Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Irfahn Khimji
What We Can Learn From the Cloud Journey to Understand Today’s AI Adoption Curve
One of the greatest challenges organizations face today is adopting artificial intelligence (AI) to strengthen cybersecurity. The rapid rise of AI has generated both excitement and concern as organizations begin implementing it within their environments. If we rewind 15 or 20 years, there are several parallels we can apply from the cloud maturity journey to help us navigate this major technological shift today.
Irfahn Khimji
One of the greatest challenges organizations face today is adopting […]
Cutting Into Overtime, Not Corners: How Network Automation Drives Business Value
“You’re cutting into my overtime. But if I can schedule upgrades to happen overnight and sleep better, I’m in!” This is what a network engineer recently told me as I was discussing network automation. Network infrastructure owners I speak with are looking for ways to maximize the value from their investments. Meanwhile, their teams are looking for relief from repetitive tasks so they can focus on strategic initiatives.
Solving The AI Trust Problem
Over 75% of organizations participating in McKinsey’s 2025 State of AI survey report using AI in at least one business function. However, concerns about AI-related risks still exist. The most common concern is the risk of inaccuracy or the inability to trust AI outputs. Reviewing AI model outputs is crucial for increasing confidence, allowing you to use AI with confidence. However, the survey reveals there’s a significant variation in practices.
maritime security Archives
By Rear Admiral (Ret.) Melissa Bert,Irfahn Khimji,Anastasios Arampatzis Ships are increasingly using systems that rely on digitalization, integration, and automation, which call for cyber risk management on board. As technology continues to develop, the convergence of information technology (IT) and ...
Securing the Maritime Industry
Recall the last time that you stood on the shore, enjoying the briny breeze that gently caressed your skin, and the sounds and smells of the sea. You may have noticed in the distance a large sailing vessel. Have you ever considered all the moving parts that contribute to these "floating cities"? Beyond the logistics of setting [...]... Read More The post High Seas and High Stakes Communications: Securing the Maritime Industry appeared first on The State of Security.
securing your automated systems
Have you ever dined in a restaurant with a police officer? When choosing a table, or seating location, law enforcement professionals will often choose the seat that positions them with their back to the wall. This plays out quite humorously when a group of law enforcement professionals dine together, all racing toward that coveted "protected" [...]... Read More The post Adding visibility to the invisible: securing your automated systems appeared first on The State of Security.
The 3 Keys to a Breach Response
The number of U.S. data breaches reported in 2021 increased dramatically over the preceding year. As reported by the Identity Theft Resource Center (ITRC), there were 1,291 data breaches between January 1, 2021 and September 30, 2021. The volume beat out the 1,108 breaches detected over the course of Full Year (FY) 2020. It's therefore not surprising that data compromises year-to-date (YTD) was up 27% last year compared to FY 2020.
Key Considerations for Canada's Forthcoming National Cyber Security Strategy
On December 16, Prime Minister Justin Trudeau released mandate letters tasking his ministers of national defense, foreign affairs, public safety, and industry to develop a new "National Cyber Security Strategy." He specifically highlighted the need for the strategy to "articulate Canada's long-term strategy to protect our national security and economy, deter cyber threat actors, and promote norms-based international behavior in cyberspace," as quoted by Global News.
The Evolution of Securing Critical Infrastructure
The Evolution of Securing Critical Infrastructure Everything evolves. Simply stated, the gradual development of something from a simple to a more complex form is what evolution is all about. When something ceases to evolve, yet still exists, it becomes classified as a living fossil. One example is the Ginkgo Biloba tree. It took millions of years for this evolution to cease. This all happened [...]...
Expert Commentary: Android Apps Exposed Data Of Millions Of Users Through Cloud Authentication Failures
BACKGROUND: Researchers analyzing Android apps have discovered serious cloud misconfigurations leading to the potential exposure of data belonging to over 100 million users.
Security Boulevard
There’s an interesting trend that I have personally noticed over the past few years: organizations are starting to take cybersecurity more seriously. With the multitude of high-profile data breaches, organizations are starting to realize that cybersecurity is a significant risk to the business. This allows CISOs and other similar titles with leadership responsibilities to have a larger budget for people, process improvements, and supporting technologies.
Security Boulevard
An enterprise vulnerability management program can reach its full potential when it is built on well-established foundational goals that address the information needs of all stakeholders, when its output is tied back to the goals of the enterprise and when there is a reduction in the overall risk of the organization. Such vulnerability management technology can detect risk, but it requires a foundation of people and processes to ensure that the program is successful.
Security Boulevard
With data breaches regularly marking the headlines, it is no surprise that digital threats constitute an increasingly significant concern for the C-Suite and cyber security experts. What is surprising, however, is that these two groups don’t seem to share the same view of information security. They have different opinions when it comes to the digital threat landscape in general as well as their organization’s level of preparedness in particular.
Security Boulevard
In Part 1 of this series, we looked at some of the metrics that an executive team would want to see to identify how the business risk is trending. It is very important to keep in mind that if the business does not see the information security program as effective and efficient, they will not continue to invest in information security projects. In this part, we will look at the operational level reports that can assist in focusing efforts to reduce the risk to the business.
Security Boulevard
One of the main issues I find across the information security industry is that we constantly need to justify our existence. Organizations have slowly realized they need to spend on IT to enable their businesses. Information security, on the other hand, is the team that is constantly preventing the business from freely doing as they please. IT is seen as a driver of success, and security can be, too. The security team just needs to learn how to enable the business.
Security Boulevard
Application Security Cloud Security DevOps Security Bloggers Network Vulnerabilities With the evolution of technology comes new approaches to solving problems. Sometimes a new approach fixes the problem; sometimes it creates new ones. The good thing is as folks who work in fast-paced, high-tech environment, we information security professionals are great at quickly analyzing the new technologies and applying them to our daily lives.
Security Boulevard
Be organized and efficient. It’s a simple rule of life that makes things run a whole lot smoother. This is something especially important when running your vulnerability management program. There are only so many hours in a day, rather, there are only so many hours in a down cycle where the business will let you […]… Read More The post Is Your Vulnerability Management Program Efficient and Successful? appeared first on The State of Security.
Security Boulevard
Back in the good old days, we used to have to order physical servers to run our applications. When servers became too expensive, we found efficiency in virtualization. Why have one box running one server when I could have 10 or more on a single box? Who would have thought I could simply push a button and have a server ready in minutes as opposed to weeks? Well, guess what? It now takes weeks to get a virtual server. Who has time for that?
Security Boulevard
A key to having a good information security program within your organization is having a good vulnerability management program. Most, if not all, regulatory policies and information security frameworks advise having a strong vulnerability management program as one of the first things an organization should do when building their information security program. The Center for Internet Security specifically lists it as number three in the Top 20 CIS Controls.
What is Configuration Drift? - Security Boulevard
In my last post, I talked about how ensuring devices on your network is a great way to minimize the attack surface of your infrastructure. Organizations like the Center for Internet Security (CIS) provide guidelines on how to best configure operating systems to minimize the attack surface. The CIS calls these “benchmarks.” Many security policies state that all deployed systems should be securely configured.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Irfahn
Contact Irfahn, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack