Ambassador

Roshan Harneker

Chief Information Security Officer

South AfricaVerified Community Ambassador

Identified Expertise

Content Roshan is Following

Please join or sign in to view Roshan's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

How much of your security do you outsource today?

Security & GRC Outsourcing & Managed Services

None

<25%

25-50%

51-75%

>75%

View Results

5.6k views2 Upvotes1 Comment

How long have you been in your current position?

People & Leadership Talent Management & Performance

<1 year

1 - 2 years

2 - 3 years

3 - 5 years

5+ years

View Results

9.6k views2 Upvotes3 Comments

What do you do with unsolicited vendor gifts?

People & Leadership Financial Management Vendor Management

Keep it

I never accept them

Donate it

Depends on the dollar amount

Other (leave a comment)

View Results

23.7k views10 Upvotes35 Comments

Which of the following peers are you spending more time with versus a year ago?

Team & Organizational Design Talent Management & Performance Culture & Values

Chief Marketing Officer

Chief Sales Officer

Chief Customer Officer

Chief Financial Officer

Chief Product Officer

View Results

5.3k views4 Upvotes16 Comments

Which method do you use most often to communicate with your colleagues?

Phone

Face to face

Video conferencing

Chat/SMS

Collaboration software

View Results

4.7k views1 Upvote6 Comments

Does your company have a data recovery process in place?

Data & Analytics Business Intelligence Security & GRC+1 more

Yes

Not sure

View Results

5.7k views

What's the top benefit your organization has realized from migrating to the cloud?

Cloud Public Cloud Hybrid Cloud+2 more

Ability to scale up or down to support workloads

Flexibility of access

Minimal maintenance

Increased collabroation

Increased uptime/zero risk failure

Reduced capital expenditure

Increased Security

Other

View Results

4.1k views2 Comments

What is your top security priority this quarter?

Security & GRC Security Operations Center (SOC)Security Strategy & Roadmap+2 more

Password management/Authentication

Endpoint management

Identity management

Internal threat detection

Firewalls

Data encryption

Other

View Results

4.3k views

Does your organization have a bring-your-own-device (BYOD) policy?

Security & GRC End-User Devices Mobile

Yes

3.7k views1 Comment

Do you require employees to use multi-factor authentication (MFA)—i.e. More than one form of authentication, like a personal password, one-time password, or login code—to log into their core work applications?

Yes

No, we don't require MFA

1.3k views

Does anyone have experience (positive or negative) to share about the PowerGRYD vCISO service? I wanted to find out if anyone's used it, if you found it valuable/useful etc.

Vendor/Product Assessment

Roshan HarnekerChief Information Security Officer in Education21 days ago

How many organizations are exploring or using virtual CISOs?

Read More Comments

215 views2 Comments

For organisations that have deployed Elastic as an EDR, what words of advice would you offer regarding the deployment and support processes, and how does its EDR capability stack against the usual EDR suspects?

Threat & Vulnerability Management Threat Intelligence & Incident Response

264 views

I’m keen to hear from people who have transitioned from a CISO role to a CTO role about the challenges experienced, how you made the transition and what advice you may have to help make such a transition smoother. What sort of skills and experience are also recommended, in your personal experience?

Security & GRC

3.6k views

In trying to motivate for IAM to move to report to the infosec team / ISO / CISO function, what are the main reasons such a move makes sense?

Security & GRC

Roshan HarnekerChief Information Security Officer in Education9 months ago

One strategy for ZTA
Its one of the most critical vectors abused by threat actors to intrude a company and should therefore follow specific due care.
Decision around identity are not pushed back due to IT concerns, ...read more

1.6k views1 Comment

How do you “read between the lines” when engaging stakeholders to better understand their needs or concerns? How can a CISO navigate those conversations to surface what might otherwise be left unsaid?

Business Relationships Security Strategy & Roadmap People & Leadership

Roshan HarnekerChief Information Security Officer in Educationa month ago

It is important to provide a safe place where people are open, honest and transparent to work through challenges. it should always be like an RCA or post mortem where there is no blame, no hiding and only focused on how ...read more

Read More Comments

364 views1 Upvote3 Comments

What are the best vulnerability scanning tools? Why?

Roshan HarnekerChief Information Security Officer in Education4 months ago

Please detail out the question, so its clear what the focus is for example:
- Endpoints
- Servers
- Webservers
- Databases
- Applications
- Running Kubernets
- Third Party Libraries
- etc

Read More Comments

165 views2 Comments

Apart from GIAC-GCIH do you have any recommendations for a cybersecurity incident response certification courses or any blue team certification courses?

Threat Intelligence & Incident Response Security Operations Center (SOC)

Roshan HarnekerChief Information Security Officer in Education5 months ago

Have a look at https://www.securityblue.team/

1.1k views1 Comment

If you’ve implemented SIEM, what solution are you using?

Security & GRC Threat Intelligence & Incident Response Security Operations Center (SOC)+1 more

Roshan HarnekerChief Information Security Officer in Education9 months ago

Last year I started implementing Wazuh (based on Elastic stack). I was effective, with both M365 technologies and AWS. Also have the advantage that the agent is running on Windows, MacOS and Linux. If you play a litlle bit ...read more

Read More Comments

4.2k views6 Comments

Are there Higher Education Institutions with experience of implementing Ellucian student information system? I work at a UK University in the process of configuring Recruit and Banner and I'm interested in how others approached implementation. I've been told there is no standard out-of-the-box config, so we are doing everything bit by bit ourselves. Our project timeline keeps extending. How long did it take you to implement and migrate to Ellucian? We are at 18 months and expecting a further delay.

Vendor/Product Assessment Vendor Management

Roshan HarnekerChief Information Security Officer in Education10 months ago

I, unfortunately, don't have any experience to answer your question. Instead I have a suggestion. Have you tried speaking to Jisc and/or UCISA? I know they have some level of involvement with Ellucian and may be able ...read more

2.2k views1 Comment