Improving the reliability of cyberattack data collection and reporting

Post-breach analysis can be frustrating for CISOs. Even when full forensic probes are completed within a week of an attack, those results have limited reliability and may be contradicted by subsequent investigations. Given the SEC requirement of reporting findings within four days of an attack, an inability to immediately identify attack details creates massive compliance issues. 

Rich Greco, Global Head of Critical Incident Response at Wipro, explains the different methods of data capture that can help to identify the details of an attack within hours of its discovery.

In this podcast, Wipro’s Nico Capitoni talks with Rafael Villoria Ferrer, Deputy CISO and Global Head of SOC at Nestlé. The discussion focuses on the importance of integrating cybersecurity awareness into the professional and personal lives of employees and the need for on-the-spot training.

Rafael highlights the role of threat intelligence and agility in staying ahead of emerging threats and regulatory changes, and why this requires a strong partnership with legal teams.

Nico and Rafael also explore the significance of adopting Zero Trust principles, and the importance of a strong security hygiene foundation that combines SOAR and breach attack surface management. Lastly, Rafael shares insights on retaining top talent by establishing a people-first culture that offers transparency and challenging projects.

Listen in as Nico Capitoni, Wipro Cybersecurity and Risk Services practice lead for Switzerland, and Gomeet Pant, ABB Group VP and Global IS Manager for Security Technology Services, discuss top cybersecurity trends, including the evolving regulatory landscape and the latest cloud security innovations. 

Nico and Gomeet explore the critical role of AI in enhancing security measures to protect organizations from disruptive cyber attacks. They also discuss strategies to overcome the cyber skills gap, such as keeping top talent engaged through personalized approaches that meet individual needs.

In this episode of the Innovation Today Podcast, Jim Van Over, Field Innovation Officer at ServiceNow, interviews Geoff Hauge, Managing Director and Financial Services Leader at Wipro/Edgile. They explore the evolving landscape of risk management and the transformative impact of artificial intelligence (AI) in the financial services industry. Geoff, drawing from his extensive experience in cybersecurity and risk management, highlights the challenges and opportunities AI presents. Whether you’re a seasoned professional or new to the field, this episode provides valuable insights into staying ahead of industry dynamics and leveraging technology for enhanced productivity and compliance.

The foundations and processes around how people approach AI security are not that different from other security programs. But like all emerging technologies, there are many nuances. One big difference with AI is the vast impacts it can have on human rights, privacy, fairness and safety.

In this podcast, Wipro General Manager Josey George talks about how CISOs should deal with the morality of responsible AI by ensuring the tech can “do the right thing.” Josey also touches on evolving standards, assessing AI attack surfaces, lack of visibility in how GenAI is being trained and how much of your intellectual property may be exposed inside third-party AI models.

It’s a fascinating 11-minute look into the future of this unique technology.

One of the more insidious threats to enterprise cybersecurity is that many companies have accumulated far too many security tools. Some are Shadow IT solutions that were needed a couple of years ago but have since been abandoned. Others are orphan tools from various acquisitions and mergers. CISOs are often not even aware of these hidden tools.

The threats to the enterprise are extensive. Hidden tools pose a security problem because malware can attach itself to these ignored pieces of code. Attackers can also leverage the gaps between tools to create an effective hiding place while they gain network access. And then there is the cost issue. The enterprise is paying license fees for tools that are not being used.

In this podcast, Wipro Partner Angshuman Chattopadhyay discusses how Wipro’s solution — Wipro SMC-AI — uses AI to find and rationalize these tools. He explains that Wipro SMC-AI has a highly customizable automation mechanism that gives CISOs the option to implement settings that instantly repair holes while operating in the background, or have a human approve every change before it happens.

Few technology trends in 2023 have generated as much attention — and concern — as generative AI.

Much of the focus has been on public GenAI models, including ChatGPT, BingChat and Google Bard. But these public apps open the doors to serious cybersecurity risks, such as leaking sensitive data enabling competitors to access trade secrets and coding issues that can inadvertently create backdoors and other security holes.

Listen to Wipro senior partner Saugat Sindhu discuss the best ways to execute a generative AI strategy today, including the pros and cons of using a private, closed-loop GenAI system.

Sindhu talks about how security leaders should evaluate and select a private AI system for employees, contractors and third-party partners. You’ll learn why it’s important for the CISO to monitor and manage the GenAI system as it learns and expands from user inputs, and why it’s critical to ensure that proprietary information does not become part of the model’s off-the-shelf content.

The days of trusted hosts are long gone. The Zero Trust model is becoming an absolute necessity. When anything hits your environment — a user, a network, an app or a spider — the default assumption is that the interaction is hostile and the entity is an attacker. We’ve moved past the “trust but verify” approach and replaced it with the “DO NOT trust and then verify.”

For an enterprise to embrace this type of Zero Trust security model, it must be implemented across every environment and every network. Listen to Wipro partner Angshuman Chattopadhyay discuss the strategic paths to take for a successful Zero Trust journey.

There is little debate in the enterprise security community that IoT devices pose serious cybersecurity challenges if they are not handled properly and strictly. But in today’s highly connected environments and expanded threat landscapes, the biggest IoT problem may simply be visibility. Listen to Wipro’s Samrat Chaudhuri discuss how security leaders are handling the IoT visibility challenge.

A conversation with Ashish Chandra, Wipro’s global identity practice leader shares insights into the importance of removing user passwords from the enterprise: why it is important today and how to start your journey.