Suggestions
Dinesh Bareja
Cyber Security Specialist & V-CISO, Consultant and Advisor to Govt, Public and Pvt Enterprises for ISMS, BCP, TPRA etc
Dinesh O Bareja is a seasoned professional specializing in information security and data protection.
With a strong belief that information and data are invaluable assets, Dinesh excels at crafting security solutions tailored to meet the unique needs of businesses.
His expertise spans across working with enterprises, governments, law enforcement agencies, and public entities on various information security needs.
Dinesh's skill set includes developing security awareness programs, implementing complex security and cyber surveillance solutions, and strategizing cyberwar operations.
He is well-versed in critical infrastructure protection, information governance, risk management, compliance, security audit, ethical hacking, and incident management.
Moreover, Dinesh is proficient in ISMS, BCP/DR, standards, frameworks, and country representation, along with excelling in business development roles.
He has held advisory positions with renowned organizations such as Cyber Peace Foundation and Pyramid Cyber Security and Forensics Pvt Ltd, contributing significantly to the cybersecurity landscape in India.
Dinesh has also provided counsel to entities like Cyber Defence Research Center, Jharkhand Police, and various unnamed organizations on matters related to cyber threats, data rights management, and vulnerability management.
Education-wise, Dinesh pursued Bachelor Of Arts at P.G. College Of Law, Basheerbagh, and has a robust professional background that includes roles such as COO at Open Security Alliance & Pyramid Cyber Security, VP, and Principal Consultant at Grid Infocom Pvt Ltd, among others.
Highlights
Third Party Risk Assessment (TPRA) or Vendor Audits are becoming more and more common. Every regulation is asking for these and every auditor has become a TPRA expert, even if he/she is pushing giant sized questionnaires or passing off ISO27k1 stuff (which is the right thing to do).
Anyway among the mountain of "evidence" asked / demanded by the auditors is the requirement for a SOC2 report.
This always hassles me as I do not see any reason for such a demand. If I am presenting a ISO27001 certification, a PCI-DSS report, an Internal Audit report, (maybe) an RBI or other regulatory SAR then why do u want a SOC2 report!
Especially when this is my Indian client, and I am an Indian company. What "extra" will the SOC report bring to the table. And why should I go to an American CA (CPA) to sign on my report !!!
What is your opinion...
PS: my next article on TPRA malpractice is ready to be published online once I have your inputs from this poll... thanks!
