Mohammed Shoaib Mohiuddin, Principal Cloud Security, HSBC talks about the current information security challenges to an organisation, work done by him in the information security domain and new technologies that have made the job easier for a security professional.
1. Please tell us about yourself and the work you are currently doing in the security domain.
I'm Mohammed Shoaib Mohiuddin, working as Principal Cloud Security Analyst @HSBC. I'm passionate about driving innovation and maximizing the potential of the cloud detection for our organization. Improving the security posture in cloud by building detection rules , Threat hunting , Incident response, assesment of new services in cloud are some of the key areas of my work.
2. What are the key challenges to security of large organizations?
Continuous assessment of emerging threats is one of the key challenge for a large organisation. Also below are some areas that we need to consider -
1) Expanding cloud infrastructure and enabling remote working models are creating new attack entries for adversaries . Large organisations have to be quick in adapting and reviewing these changes to build necessary controls.
2) New technologies like IOT and AI have increased risk of data leakage and lack of understanding of these areas by security research team is a key area to consider.
3. What new technologies are in focus that help aid security professionals in doing their work?
Security teams utilising the new technologies like ML & AI for detection with XDR , SOAR will help to identify advanced attack patterns and quickly mitigate the risk .
With the AI integration with SOC tools have helped to reduce the time in incident response , documention which helps team to focus on identifying more complex threats.
4. What solutions have you implemented within your organization to alleviate the security challenges?
We have implemented industry best solutions to identify attacks both in cloud and on- premises . We use leading enterprise technologies and native cloud capabilities which are integrated to our monitoring solutions to identify advanced threats.
We also keep updated Intel data to mitigate any risk from threat actors and also share this learning with community.
5. What are your plans to enhance security of your organization going forward?
Security is everyone's job and enhancement of SOC is a journey for any organisation. Our plan is always be updated with the latest attacks and implement detections from lessons learned.
Every organisation should focus on improving zero trust networks , automating the current process , building strong deception technologies and perform through assessment of applications and tools which utilizes new age technologies like AI & ML.