Ranjith Kumar Profile for Cyber Interviews

1. Fundamentals of Cybersecurity
Confidentiality: Ensuring that information is accessible only to those authorized to have access.
Integrity: Safeguarding the accuracy and completeness of information and processing methods.
Availability: Ensuring that authorized users have access to information and associated assets when required.
2. Types of Cyber Threats
Malware: Malicious software designed to harm, exploit, or otherwise compromise a computer system.
Phishing: Fraudulent attempts to obtain sensitive information by disguising as a trustworthy entity in electronic communications.
Ransomware: A type of malware that threatens to publish the victim's data or block access to it unless a ransom is paid.
DDoS (Distributed Denial of Service): An attack that aims to make a machine or network resource unavailable to its intended users by overwhelming it with a flood of internet traffic.
3. Security Measures and Tools
Firewalls: Network security systems that monitor and control incoming and outgoing network traffic based on predetermined security rules.
Antivirus Software: Programs designed to detect and destroy computer viruses.
Encryption: The process of encoding information so that only authorized parties can access it.
Intrusion Detection Systems (IDS): Devices or software applications that monitor a network or systems for malicious activity or policy violations.
4. Cybersecurity Frameworks and Standards
NIST (National Institute of Standards and Technology): Provides a cybersecurity framework to improve critical infrastructure cybersecurity.
ISO/IEC 27001: An international standard for managing information security.
CIS Controls (Center for Internet Security Controls): A set of best practices for securing IT systems and data against cyber attacks.
5. Network Security
VPN (Virtual Private Network): Provides a secure connection over a public network, encrypting data transmitted between the user's device and the network.
Network Segmentation: Dividing a network into smaller segments to limit access and contain potential security breaches.
WPA3 (Wi-Fi Protected Access 3): The latest security protocol for securing wireless networks.
6. Incident Response
Preparation: Establishing and maintaining an incident response capability.
Detection and Analysis: Identifying and understanding security incidents.
Containment, Eradication, and Recovery: Containing the incident, removing the threat, and restoring normal operations.
Post-Incident Activity: Learning from the incident and improving future response efforts.
7. Risk Management
Risk Assessment: Identifying, evaluating, and prioritizing risks.
Risk Mitigation: Implementing measures to reduce risk to an acceptable level.
Risk Monitoring: Continuously monitoring the risk environment and the effectiveness of risk mitigation measures.
8. Data Protection and Privacy
GDPR (General Data Protection Regulation): A regulation in EU law on data protection and privacy.
PII (Personally Identifiable Information): Any data that

1. Dr. MV. Ranjith Kumar Senior Audit Program Manager, Cyber Risk Services Ranjith Kumar is an Audit Program Manager in Corporate Certification, Assessment and Audit CCAT team of Infosys Pvt Ltd with 15 years of experience in Enterprise Security Audit background. An Information Systems Security professional with proven track record in implementing Cyber Physical System, Information Security review and IT Security Audits and Network Security Architecture Review and Design, Threat intelligence. His key area of expertise includes Telematics implementation and control assessments, Blockchain Architecture, IT/OT controls assurance, internal audits, Security risk and gap assessments. Ranijth Kumar’s’ s professional experience spans across multiple industries like Technology, Automobile, Power and Utilities, Banking.. Professional Experience: Performed multiple ISO 27001 gap assessment and supported on ISMS implementation for various Technology, Automobile, Power and Utilities, Financial and Retail clients. Experienced working on with data encryption, HSM, PKI and key management Performed multiple vendor risk assessments based on standards like NIST,ISO 27001. Assessment of associated risks for the IT processes  and Assessment of the existing  internal control system for IT processes Systems scoping, Process review, Control requirements analysis, existing controls and gaps identification, control implementation plans and monitoring, managing internal and external audits. Process mapping in terms of process flow-chart, narratives and segregation of duties. Preparing / Reviewing Process and Procedure documents. Involved in Data center audits for Manufacturing companies. Performed In-Vehicle testing, OTA programming control, Cloud backend testing, Big data security. Performing patching and sever hardening using Ansible technology Strong Technical knowledge with proficiency in implementing Block chain technology for real time use cases Published several research papers in international and National reputed A++ journals in field of Cyber security, Cyber Physical Systems, Wireless networking, Ad-hoc Networks, Blockchain , Machine Learning, Power and grid computing, Smart Sensor Networks, Digital Image processing, etc., Name : Dr. MV. Ranjith Kumar Infosys Pvt Ltd Professional Certification: Data Privacy – CIPP, CIPM ISMS - ISO 27001 Lead Auditor CyberArk Certified – Trustee CISCO Certified Network Associate (CCNA) Resume Phone: [phone] Email: [email protected]