Information Security – QUALITI CONSULTING

PECB Lead Cloud Security Manager

Posted by Venkaton March 12, 2021in Cybersecurity, Information Security, Management Consulting, Risk Management

PECB recently launched Lead Cloud Security Manager course and certification. This course is developed based on ISO 27017 and ISO 27018. ISO 27017 provides guidance to implement controls for cloud services and ISO 27018 provides guidance to implement controls to…

Cybersecurity Definition

Posted by Venkaton December 11, 2020in Cybersecurity, Information Security

I recently happened to download the Risk IT Framework, 2nd Edition from ISACA. During December 2019 the National Cyber Security Center of United Kingdom released the Cyber Security Body of Knowledge (CyBok 1.0). The CyBok has 19 knowledge areas which…

Audit Request List

Posted by Venkaton December 4, 2020December 4, 2020in Audit, Information Security, Management Consulting

Recently, one of my old student asked me to give some inputs on Data Request List (DRL) for IT General controls. I couldn't understand the meaning and informed him that I have not heard of such term in auditing body…

IT GENERAL CONTROLS

Posted by Venkaton November 28, 2020November 28, 2020in Cybersecurity, Information Security, Risk Management

IT General controls (ITGC's) are applicable to any information systems infrastructure. These controls are primarily in the following areas: Access Management (assess to data and programs), Change Management (Changes to programs and data), Systems development (feasibility, design, Testing, installation, version…

Personal Data Protection Act 2012 of Singapore

Posted by Venkaton November 26, 2020November 28, 2020in Information Security, IT Training, Privacy

Personal Data Protection Act 2012 of Singapore is to govern the collection, use and disclosure of personal data by organizations. Any organization who wants to demonstrate that they comply with PDPA of Singapore can apply DPTM certification. DPTM certification is…

ISO 27001 LA Training in Mumbai

Posted by Venkaton June 17, 2019November 26, 2020in Audit, Information Security, IT Training

I delivered an ISO 27001 LA training to the SOC team of large IT Services organization in Mumbai last week. They were a group of highly experienced and enthusiastic learners, the class was very interactive and we had role plays…

One Year of GDPR

Posted by Venkaton May 16, 2019November 28, 2020in Information Security, IT Training, Privacy, Risk Management

It has been just about more than an year since the enforcement of GDPR and it appears that there are thousands of data breach notifications. Please see the numbers of this one year of GDPR. https://iapp.org/resources/article/gdpr-one-year-anniversary-infographic/

Category: Information Security