Arjun Ramakrishnan

Cybersecurity Architect with more than 17 years of experience in the Information Security domain, I currently hold the position of Principal Cyber Security Architect. I am responsible for developing AI security frameworks and guidance, technology evaluations, managing enterprise security architecture, guiding and approving IT projects and enhancing the data protection domain by focusing on zero trust methodology.

Yet another Phishing Incident Response Playbook

Security , Incident Response
Updated: 26 Jan, 2023

After some discussions with peers from other organizations, I was surprised by the lack of automation and end-to-end process for managing phishing incidents. So, without much preamble, let's jump in t

Zero Trust - Application Security

Zero Trust , Security
Updated: 27 Jan, 2023

"You Hear That Mr. Anderson? That Is The Sound Of Inevitability!" This will be Part 3 of my series of articles on Zero Trust. Applications perhaps receive the least amount of attention when it com

Zero Trust - Data Security

Zero Trust , Security
Updated: 26 Jan, 2023

"We live in a twilight world, and there are no friends at dusk" This will be Part 2 of my series of articles on Zero Trust. And let's start with data, the "chewy core" of the traditional M&M Infor

Zero Trust - Device Security

Zero Trust , Security
Updated: 27 Jan, 2023

"Do you read me, HAL?" In my previous article on Zero Trust for Applications, I concluded with how we need to focus on ZT approach for code compile/build and for application execution. Next, let's

Zero Trust

Zero Trust , Security
Updated: 26 Jan, 2023

Zero Trust is a term attributed to Stephen Marsh and mentioned in his '94 doctoral thesis "Formalising Trust as a Computational Concept" ([link to original thesis](https://dspace.stir.ac.uk/bitstr

Zero Trust - Network Security

Zero Trust , Security
Updated: 27 Jan, 2023

"Know the enemy and know yourself" Know the enemy and know yourself is perhaps the most well known quote from Art of War. In Cybersecurity a lot of focus is given to the

Microsoft Defender for Cloud Apps - DLP Policies

Security , Data Protection
Updated: 28 Feb, 2023

Microsoft Defender for Cloud Apps The Microsoft Defender for Cloud Apps or MDCA offers powerful DLP capabilities as part of its CASB offering, especially if your organization owns E5 licenses and

Zero Trust - Identity as a Perimeter

Zero Trust , Security
Updated: 30 Jan, 2023

"Sometimes, it's easier living the lie" If we ever needed to jumpstart the move to "Identity-as-a-Perimeter", COVID-19 certainly made sure it happened. For more than a year most of the global work

The Trust Algorithm

Zero Trust , Security
Updated: 02 Feb, 2023

Wait, doesn't Zero Trust mean no trust? A common misconception about zero trust is that there should be no trust. Rather, the philosophy of zero trust directs us to start with zero implicit trus

AI Security Maturity - Part 1

AI Security
Updated: 05 Apr, 2025

Artificial Intelligence is rapidly transforming business operations introducing novel AI system risks to the enterprise. Organizations deploying AI solutions face unique security challenges that tradi

AI Security Maturity - Part 2

AI Security
Updated: 07 Apr, 2025

In part 1 of this article, we proposed an AI Security Maturity framework to help organizations address the challenge of evaluating and planning their AI Security

Evolution of OWASP LLM Risks: 2023 to 2025

AI Security , OWASP
Updated: 09 Apr, 2025

As large language models (LLMs) have become deeply embedded in critical enterprise systems and public-facing applications, the security landscape surrounding them has evolved as well. The [OWASP Top 1

Applying Zero Trust to GenAI Apps

AI Security , Zero Trust
Published: 15 Apr, 2025

Introduction: What is Zero Trust & Why Does it Matter for GenAI? Zero Trust is a security framework based on the principle of "never trust, always verify." Instead of assuming that actors inside a

AI Agent Threat Modelling

AI Security , Threat Modelling
Published: 23 May, 2025

Decoding the Matrix: A CISO's Guide to Threat Modeling Agentic AI The paradigm of Artificial Intelligence is rapidly shifting towards more autonomous systems known as Agentic AI. These AI agent

AI for Cybersecurity

AI Security
Published: 08 Jun, 2025

Introduction In today's cybersecurity arms race, threat actors are no longer lone wolves or backroom hobbyists. They are leveraging the full might of generative AI—automating phishing campaigns, wr

EchoLeak and the Domino Effect: How Small Flaws Unleash Critical AI Exploits

AI Security
Published: 30 Jun, 2025

"Sometimes, the smallest crack can bring down the tallest wall."Executive Summary The recent discovery of "EchoLeak" (CVE-2025-32711) in Microsoft 365 Copilot by Aim Labs has sent ripples thr

Signing AI Models for verification

AI Security
Published: 23 Aug, 2025

Introduction With the proliferation of AI Models, the need for secure model distribution has become increasingly critical. There are more than million models available on HuggingFace, which has be

AI Security Maturity Model

AI Security
Updated: 31 Dec, 2025

In part 1 and part 2 of our AI Security Maturity series, we explored a framework for organizations to assess, benchmark,