Home
Naseem Halder

Ambassador

Naseem Halder

Head of Information Security

IndiaVerified Community Ambassador

Identified Expertise

Security & GRC28
Security Strategy & Roadmap14
Engineering8
Process Management7
Applications & Platforms7

Engagement Stats

148
Answers Written

13.6K
Profile Views

56
Upvotes Received

Content Naseem is Following

Please join or sign in to view Naseem's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Do you trust the data & reports from the big analysts?

Strategy & Architecture

Yes

No

Sometimes

View Results

111.2k views126 Upvotes59 Comments

Are you happy in your current role?

People & Leadership Talent Management & Performance

Yes

No

Unsure

View Results

32k views18 Upvotes16 Comments

Which RDBMS do you feel best suits the needs of today's climate of rapid change and iteration?

SQLite

CouchDB

PostgreSQL

MongoDB

SQLServer

View Results

12.1k views3 Upvotes10 Comments

What is the best alternative to S3?

Microsoft

Google

SAP

other

View Results

11.1k views7 Upvotes5 Comments

Which one of the following do Object Storage opportunities fall into?

< 100TB

< 500TB

< 1PB

< 5PB

< 10PB

Tens of PB

View Results

4.3k views1 Upvote

What type of applications do you plan to run on Object Storage?

Custom

Homegrown

Analytics

Don't know

View Results

4.7k views1 Upvote

Which of the following best describes your biggest challenge with object storage?

Performance

High cost

Rate of Data Growth

Other (none of the above)

View Results

8.8k views1 Upvote3 Comments

Which of these digital skills are most in demand in your organization? (select all that apply)

Talent Management & Performance

Cloud computing development / operations

Software and solutions technical proficiency

Mobile computing development/operations

Experience in statistical analytics languages/platforms

User experience/design

Knowledge of machine learning

Social media engagement/analysis

Content development/management

View Results

9.3k views1 Upvote4 Comments

To drive digital innovation, do you attend demos by tech startups / companies?

Disruptive & Emerging Technologies

Never Tried

Tried but discontinued

Trying but needs work

Adopted but impact is unclear

Adopted with measurable impact

View Results

6.8k views2 Upvotes3 Comments

Who does the CIO role in your organization report to?

Team & Organizational Design

Global CIO

CEO

CFO

Board

COO

Other

View Results

3.3k views3 Upvotes1 Comment

Are there best practices or staffing models available to assist with setting up a team specific to the management, tracking, compliance and reporting of identified risks and issues. Ie What's the right ratio of people to identified issues to properly manage those items to completion?

Naseem HalderHead of Information Security in Healthcare and Biotech7 months ago

ratio of people to identified issues, depending on the size and complexity of the business, nature industry, and the level of risk appetite. Organizations should try to achieve a balance between resource requirements to attend ...read more

Read More Comments

1.1k views2 Comments

The recent MGM breach was made possible by a bad actor social engineering the help desk into providing them access. Does your organization take steps to authenticate callers to your help desk before the help desk performs any actions that may allow access (changing passwords, resetting/disabling/reconfiguring MFA etc.) If yes, how have these methods worked out? Were they effective and did you get any pushback from users?

Naseem HalderHead of Information Security in Healthcare and Biotecha year ago

on a separate note, as an idea, have rules that will alert if people want to disable MFA.

Read More Comments

2.4k views3 Comments

How do you envision integrating Chat GPT's vision capabilities into your company's existing systems and processes for potential use cases such as customer service or chatbots, graph or image analysis, and what risks do you foresee?

Naseem HalderHead of Information Security in Healthcare and Biotecha year ago

We are excited about this technology and see real use cases across numerous industries. At this time it would be inappropriate to share the manner we will enable these capabilities.

1

Read More Comments

2.6k views2 Comments

How AI TRiSM has helped in establishing the groundwork for using AI / ML based applications? What are the key areas of attention from Trust, Risk and Security Management when considering & evaluating AI enabled solutions for IT users?

Disruptive & Emerging Technologies AI & Machine Learning Natural Language Processing (NLP)+1 more

Naseem HalderHead of Information Security in Healthcare and Biotecha year ago

Input parameter and outcome.

4.2k views1 Comment

What kind of Information security metrics should be captured for local county government so that they can be shared with general public and constituents?

Naseem HalderHead of Information Security in Healthcare and Biotecha year ago

Any breaches or security incidents. Mean time for resolution.

Read More Comments

3.7k views1 Upvote5 Comments

When you're trying to define IR strategies for your org, how do you approach prioritizing various cyber threats?

Security & GRC Threat Intelligence & Incident Response Threat & Vulnerability Management+1 more

Naseem HalderHead of Information Security in Healthcare and Biotecha year ago

A couple of crucial steps -
1. Understand the business and identify the maximum threats and risks.
2. Quantify the IMPACT.
3. Put control to mitigate the risks and then IR to handle it.

3.1k views1 Comment

What are the typical pitfalls CISOs run into when developing/updating their org's cyber incident response plan?

Threat Intelligence & Incident Response Security Strategy & Roadmap Incident & Problem Management

Naseem HalderHead of Information Security in Healthcare and Biotecha year ago

I believe cultural barrier is the biggest problem.

3.8k views1 Comment

Does anyone have suggestions for research sources or templates for a Cyber Risk Governance Framework? I'm looking for resources to create a board-level document outlining our organization's governance processes and practices.

Security Strategy & Roadmap Security & GRC

Naseem HalderHead of Information Security in Healthcare and Biotecha year ago

I don't have direct experience but I have heard that some customers use Artic Wolf.

1

Read More Comments

12.1k views14 Comments

How do you evaluate overall Product Security risk in a software company? Do you use $$$, percentages, Risk levels (L,M,H). Do you reciprocate risk with the estimated effort required to reduce it? If yes, do you use $$$, effort days, or similar?

Cloud Applications & Platforms Disruptive & Emerging Technologies+5 more

Naseem HalderHead of Information Security in Healthcare and Biotecha year ago

We always lead with risk levels and potential regulatory issues that could arise due to product security issues, followed by $$$$ exposure.

We are HIPAA and GDPR heavy, in terms of regulatory compliance, and we have ...read more

Read More Comments

3.5k views2 Comments

What are you using for network micro segmentation? Did you find it difficult to implement?

Security & GRC Vendor/Product Recommendation Threat & Vulnerability Management+1 more

Naseem HalderHead of Information Security in Healthcare and Biotecha year ago

We selected Illumio and are in process of rolling out. Implementation requires understanding of the applications requirements which if not known requires a lot of discovery. However you can work on base policy implementation ...read more

Read More Comments

2.5k views2 Comments