Ambassador

Sourabh Girdhar

CTO at Care.Fi

IndiaVerified Community Ambassador

Identified Expertise

Content Sourabh is Following

Please join or sign in to view Sourabh's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Do you trust the data & reports from the big analysts?

Strategy & Architecture

Yes

Sometimes

View Results

111.2k views126 Upvotes59 Comments

Do you have remote employees on your team?

Talent Management & Performance

Yes

131.9k views209 Upvotes64 Comments

What non-security consideration leads you when evaluating a new security solution?

Security & GRC Threat & Vulnerability Management Identity & Access Management (IAM)+8 more

Compliance support

Minimum interruption to daily business processes

Budget limitations

Effortless POC / implementation

Other (comment below)

View Results

3.7k views46 Upvotes2 Comments

What is your #1 constraint in shaping your security architecture?

Security & GRC Threat & Vulnerability Management Identity & Access Management (IAM)+11 more

Limited budget

Understaffing

Legacy business applications

Lack of internal cooperation

Other (comment below)

View Results

3.4k views5 Upvotes1 Comment

Which functions in your organization do you find yourself confronting most often?

Security & GRC Security Operations Center (SOC)Security Strategy & Roadmap+4 more

Developers / DevOps

Management

Customer-facing (sales, support, CS, etc.)

Human Resources (HR)

Other (comment below)

View Results

4k views4 Upvotes

To what extent does security slow things down in your business?

Doesn’t slow things down at all

Somewhat slows things down

Moderately slows things down

Significantly slows things down

View Results

6.7k views22 Upvotes4 Comments

Which process are you keen the most about automating?

Security & GRC Security Operations Center (SOC)Security Strategy & Roadmap+4 more

Compliance management

New employee onboarding

Permissions management

Security incident management

Alert prioritization & review

Other (comment below)

View Results

8.3k views31 Upvotes7 Comments

Which security threat concerns you the most?

Security & GRC Threat & Vulnerability Management Identity & Access Management (IAM)+8 more

API breaches

Open source & code vulnerabilities

Automated website fraud (formjacking, bad bots, Credential stuffing, account takeovers etc.)

Insider threats (Excessive permissions, phishing, etc.)

Other (comment below)

View Results

5.9k views26 Upvotes3 Comments

How much time does it take your company to adopt a new security solution, from initial research to daily use?

Security & GRC Threat & Vulnerability Management Identity & Access Management (IAM)+8 more

Less than 1 month

1-3 months

3-6 months

6-12 months

More than one year

View Results

7.1k views5 Upvotes3 Comments

On average, how many security tools does each of your security engineers oversee?

Security & GRC Threat & Vulnerability Management Identity & Access Management (IAM)+8 more

1-3

3-5

5-10

More than 10

View Results

5.9k views9 Upvotes

Is there anything specific you do to make software "green"? Any sustainability goals your teams cater to while designing applications?

Cloud Applications & Platforms Data Center+3 more

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

It is definitely possible to approach sustainability in IT development (and thus also software development and engineering practices). It all has to do in enabling sustainability for the organization at large.

One ...read more

Read More Comments

5.2k views6 Upvotes2 Comments

How frequently do you perform penetration testing of your web applications? Is there a way to automate pen tests as part of the CI/CD process?

Continuous Integration/Continuous Deployment (CI/CD)Applications & Platforms Strategy & Architecture+4 more

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

1 1 Reply

Read More Comments

5.9k views7 Upvotes5 Comments

Does anyone have a good Cloud Technology Roadmap template? I am looking for help and or pointers on format and headings to make sure I include.

Cloud Strategy & Architecture Infrastructure

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

Are you looking for a roadmap to move/migrate/hybrid to the cloud? or how to utilize cloud technologies in a planful manner?

Read More Comments

4.4k views1 Upvote3 Comments

How have we been modernizing IT Service Management to go outside of traditional IT measures to a more business-centric KPIs? Could you kindly provide some examples of measures on this direction?

Process Management Availability & Capacity Management Crisis Management+7 more

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

I love this question as I initiated this kind of initiative for few years, here is how I do it, I set KPI(s) in three ways

1. IT dominant - e.g modernizing our tools, platform etc

2. Business dominant : e.g ...read more

1 Reply

Read More Comments

2.2k views3 Upvotes4 Comments

How often do you do phishing campaigns?

Security & GRC

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

Are we sure that phisingtests are not doing more harm then they solve? Business is bussy and those test dont reflect the reality of nowadays stellar phishs. I think better to invest in phishing resistant authentication so ...read more

2 1 Reply

Read More Comments

6.8k views8 Upvotes20 Comments

What is the average % of reduction in Incidents you have seen, delivered by Problem Management? Has it been consistent and something that you would be comfortable including in your costing?

Process Management Incident & Problem Management

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

A better problem management process avoids recurrence of similar issues. With proper RCA, fix and ownership we have seen consistent drop in problems.
Soon you may find these processes redundant as systems evolve but don't ...read more

Read More Comments

77 views1 Upvote2 Comments

What's your experience of SaaS backed by GCP? Our existing SaaS providers rely on AWS or their own infra; we are starting on a project that could onboard a GCP-hosted IDaaS solution. That would expose us to Google Cloud's service & responsiveness to its enterprise SaaS customers. Anyone here have experiences, good or bad, of GCP as an indirect, "arms length" infra provider?

Cloud Infrastructure

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

Google Cloud Platform (GCP) is a widely used cloud infrastructure provider, and many Software as a Service (SaaS) companies rely on GCP to host and deliver their services.
Regarding the indirect, "arms-length" ...read more

Read More Comments

84 views1 Upvote2 Comments

What personal development goals you are planning to achieve this year?

Relationship Management People & Leadership Peer Insights

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

Learn additional languages

Read More Comments

77 views18 Upvotes5 Comments

Has anyone has developed a ChatGPT / use of AI policy? Or do you reference existing P&Ps?

Security & GRC

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

Our ChatGPT and AI Policy encompasses a set of guidelines and principles that govern the development, deployment, and ongoing usage of our AI technologies. These guidelines are based on established best practices, industry ...read more

Read More Comments

13.5k views33 Upvotes16 Comments

What are your thoughts on Amazon Prime deciding to go back to monolithic architecture rather than pursuing with microservices, at least for a specific usage (video monitoring)? I also feel that, in some cases, microservices may not be the best suited architecture. Reference: https://thenewstack.io/return-of-the-monolith-amazon-dumps-microservices-for-video-monitoring/

Cloud Strategy & Architecture

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

I mean, I honestly do not have any hate against Monolithic architectures. I work in a project where they have two generations of the product, Generation 1 running on a giant Monolithic architecture and Generation 2 running ...read more

Read More Comments

3.3k views21 Upvotes5 Comments

What is a good instrument or mechanism to reference for an Accounts Payable Vendor Statement Reconciliation Process tool in market?

Applications & Platforms Strategy & Architecture

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

I once worked on setting up an accounts payable reconciliation system. You can reach out to me for more details. Can't disclose details in forums.

899 views23 Upvotes1 Comment

How can I find a comparative analysis on the Total Cost of Ownership of different end user devices (Windows vs Mac vs Linux thin clients vs Chromebooks vs Mobile)?

Applications & Platforms End-User Services & Collaboration

Sourabh GirdharCTO at Care.Fi in Finance (non-banking)a year ago

There are multiple factors that should be considered while accounting for the total ownership costs. Here are a few:
1. Is your work heavily dependent on the specific or can you get it done using any of the mentioned ...read more

Sourabh Girdhar

Identified Expertise

Content Sourabh is Following

Do you trust the data & reports from the big analysts?

Do you have remote employees on your team?

What non-security consideration leads you when evaluating a new security solution?

What is your #1 constraint in shaping your security architecture?

Which functions in your organization do you find yourself confronting most often?

To what extent does security slow things down in your business?

Which process are you keen the most about automating?

Which security threat concerns you the most?

How much time does it take your company to adopt a new security solution, from initial research to daily use?

On average, how many security tools does each of your security engineers oversee?

Is there anything specific you do to make software "green"? Any sustainability goals your teams cater to while designing applications?

How frequently do you perform penetration testing of your web applications? Is there a way to automate pen tests as part of the CI/CD process?

Does anyone have a good Cloud Technology Roadmap template? I am looking for help and or pointers on format and headings to make sure I include.

How have we been modernizing IT Service Management to go outside of traditional IT measures to a more business-centric KPIs? Could you kindly provide some examples of measures on this direction?

How often do you do phishing campaigns?

What is the average % of reduction in Incidents you have seen, delivered by Problem Management? Has it been consistent and something that you would be comfortable including in your costing?

What personal development goals you are planning to achieve this year?

Has anyone has developed a ChatGPT / use of AI policy? Or do you reference existing P&Ps?

What is a good instrument or mechanism to reference for an Accounts Payable Vendor Statement Reconciliation Process tool in market?

How can I find a comparative analysis on the Total Cost of Ownership of different end user devices (Windows vs Mac vs Linux thin clients vs Chromebooks vs Mobile)?

Engagement Stats

Content Sourabh is Following

Do you trust the data & reports from the big analysts?

Do you have remote employees on your team?

What non-security consideration leads you when evaluating a new security solution?

What is your #1 constraint in shaping your security architecture?

Which functions in your organization do you find yourself confronting most often?

To what extent does security slow things down in your business?

Which process are you keen the most about automating?

Which security threat concerns you the most?

How much time does it take your company to adopt a new security solution, from initial research to daily use?

On average, how many security tools does each of your security engineers oversee?

Is there anything specific you do to make software "green"? Any sustainability goals your teams cater to while designing applications?

How frequently do you perform penetration testing of your web applications? Is there a way to automate pen tests as part of the CI/CD process?

Does anyone have a good Cloud Technology Roadmap template? I am looking for help and or pointers on format and headings to make sure I include.

How have we been modernizing IT Service Management to go outside of traditional IT measures to a more business-centric KPIs? Could you kindly provide some examples of measures on this direction?

How often do you do phishing campaigns?

What is the average % of reduction in Incidents you have seen, delivered by Problem Management? Has it been consistent and something that you would be comfortable including in your costing?

What personal development goals you are planning to achieve this year?

Has anyone has developed a ChatGPT / use of AI policy? Or do you reference existing P&Ps?

What is a good instrument or mechanism to reference for an Accounts Payable Vendor Statement Reconciliation Process tool in market?

How can I find a comparative analysis on the Total Cost of Ownership of different end user devices (Windows vs Mac vs Linux thin clients vs Chromebooks vs Mobile)?