Ambassador

Faheem Siddiqui

Group Director, InfoSec at MAF

United Arab EmiratesVerified Community Ambassador

Identified Expertise

Content Faheem is Following

Please join or sign in to view Faheem's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Which billing frequency do the largest percentage of your SaaS apps fall into?

People & Leadership Strategy & Architecture Cloud+14 more

Monthly

Quarterly

Annually

View Results

3.5k views1 Comment

Which social media platforms do you use most to connect with colleagues?

People & Leadership Strategy & Architecture Cloud+14 more

Twitter

Facebook

Instagram

YouTube

Other

View Results

970 views2 Upvotes

Is your org going to increase investment in AI app security over the next year?

Generative AI Security Strategy & Roadmap Security & GRC

Yes

Not sure yet...

View Results

2.4k views

Do you think your org relies too much on external cybersecurity consultants (as opposed to internal team’s skills)?

Security Strategy & Roadmap Team & Organizational Design Security & GRC

Yes – internal skills should be leveraged more

No – external consultants should be leveraged more

No – current balance is ideal

I’m not sure

View Results

333 views2 Comments

Which leadership skill do you believe is most critical to move to the next level of leadership?

People & Leadership

Communication

Decision-making

Empathy

Strategic thinking

Conflict resolution

Other (comment below)

View Results

25 views

I'm the CIO for publicly traded company. With all the cyber activity in the world today, do any companies have a "back up" email system for employees to use in th event the main corporate email system is unavailable?

Security Strategy & Roadmap People & Leadership

Faheem SiddiquiGroup Director, InfoSec at MAF in Banking23 days ago

Maintaining a backup of an email system should be directly proportional to the risk of your existing email system going down in a calendar year, as back up system will require extensive operational and maintenance costs. Some ...read more

197 views1 Comment

Is there a robust methodology or standard or framework for determining the required FTE (Full Time Employee), which I can follow to "OBJECTIVELY" identify the the minimum number of FTE within Cybersecurity?

Governance, Risk & Compliance Security Strategy & Roadmap Performance

Faheem SiddiquiGroup Director, InfoSec at MAF in Banking25 days ago

Yes there is one, time tested ! Follow on below steps to reach the FTE count.

Step 1: Use ISO 27001:2022 Operational Capabilities (12 of 'em) and map all those 12 with existing security toolsets in your environment.

Step ...read more

2 Replies

246 views3 Comments

What best practices for asset management should organizations use to minimize audit risks?

Security Strategy & Roadmap Governance, Risk & Compliance Risk Management+1 more

Faheem SiddiquiGroup Director, InfoSec at MAF in Banking15 days ago

In the cloud and digitalized world where more and more cloud shared responsibility models are taking away the management and maintenance aspects of hardware and software assets upto the layer of operating system (as in WebApps, ...read more

Read More Comments

347 views1 Upvote2 Comments

What are some common challenges any new CISO should be prepared for when it comes to engaging and educating their board on cybersecurity?

Board Engagement Security Strategy & Roadmap

Faheem SiddiquiGroup Director, InfoSec at MAF in Banking25 days ago

Most of the board members sit on multiple boards so they hear briefings and ideas of what's new on the infosec horizon or what are matters of concern, across organisations. This is what makes them ask seemingly highly technical ...read more

Read More Comments

402 views5 Comments

Can you share advice for leaders looking to shift to a multi-cloud strategy for better resilience in the event of major disruption (such as the recent CrowdStrike outage)? What best practices or common pitfalls are most important to consider?

Security Strategy & Roadmap Security Peer Insights+2 more

Faheem SiddiquiGroup Director, InfoSec at MAF in Bankinga month ago

1. Ensure the “different” providers are not front ends for the same foundational provider.

2. Review the track record of each provider on the whole as well as their record with organizations of your size, ...read more

Read More Comments

506 views3 Comments

When you've got production assets running in the cloud CNAPP is necessary, but is it sufficient? Curious to hear other's thoughts on the 2024 Gartner CNAPP Market Guide.

Security Strategy & Roadmap Peer Insights People & Leadership

Faheem SiddiquiGroup Director, InfoSec at MAF in Banking15 days ago

If you have read the 2024 Market Guide for CNAPP, you might have also seen the Table 3 therein which lists certain representative CNAPP Vendors. Some of such names are:
1. Crowdstrike Falcon Cloud Security
2. Microsoft ...read more

380 views1 Comment