About
As an Audit and Compliance Leader at Aptean, one of the world's leading professional…
Articles by Pinaki Ranjan
-
🌟 Unlocking the Mysteries of Artificial Intelligence: Beyond the Hype and Fiction 🌟
🌟 Unlocking the Mysteries of Artificial Intelligence: Beyond the Hype and Fiction 🌟
Artificial Intelligence (AI) has been a topic of fascination and speculation for decades. From Hollywood blockbusters…
4 Comments -
Securing the Future: Navigating the Evolving Landscape of Network Security
Securing the Future: Navigating the Evolving Landscape of Network Security
In our highly interconnected global society, where information is exchanged without barriers and the risk of cyber…
2 Comments -
🚀 Unlock the Power of AI Responsibly with ISO/IEC 42001! 🤖💼
🚀 Unlock the Power of AI Responsibly with ISO/IEC 42001! 🤖💼
AI is more than just a buzzword in today's fast-paced digital world; it's a game-changer for businesses all over the…
2 Comments
Contributions
Activity
-
𝗘𝗻𝘀𝘂𝗿𝗶𝗻𝗴 𝗖𝗼𝗻𝘀𝗶𝘀𝘁𝗲𝗻𝗰𝘆 𝗶𝗻 𝗜𝗧 𝗔𝘂𝗱𝗶𝘁𝘀: 𝗔 𝗖𝗮𝗹𝗹 𝗳𝗼𝗿 𝗚𝗿𝗲𝗮𝘁𝗲𝗿 𝗖𝗼𝗻𝘁𝗶𝗻𝘂𝗶𝘁𝘆 𝗮𝗻𝗱…
𝗘𝗻𝘀𝘂𝗿𝗶𝗻𝗴 𝗖𝗼𝗻𝘀𝗶𝘀𝘁𝗲𝗻𝗰𝘆 𝗶𝗻 𝗜𝗧 𝗔𝘂𝗱𝗶𝘁𝘀: 𝗔 𝗖𝗮𝗹𝗹 𝗳𝗼𝗿 𝗚𝗿𝗲𝗮𝘁𝗲𝗿 𝗖𝗼𝗻𝘁𝗶𝗻𝘂𝗶𝘁𝘆 𝗮𝗻𝗱…
Liked by Pinaki Ranjan Aich, CISA
-
📊 5 Ways to Use Data Analytics to Strengthen Your Audit Program 📊 In today’s data-driven world, data analytics is transforming audit programs by…
📊 5 Ways to Use Data Analytics to Strengthen Your Audit Program 📊 In today’s data-driven world, data analytics is transforming audit programs by…
Shared by Pinaki Ranjan Aich, CISA
-
I often come across this question: “Are IRCA certifications the only option for real career impact?” The answer might surprise you! While IRCA…
I often come across this question: “Are IRCA certifications the only option for real career impact?” The answer might surprise you! While IRCA…
Liked by Pinaki Ranjan Aich, CISA
Experience
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Education
-
REVA Academy for Corporate Excellence - RACE
-
Activities and Societies: Research Group Contributor: Collaborated with fellow researchers on projects related to emerging security challenges, contributing insights and solutions to cutting-edge issues.
RACE is renowned for its comprehensive and industry-aligned M.Tech in Cyber Security program. With a curriculum meticulously designed to address the evolving cyber threat landscape, the program provided me with an unparalleled opportunity to gain expertise in critical areas, including:
🔹 Windows and Linux Security
🔹 Cloud Architecture and Security
🔹 Security Information and Event Management (SIEM) & Security Orchestration, Automation, and Response (SOAR)
🔹 Cyber Forensics…RACE is renowned for its comprehensive and industry-aligned M.Tech in Cyber Security program. With a curriculum meticulously designed to address the evolving cyber threat landscape, the program provided me with an unparalleled opportunity to gain expertise in critical areas, including:
🔹 Windows and Linux Security
🔹 Cloud Architecture and Security
🔹 Security Information and Event Management (SIEM) & Security Orchestration, Automation, and Response (SOAR)
🔹 Cyber Forensics and Cyber Law
🔹 Identity and Access Management
🔹 Cybersecurity Frameworks and Security Engineering
🔹 Threat Intelligence and Threat Hunting
🔹Artificial Intelligence for Cyber Security -
-
Activities and Societies: Business Technology Forum: Founding member of the Business Technology Forum, a platform for discussing the intersection of business and technology, organizing speaker sessions and workshops. Consulting Club Participant: Engaged in case study competitions and problem-solving sessions to develop consulting skills and understand real-world business challenges.
NMIMS is renowned for its commitment to nurturing industry-ready professionals through its rigorous and industry-aligned programs. The PGDBM in IT and System Management offered me a comprehensive curriculum that empowers students with an in-depth understanding of the intersection between business management and technology. This unique program covered essential areas such as:
🔹 IT Strategy and Governance
🔹 Enterprise IT Architecture
🔹 Business Process Reengineering
🔹 Business…NMIMS is renowned for its commitment to nurturing industry-ready professionals through its rigorous and industry-aligned programs. The PGDBM in IT and System Management offered me a comprehensive curriculum that empowers students with an in-depth understanding of the intersection between business management and technology. This unique program covered essential areas such as:
🔹 IT Strategy and Governance
🔹 Enterprise IT Architecture
🔹 Business Process Reengineering
🔹 Business Intelligence and Data Analytics
🔹 Digital Transformation and Emerging Technologies -
-
Activities and Societies: Mock Trial Competitions: Enthusiastically participated in mock trial competitions to practice legal argumentation and enhance understanding of cyber law principles.
Mumbai Law College and the Asian School of Cyber Law are institutions of repute, known for their unwavering dedication to legal education and expertise in cyber law. The Diploma in Cyber Law program, offered collaboratively, is a unique opportunity to gain comprehensive insights into the legal dimensions of the digital realm. The curriculum encompasses essential subjects, such as:
🔹 Cyber Law and Emerging Legal Issues
🔹 Privacy and Data Protection Regulations
🔹 E-Commerce Law…Mumbai Law College and the Asian School of Cyber Law are institutions of repute, known for their unwavering dedication to legal education and expertise in cyber law. The Diploma in Cyber Law program, offered collaboratively, is a unique opportunity to gain comprehensive insights into the legal dimensions of the digital realm. The curriculum encompasses essential subjects, such as:
🔹 Cyber Law and Emerging Legal Issues
🔹 Privacy and Data Protection Regulations
🔹 E-Commerce Law and Intellectual Property Rights
🔹 Cyber Crimes and Digital Evidence -
-
Activities and Societies: Office Bearer : Organizing coding competitions, TechFest, hackathons, and coding workshops to enhance programming skills among peers. Technical Symposium Volunteer: Played a key role in organizing the college's technical symposium, coordinating events, inviting industry speakers, and promoting technical awareness.
GIET, Gunupur is renowned for its commitment to providing quality education and nurturing technical talent. The B.Tech program in Computer Science and Engineering reflects the institute's dedication to fostering a strong foundation in technology. The curriculum encompasses essential subjects, such as:
🔹 Programming and Problem Solving
🔹 Data Structures and Algorithms
🔹 Software Engineering and Web Development
🔹 Database Management Systems -
-
Activities and Societies: Member of the School Science Club: Actively participated in science-related workshops, experiments, and projects, fostering a deep interest in scientific inquiry and innovation. Volunteer for Environmental Awareness Drives: Played a pivotal role in organizing and participating in campaigns to promote environmental awareness and sustainable practices within the school community. Debate Society Participant: Engaged in thought-provoking debates on various topics, enhancing public speaking skills.
Valley View School stands as a symbol of quality education, nurturing academic excellence and holistic development. The institution's commitment to fostering a strong foundation in various subjects is reflected in its curriculum. The academic program includes core subjects such as:
🔹 Mathematics, Science, and English
🔹 Social Sciences and Languages
🔹 Extracurricular Activities and Character Building -
-
Activities and Societies: Cybersecurity Enthusiast Group: Founded and led a student group focused on discussing and exploring the latest trends and challenges in the cybersecurity landscape, fostering peer learning and awareness. Hackathon Competitor: Participated in multiple hackathons, collaborating with fellow students to develop innovative technology solutions and gaining practical experience in problem-solving.
IIHT, Jamshedpur stands as a beacon of excellence in providing top-tier education and hands-on training in the realm of information technology. The IT certification program is a testament to IIHT's commitment to equipping students with practical skills that are directly applicable to the IT industry. The curriculum includes vital topics such as:
🔹 Networking Essentials and Infrastructure
🔹 Operating Systems and System Administration
🔹 Cybersecurity Fundamentals and Threat…IIHT, Jamshedpur stands as a beacon of excellence in providing top-tier education and hands-on training in the realm of information technology. The IT certification program is a testament to IIHT's commitment to equipping students with practical skills that are directly applicable to the IT industry. The curriculum includes vital topics such as:
🔹 Networking Essentials and Infrastructure
🔹 Operating Systems and System Administration
🔹 Cybersecurity Fundamentals and Threat Mitigation
🔹 Hardware and Software Troubleshooting
Licenses & Certifications
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Information Security Foundation based on ISO/IEC 27001
EXIN your ICT competence partner
IssuedCredential ID 6165263.20727126 -
-
ITIL® Foundation Certificate in IT Service Management
AXELOS Global Best Practice
IssuedCredential ID 9980098900224915 -
-
-
ISO 27001 Lead Auditor - Information Security Certification
TUV SUD
Issued Expires -
Volunteer Experience
-
Advisory Council Member
SISA
- Present 1 year 6 months
Education
• Guiding the Certification team in laying the groundwork for SISA Institute's certifications viz. CPISI, CPISI ADV, CPSI-D and CIDR
• Assisting in the development of certification policies and processes -
-
Program Coordinator
Cloud Book
- 3 years 5 months
Science and Technology
Projects
-
UMAIL System - College Project
An email system used for intranet mailling..
Other creators -
-
SERVER ADMINISTRATION - College Project
Server Administration of windows server 2008 with xp using server - client technique
Other creators -
-
KIOS SYSTEM - Internship Project
An information system which is used to display the detail information about TATA MOTORS to the customer,,
Other creators -
Organizations
-
ISACA Bangalore Chapter
member
- Present
Recommendations received
10 people have recommended Pinaki Ranjan
Join now to viewMore activity by Pinaki Ranjan
-
Twenty [20] key frameworks commonly used in IT Audit, GRC, and Cybersecurity 📍ISO/IEC 27001- International standard for information security…
Twenty [20] key frameworks commonly used in IT Audit, GRC, and Cybersecurity 📍ISO/IEC 27001- International standard for information security…
Liked by Pinaki Ranjan Aich, CISA
-
🎆𝐁𝐮𝐢𝐥𝐝𝐢𝐧𝐠 𝐑𝐞𝐝𝐮𝐧𝐝𝐚𝐧𝐭 𝐒𝐲𝐬𝐭𝐞𝐦𝐬 𝐟𝐨𝐫 𝐇𝐢𝐠𝐡-𝐀𝐯𝐚𝐢𝐥𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐈𝐧𝐝𝐮𝐬𝐭𝐫𝐢𝐚𝐥…
🎆𝐁𝐮𝐢𝐥𝐝𝐢𝐧𝐠 𝐑𝐞𝐝𝐮𝐧𝐝𝐚𝐧𝐭 𝐒𝐲𝐬𝐭𝐞𝐦𝐬 𝐟𝐨𝐫 𝐇𝐢𝐠𝐡-𝐀𝐯𝐚𝐢𝐥𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐈𝐧𝐝𝐮𝐬𝐭𝐫𝐢𝐚𝐥…
Liked by Pinaki Ranjan Aich, CISA
-
I was summoned to join the fun of bursting crackers by my nephew. We went outside our home, but there were many vehicle movements. I was very…
I was summoned to join the fun of bursting crackers by my nephew. We went outside our home, but there were many vehicle movements. I was very…
Liked by Pinaki Ranjan Aich, CISA
-
🌟 Celebrating Quality Month at Propel Industries! 🌟 November is #QualityMonth, and we're committed to achieving excellence in everything we do…
🌟 Celebrating Quality Month at Propel Industries! 🌟 November is #QualityMonth, and we're committed to achieving excellence in everything we do…
Liked by Pinaki Ranjan Aich, CISA
-
Torn between senior management, team, & stakeholders? I’ve been there — and it taught me this lesson: 👇 You can’t please everyone. Here’s how I…
Torn between senior management, team, & stakeholders? I’ve been there — and it taught me this lesson: 👇 You can’t please everyone. Here’s how I…
Liked by Pinaki Ranjan Aich, CISA
Other similar profiles
Explore more posts
-
Prasun Raj
As per latest Global Cyber Capability Index (GCCI) , India stands 10th position globally in terms of adherance towards Cybersecurity Commitments. Recently, SEBI #SEBI has launched a revised Cybersecurity framework to Boost Regulated Market Entities Security associated with it, by mandating Market SOC (M-SOC) set up in order to do continous security monitoring these entities and assess their cybersecurity maturity and resilience regularly. This Market driven framework is a part of revised Cybersecurity and Cyber Resilience Framework (CSCRF) and is getting implemented in two phases Jan'25 & April"25 as per new Security Regulations Guidelines from SEBI, India. Some key benefits apart from Risk Governance, Regular Assessment 24x7 monitoring - 1. Data Classification and localisation plays key role here, Regulated data is mandate to be localised while its logs injestion to M SOC goes through well defined offshore gaurdrails. 2. Auto Software Bill of Materials (SBOM) generation to mitigate Security Market Entities supply chain risks. 3. Well defined Guidelines around API security and Mobile app security Its a well defined strategic move by SEBI to safegaurd investors money, improving volatile market stability by maintaining robust Cybersecurity Resilience from Cyber attacks /threats / Risks. Bosch Software and Digital Solutions #bosch #NSE # BSE #cybersecurity #securitymarkets #sebi #SOC
-
Amit Tenglikar
🚨New SEBI Cybersecurity Framework: A Game-Changer for Regulated Entities!🚨 The recently introduced Cybersecurity and Cyber Resilience Framework (CSCRF) by SEBI is a significant milestone for all SEBI-regulated entities. It’s not just about compliance— it's about building a robust cybersecurity posture that aligns with global standards like ISO 27001 and NIST 800-53 while ensuring the privacy aspects as outlined by CERT-In guidelines. Applicability: This framework is mandatory for all entities regulated by SEBI, including stock exchanges, depositories, and intermediaries. It’s a comprehensive mandate that covers end-to-end cybersecurity and resilience measures, from governance to incident response. How Good Is It?: The framework is highly robust, with clear guidelines that align closely with global standards. It mandates a top-down approach, ensuring that cybersecurity is integrated into the organization’s core governance structures. With mandatory board-level oversight and periodic audits, SEBI has made it clear that cybersecurity is a top priority. Comparison with ISO 27001, NIST 800-53 & CERT-In: The CSCRF framework aligns well with ISO 27001 in terms of Information Security Management Systems (ISMS), and with NIST 800-53 regarding the risk management framework. Moreover, SEBI’s guidelines on incident reporting and data privacy echo the CERT-In guidelines, making it a comprehensive and globally aligned framework. Privacy Aspects: Privacy is well-covered, with detailed requirements on data protection, including encryption, secure access, and data loss prevention (DLP) measures. The emphasis on continuous monitoring and threat intelligence ensures that REs are always a step ahead in protecting sensitive data. In conclusion, SEBI's CSCRF framework is a well-rounded, global-standard-aligned initiative that will enhance the cybersecurity resilience of India's financial sector. It’s a significant step towards ensuring that Indian markets remain secure and resilient in the face of increasing cyber threats. #CyberSecurity #SEBI #RiskManagement #Compliance #Privacy #ISO27001 #NIST #CERTIn #CyberResilience
3 Comments -
Economic Laws Practice (ELP)
On August 20, 2024, SEBI issued a Cybersecurity and Cyber Resilience Framework (“CSCRF”) for various entities regulated by SEBI. Starting from 2015, SEBI has issued such Cybersecurity and Cyber resilience frameworks. However, the latest CSCRF applies to a much wider pool of Regulated Entities, including Alternative Investment Funds and Venture Capital Funds and replaces all previously issued circulars. Regulated entities for whom a cybersecurity and cyber resilience circular has been issued by SEBI in the past (such as stock exchanges, depositories, clearing corporations, mutual funds, asset management companies, portfolio managers) should adopt the CSCRF by January 01, 2025. All other regulated entities, such as AIFs, should adopt the CSCRF by April 01, 2025. Our alert summarises some of the key features of the CSCRF. Read the detailed alert here - https://lnkd.in/ddVcx22V Vinod Joseph; Paridhi Jain #ELPinsights #cybersecurity #sebi #framework
-
Mehta & Jagwani- Chartered Accountants
SA 230, or the "Audit Documentation," is a critical standard issued by the Institute of Chartered Accountants of India (ICAI) governing audit procedures. It outlines the requirements regarding the documentation of audit evidence obtained and conclusions reached by the auditor. Compliance with SA 230 ensures the quality, transparency, and reliability of audit engagements. It's a cornerstone in maintaining the integrity and professionalism of the auditing profession. #SA230 #AuditDocumentation #ICAI #AuditQuality
-
Sandeep Gohad
Since last 3-4 year’s organizations in India are talking about ISO 27001, IT Policies, IT Security Audits, VAPT, IT-GC Audit, Cyber Awareness Trainings etc. etc. Small and Midsize Companies from various sectors like manufacturing, healthcare, pharma, IT, construction etc. are looking forward to implement “something” that will secure the data and protect the IT infrastructure but not sure how to go about it. Recently our existing client from a manufacturing industry approached us to know about ISO 27001 as their client demanded to start the process of ISO 27001, the international standard for Information Security Management Systems (ISMS). Similarly, our client who is into software development requested us to help them in conducting VAPT (Vulnerability assessment and penetration testing) for their ERP product. If you want to start with “something” that will protect your data and IT Infrastructure, then drafting “IT Policies” is the best way to start the process. You can consider the following scope while conducting internal IT audit – 1. Network security 2. System security (servers, workstations, devices) 3. Data security (storage, transmission, access) 4. Application security 5. User access and authentication 6. Incident response and disaster recovery 7. Compliance (regulatory, industry standards) 8. Physical security (data centers, facilities) 9. Cloud security (IaaS, PaaS, SaaS) 10. Third-party vendor risk assessment I am sharing a few key benefits that will help you in justifying the costs/investments that are required for data security and for protecting your IT infrastructure – Operational Benefits: 1. Improved information security posture 2. Enhanced risk management 3. Better data protection 4. Compliance with regulatory requirements 5. Reduced vulnerability to cyber threats Business Benefits: 1. Increased customer trust and confidence 2. Competitive advantage in tendering processes 3. Improved reputation and brand image 4. Reduced insurance premiums 5. Increased business resilience Financial Benefits: 1. Reduced costs associated with data breaches 2. Lower regulatory fines and penalties 3. Improved operational efficiency 4. Reduced downtime and improved continuity 5. Increased revenue through improved customer trust Strategic Benefits: 1. Alignment with business objectives 2. Improved governance and leadership 3. Enhanced incident response and management 4. Continuous improvement and monitoring 5. Better supply chain management Implementation Benefits: 1. Structured approach to information security 2. Clear policies and procedures 3. Defined roles and responsibilities 4. Training and awareness programs 5. Continuous monitoring and improvement Would you like more information or guidance on implementing ISO 27001? Would you like more information or specific guidance on internal IT security audits and VAPT? Do connect with us and we would be happy to guide you. #CyberSecurity #ISO27001 #DataProtection
1 Comment
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore More