Pushpendra highlights how Zero Trust is not a plug-and-play solution. It involves detailed analysis of current infrastructure, identifying gaps, and then bridging those gaps with tailored solutions.Zero Trust is a journey, not a one-time project. It evolves as threats evolve, and the solution needs to be continuously monitored and refined.Roadmap for Zero Trust:Pushpendra lays out a high-level roadmap for implementing Zero Trust:Conduct a risk and gap analysis.Define goals and objectives (e.g., enabling MFA for all users).Develop a framework for Zero Trust with clear policies and principles.Prioritize tasks based on business needs.Continuous monitoring and risk assessment to fine-tune processes.Ensure proper training and education for employees.People, Process, and Technology:Pushpendra emphasizes that technology is just one aspect of Zero Trust. The people and processes involved in the security architecture are equally critical.A solid governance and communication structure is required to align security efforts across the organization.Conclusion:The session concludes with a reminder that Zero Trust is a holistic, business-driven architecture that should evolve with organizational needs and threats. It requires a balance of people, processes, and technology, and it’s crucial to continuously assess and adapt.Pushpendra leaves the viewers with practical advice on adopting Zero Trust:Avoid vendor-driven solutions and focus on business-specific needs.Make Zero Trust part of a long-term security strategy and roadmap.Playlist CISO Talkhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1LzzrLwTiSt5d_kO_0QsEPlaylist Network Securityhttps://www.youtube.com/playlist?list=PL0hT6hgexlYzX6AWwcyDbAZQUKYJL2MdtGRC Interview Questionshttps://youtu.be/4TyfNtFGAC4Internal Auditor Playlist https://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvHow to make career progression post #isc2 and #isaca https://www.youtube.com/watch?v=PT0fnCWzAFA&pp=ygUJZ3JjIHByYWJoHow to make career in GRChttps://www.youtube.com/watch?v=_S4t9S5N4Ts&t=102s&pp=ygUJZ3JjIHByYWJoHow to Build PIMShttps://www.youtube.com/watch?v=IwAseU4ZmuQHow to Implement 27001 in an organization https://www.youtube.com/watch?v=sQqJH2naU6IHow to conduct PIAhttps://www.youtube.com/watch?v=z1BD7exH2Ow&t=774sHow to Make an career in GRChttps://www.youtube.com/watch?v=_S4t9S5N4Ts&t=7sTelegram Grouphttps://t.me/InfoseclearningStart your career in cybersecurity with free resources https://lnkd.in/g89gxkzc Cybersecurity Career: How to Make a Career in Cybersecurity 2022 https://lnkd.in/gCGBnRM7Pentesting Career https://lnkd.in/gQYenKYdTelegram Group Linkhttps://t.me/InfoseclearningCybersecurity Guidehttps://www.youtube.com/playlist?list=PL0hT6hgexlYwdYBW6yqUQMuRqvABiQPXk#ZeroTrust #CyberSecurity #ITSecurity #PushpinderSingh #PracticalGuide #ZeroTrustImplementation #DigitalSecurity #SecureArchitecture #cyberdefense #cloudsecurity #cybersecurity

Are you ready to dive into the world of SOX compliance and change management? In this comprehensive video, Mr. Chinmay breaks down the entire change management audit process and how it complies with the Sarbanes-Oxley Act (SOX). We explore the crucial role of change management in ensuring IT General Controls (ITGC) are met and maintained within organizations.This video includes a detailed case study, providing real-world examples of how change management audits are conducted and the common challenges faced. Mr. Chinmay walks you through each step of the process, making complex concepts easy to understand, whether you're an IT professional, auditor, or just someone looking to expand their knowledge.🔍 What You Will Learn:The basics of SOX compliance and its importance in ITGC.How change management plays a critical role in SOX audits.Step-by-step walkthrough of the change management audit process.A real-world case study to illustrate the application of change management in SOX compliance.Key tips and best practices for successful SOX compliance in change management.Why Watch This Video? Understanding SOX compliance and its relationship with change management is essential for IT professionals and auditors. This video provides valuable insights and practical knowledge to help you navigate the complexities of SOX compliance and ensure your organization meets all necessary requirements.ISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWv#SOXCompliance #ChangeManagement #ITAudit #ITGC #SOXAudit #SarbanesOxley #Compliance #ITGovernance #AuditProcess #ITRiskManagement

In this digital forensics master class session, we dive into skills, careers, real case studies, and more. Learn from experts in the field to enhance your knowledge!In this powerful episode of Coffee with PR, we sit down with Mr. Dipin Nair, a seasoned Digital Forensics & Incident Response (DFIR) expert with 20+ years of experience.This is not a textbook discussion.This is real.We break down:✔ Why Digital Forensics is NOT just a career — it's a path✔ Why most cyber security professionals fail in DFIR✔ The real roadmap to become a Digital Forensics Investigator✔ Memory Forensics vs Disk Forensics explained with real cases✔ Mobile Forensics challenges in modern investigations✔ Court admissibility of digital evidence (Bharatiya Sakshya Adhiniyam 2023)✔ Real C2, phishing & social engineering case studies✔ How anti-forensics techniques are used by attackers✔ What makes evidence invalid in courtReal Case Studies DiscussedFileless malware detected through memory forensicsPhishing XLS attachment leading to data exfiltrationFake CV portal attack (CV Scout technique)MFA Push Notification abuse (Kavach exploitation case)Insider honeytrap data exfiltration caseAnti-forensics tool usage and log wiping🎯 DFIR Career Roadmap CoveredTo enter Digital Forensics, you must master:Operating System Internals (Windows + Linux)Network Fundamentals (TCP/IP, DNS, Firewalls, EDR)Legal & Evidence Handling ProcessDocumentation & Chain of CustodyCourtroom Presentation SkillsPatience & Investigative MindsetDFIR requires:Technical depthLegal awarenessInvestigative thinkingCommunication skillsReal hands-on practice🛠 Beginner Tools MentionedAutopsySIFT WorkstationWiresharkFTK ImagerOSForensicsVelociraptorREMnuxWho Should Watch This?✔ Cybersecurity Students✔ SOC Analysts✔ Incident Responders✔ Pentesters✔ GRC Professionals✔ Law Enforcement Officers✔ Anyone planning a career in Digital Forensics#DigitalForensics #DFIR#CyberSecurityCareer #IncidentResponse#MemoryForensics #CyberLaw#EthicalHacking #SOCvsDFIR #CyberSecurityIndia #ForensicsInvestigationDipin Nairhttps://www.linkedin.com/in/s-dipin-nair/SOC Playlisthttps://www.youtube.com/watch?v=zCLlrFZU0M8&list=PL0hT6hgexlYxd24Jb8OE7vZoas-iTcHAcCISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvStudy with MeTelegram Grouphttps://t.me/Infoseclearning#digitalforensics #difr #infosec #cybersecurity #forensics #socanalyst

Secure by Design means security is built into the product from the beginning, not patched in after vulnerabilities show up.In this episode, Prabh sits with Abhijeth to break down Secure by Design principles and threat modeling in a way that actually feels practical. We run a simple threat modeling exercise using a vending machine scenario to show how attackers think, how threats get missed, and how to design controls that prevent predictable failures.GUESTAbhijit: [https://www.linkedin.com/in/abhijeth/]WHAT YOU’LL LEARN- What Secure by Design really means in product development- Why “functionality first” creates security debt later- Security by Design vs Secure by Design (quick clarity)- Threat modeling approaches: asset-centric, attacker-centric, and system/data-centric- A practical threat modeling walkthrough using a vending machine scenario- How to handle vulnerabilities with collaboration, not blame- Learning resources to level up in Secure by Design and threat modelingKEY TAKEAWAYS (FAST RECAP)1) Security must be part of the first design conversation, not the last checklist.2) Threat modeling is a thinking habit, not a document.3) When you find a vulnerability, fix the system, not the person.CISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBLinkedin Profile of Prashanthttp://linkedin.com/in/prashant-mohan-cissp-issap-ccsp-04610215Book Building Blocks: Comprehensive guide to build a security architecture programhttps://amzn.to/4szY0QvISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWv#SecureByDesign #ThreatModeling #ProductSecurity #AppSec #CyberSecurity #SecurityArchitecture

In this episode, I sits with Ansh Bhawnani to break down what an AppSec engineer really does and how you can build the skills to enter application security with practical experience.We talk about Ansh’s journey from a curious college student learning hacking to becoming a working AppSec professional and content creator, and we keep the conversation grounded in real skills: networking fundamentals, code literacy, pentesting mindset, and business risk communication.GUESTAnsh BhawnaniLinkedIn: https://www.linkedin.com/in/ansh-bhawnani/YouTube: https://www.youtube.com/@BittenTechWHAT YOU WILL LEARN- What an AppSec engineer does day to day: testing, code review, triage, and collaboration- Why practical work beats scattered learning and how to build a clean learning path- Why AppSec needs both technical depth and business risk thinking- How AI helps in repetitive tasks, but cannot replace human judgment in complex assessments- Certifications vs experience: how to choose what actually moves your career forwardRESOURCES MENTIONEDNetworking playlist: https://www.youtube.com/playlist?list=PLkW9FMxqUvyZaSQNQslneeODER3bJCb2KProgramming playlist (JavaScript course): https://www.youtube.com/playlist?list=PLkW9FMxqUvyb5GYGth_2Q32iQqT933VT2Ansh’s Bug Bounty Beginner Roadmap (GitHub): https://github.com/bittentech/Bug-Bounty-Beginner-RoadmapCISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvStudy with MeTelegram Grouphttps://t.me/Infoseclearning#AppSec #ApplicationSecurity #CyberSecurity #BugBounty #Pentesting #OSCP #HackerOne #appsec

this in-depth video, we explore the essential requirements to comply with ISO 27001:2022 Clauses 8 to 10. We break down the components of each clause, explaining how they fit into your Information Security Management System (ISMS) and what auditors look for in compliance. This video is designed to provide a complete guide on achieving compliance, including the specific documents you need for each clause. After discussing each clause, we provide a summary checklist, covering the mandatory documents and actions needed to help you successfully navigate your ISO 27001 audit.Key topics include:Clause 8: Operation – Requirements and documents needed for secure ISMS operationsClause 9: Performance Evaluation – Checklist for monitoring, measurement, and auditingClause 10: Improvement – Key actions for continuous improvement and corrective actionsMandatory document checklists for Clauses 8, 9, and 10Practical tips for audit success and maintaining ISO complianceThis guide is perfect for those preparing for ISO 27001:2022 certification and looking for a clear roadmap to meet audit requirements. Make sure to watch until the end for a complete checklist of documents you’ll need!ISO 27001 Playlisthttps://www.youtube.com/playlist?list=PL0hT6hgexlYys_9UWhal1kr9Gkz0ms0sM#ISO27001 #ISOCompliance #ISO27001Clause8 #ISO27001Clause9 #ISO27001Clause10 #AuditPreparation #ISMS #ISOCertification #ISOChecklist #InformationSecurity

In this bootcamp session, Prabh Nair breaks down ISO/IEC 42001 and the practical reality of AI governance inside organizations.
If you are trying to implement an AI Management System (AIMS), this session walks you through the governance principles, the clause structure, the documentation mindset, and how to run AI risk assessments and impact assessments in a way that stands up to audits.WHAT YOU’LL LEARN- Why AI governance matters: bias, misinformation, misuse, and trust- The 5 AI governance principles: accountability, transparency, fairness, safety, and balanced innovation- ISO/IEC 42001 structure: clauses, annexes, and the PDCA cycle- AIMS implementation in 4 phases: gap analysis, planning, implementation, verification- Defining your organizational role: AI provider, producer, customer, partner, subject, authority- Project charter essentials: scope, context analysis, interested parties- Risk assessment methodology: likelihood, impact, and how to set criteria based on context- Risk assessment vs impact assessment: business risk vs human harm- When assessments must be repeated: planned intervals and major changes (data, model, rollout, geography)- Documentation and audit readiness: objectives, SoA, change management, competence, awareness, version controlPractical AI Governancehttps://www.youtube.com/watch?v=dQUML9vnlY4&t=3180s&pp=ygUKYWltcyBwcmFiaA%3D%3DAI Governancehttps://www.youtube.com/watch?v=LgFBi5XD-Ow&t=5668s&pp=ygUTYWkgZ292ZXJuYW5jZSBwcmFiaA%3D%3DAI Agent Governance https://www.youtube.com/watch?v=i721IZkpG8I&t=423s&pp=ygUYYWdlbnRpYyBnb3Zlcm5hbmNlIHByYWJo#ISO42001 #AIGovernance #AIMS #AIRiskAssessment #AICompliance #ISOCertification #Cybersecurity #GRC

Lazarus Group (widely attributed to North Korea) isn’t just “hacking” – it’s a repeatable cybercrime process: phishing, recruitment fraud, access, theft, then cryptocurrency laundering.In this podcast, investigative journalist and author Geoff White joins Prabh to break down how modern cybercrime actually works, why HR teams are now part of the attack surface, and what leaders can do to reduce real-world risk.GUESTGeoff White (LinkedIn): https://uk.linkedin.com/in/geoffwhitetechWHAT WE COVER- Lazarus tactics: phishing, insider targeting, and recruitment-style social engineering- Recruitment fraud: why Cybersecurity + HR must work together- Crypto laundering evolution: wallets → mixers → OTC brokers and beyond- WannaCry investigation lessons and why “evidence” can mislead- State cyber warfare: how weaker states use cyber tactics for leverage- AI and investigations: why human intuition still matters- Resilience planning: build an “if team” (prevention) and a “when team” (response)KEY TAKEAWAYS (FAST RECAP)1) Treat cybercrime like a business process, then break the chain.2) Recruitment and HR workflows are now security controls, not “admin work.”3) Incident readiness is not optional – plan for “when,” not just “if.”#LazarusGroup #CyberCrime #NorthKorea #CryptoLaundering #RecruitmentScam #Phishing #IncidentResponse #CyberSecurity #OSINT #ThreatIntel

In this episode, Prabh Nair is joined by Jayant, CISO for Asia Pacific and Japan at Check Point Software Technologies, for a grounded conversation on what cybersecurity leadership really means at the CISO level.The discussion goes far beyond tools, products, and frameworks. It focuses on the mindset shift every CISO must make — from being a technical security expert to becoming a business-aligned risk leader.Jayant shares real-world experiences from global enterprises, including a critical lesson from deploying network access controls in a low-latency trading environment. The case highlights a hard truth many security leaders learn late: a technically correct control can still be a business failure if it ignores how the business actually operates.Throughout the conversation, the focus remains on understanding business dynamics, risk appetite, and outcomes before deploying security controls. We explore how the role of the CISO has evolved as enterprises moved from a small set of tools to managing dozens of security platforms, multiple cloud service providers, and complex regulatory expectations across regions.Key themes discussed include:Why CISOs must act as translators between technology, business, and regulatorsHow security practices need to align with peak business usage and time-to-market pressuresThe shift from CapEx to OpEx models and its impact on security strategyChallenges of securing cloud and hybrid environments, especially for regulated and critical infrastructuresWhy cyber resilience is about tested failover and recovery, not documentationHow regulators now demand evidence that controls actually workThe role of AI in cybersecurity — not as magic, but as an amplifier of both threats and defensesJayant also shares insights on CISO leadership skills, emphasizing adaptability, stakeholder alignment, and the ability to communicate cyber risk in business language to CEOs, CFOs, boards, and regulators.If you are a:CISO or aspiring CISOSecurity leader, architect, or consultantGRC, audit, or risk professionalEngineer transitioning into leadershipthis episode will help you understand how CISOs think, decide, and balance growth with security in real organizations.CISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBLinkedin Profile of Prashanthttp://linkedin.com/in/prashant-mohan-cissp-issap-ccsp-04610215Book Building Blocks: Comprehensive guide to build a security architecture programhttps://amzn.to/4szY0QvISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWv#ciso #cybersecurity #infosec #resilience #cyberresilience

Are you planning to implement ISO 27001 and wondering how to start? In this comprehensive video, we guide you through the process of writing a Project Initiation Document (PID) specifically for ISO 27001 implementation. This is the first video that covers everything from scratch—so whether you're a beginner or a seasoned professional, this video is designed to help you prepare a successful Project Initiation Document.What You Will Learn:What is a Project Initiation Document? We break down its purpose and significance in ISO 27001 implementation.Key Questions to Ask: Discover the essential questions you need to address while preparing a PID.Complete Content Overview: A detailed breakdown of what your Project Initiation Document should include, such as scope, objectives, timelines, risk management, and resources.Best Practices for ISO 27001 Implementation: Practical tips on how to structure your document to ensure a smooth ISO 27001 project kick-off.This video is a must-watch for anyone tasked with ISO 27001 implementation, especially those unfamiliar with creating a Project Initiation Document. By the end, you'll have a clear understanding of how to write an effective PID that sets the foundation for a successful ISO 27001 project. Key Topics Covered:Introduction to Project Initiation Documents (PIDs)Content required in a PID for ISO 27001Questions you must answer before creating your PIDReal-world case examples and step-by-step explanations💡 Why This Video is Unique: This is the first video to provide a detailed, practical guide on preparing a Project Initiation Document tailored to ISO 27001 implementation. If you're looking to save time and avoid mistakes in your ISO 27001 project, this is the resource for you.How to Implement ISO 27001 Implementatationhttps://www.youtube.com/watch?v=tvd1MUf3aHE&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzHow to Write ISMS Context Part 2https://youtu.be/wL2GSovv4Ok🔔 Don’t forget to like, comment, and subscribe for more in-depth ISO 27001 implementation guides!#ISO27001 #ProjectInitiationDocument #ISO27001Implementation #ISMS #CyberSecurity #Compliance #ProjectManagement #InformationSecurity #CyberSecurity2024 #ISO27001StepByStep