Prabh Nair

Prabh Nair
  • 5.0 (3)
  • Technology
  • Updated Weekly

Prabh Nair is a cybersecurity podcaster covering cyber risk, ransomware, incident response, SOC operations, GRC, AI security, threat intelligence, digital forensics, ISO 27001, CISSP, CISM, and security leadership. Built for SOC analysts, auditors, cybersecurity professionals, students, and business leaders, each episode delivers simple explanations, practical lessons, and real-world examples to help you stay ahead in the fast-changing cyber world. #CyberSecurity #InformationSecurity #CyberRisk #GRC #SOC #IncidentResponse #Ransomware #ThreatIntelligence #AISecurity #DigitalForensics

  1. 1d ago

    Real ITGC Interview Questions from Big 4 Firms : Must-Know Questions

    Welcome to our channel! In this video, we dive deep into realistic ITGC interview questions frequently asked in Big 4 firms. If you're preparing for an ITGC (IT General Controls) interview with top consulting firms like Deloitte, PwC, EY, and KPMG, this video is a must-watch!What You'll Learn:The most common ITGC interview questions asked by Big 4 firms.Insider tips on how to answer these questions effectively.Real experiences from candidates who have successfully navigated ITGC interviews.Essential knowledge for ITGC consulting and audit roles.Why Watch This Video?Securing a job in ITGC consulting or ITGC audit at a Big 4 firm can be challenging. This video equips you with the insights and confidence you need to ace your interview. Whether you're a fresh graduate or an experienced professional, understanding these interview questions is crucial for your success.What You'll Learn:The most common ITGC interview questions asked by Big 4 firms.Scenario-based questions to help you prepare for real-life interview situations.Insider tips on how to answer these questions effectively.Real experiences from candidates who have successfully navigated ITGC interviews.Techniques to handle questions with confidence and make a great impression.Essential knowledge for ITGC consulting and audit roles.Internal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvGRChttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylAudit Serieshttps://www.youtube.com/watch?v=an15rFruIvo&list=PL0hT6hgexlYzvKY3AcOX2M7bkLRFVpQv4&pp=gAQBiAQB#ITGCInterviewPreparation#itaudit #audition #audition #itsecurity #itgc #sox

  2. 5d ago

    What is Asymmetric Encryption

    Unlock the secrets of secure online communication with our easy-to-grasp explanation of asymmetric cryptography. Discover how it protects your digital conversations like an unbreakable lock and key system, ensuring that only you and the intended recipient can access the message's true meaning. Dive into the world of cybersecurity with us! #AsymmetricCryptography #CyberSecurityExplained #DigitalSafety #EncryptionBasics #SecureCommunication #TechExplained #CryptographyForBeginners #OnlinePrivacy #TechSavvy #StaySecure

  3. Sep 21

    How to Build a Cybersecurity Program from Scratch | CISO Transformation Playbook

    Master Cybersecurity leadership with insights from Ilyas Kooliyankal, Cyber Security Leader of CyberShelter, on navigating modern industry challenges.Ilyas Kooliyankal joins Prabh Nair to discuss what it takes to succeed in the field today. With nearly three decades of experience across enterprise technology and financial services, Ilyas outlines the essential traits required for those looking to build a successful CISO career.We break down the core components of professional growth, emphasizing that knowledge, understanding, and common sense are just as critical as technical aptitude. The conversation also explores how to effectively prioritize security gaps when managing complex systems, providing a clear roadmap for GRC professionals aiming to advance their expertise.Building a cybersecurity program from scratch is not about buying more tools, copying policies, or implementing every security control available.https://www.linkedin.com/in/illyas/It starts with understanding what the business is trying to protect, how much risk it is willing to accept, and which security gaps create the greatest business impact.In this podcast, Prabh speaks with Illyas, a cybersecurity leader with nearly three decades of experience, about the practical process of building and transforming an enterprise cybersecurity program.The conversation covers:How to define information security risk appetiteWhy risk appetite should come before security strategyHow to perform a business-focused security gap assessmentHow to prioritize critical, high, medium, and low risksWhy externally exposed risks may need immediate actionHow to use existing controls before asking for new technologyHow to link cybersecurity investments to business objectivesHow to justify cybersecurity budgets to managementHow to communicate technical cyber risk in business languageHow to balance security with cloud, SaaS, AI, and digital transformationHow to build an executive cybersecurity dashboardHow to convert risk assessment into a strategic roadmapHow to establish the security operating model, roles, and responsibilitiesHow maturity targets should connect back to risk appetiteThe difference between KRIs and longer-term risk metricsSubscribe for weekly technology infrastructure breakdowns and comment below on what leadership topic you want covered next.#CISO #CyberSecurity #CyberRisk #RiskManagement #GRC #SecurityStrategy #CyberSecurityLeadership #SecurityArchitecture #RiskAppetite #CyberGovernance #CISOMindset #CoffeeWithPrabh

  4. Sep 17

    How to Investigate Akira Ransomware : Practical Insight

    Join cybersecurity experts Mr. Abhijeet and Mr. Chirayu in this enlightening podcast as they unravel the complexities of the Akira ransomware. Dive deep into their step-by-step investigation, uncovering the critical insights that led to the identification, mitigation, and protection strategies against this formidable cyber threat.https://www.linkedin.com/in/abhijit-tripathy-a84257a3/?originalSubdomain=inhttps://www.linkedin.com/in/chirayu-mahajan-bb1a974a/In this video, our speakers share exclusive documents and logs instrumental in dissecting the ransomware’s mechanisms. Gain practical knowledge on how these seasoned professionals navigated the challenges posed by Akira, developing robust defense tactics to safeguard organizational assets.🚀 In This Episode, You Will Discover:Dual Extortion Tactics: The double-edged threat posed by Akira ransomware and how it leverages victim data for ransom.Hybrid Encryption Techniques: Unpacking the encryption strategies that make Akira a formidable foe.Living Off The Land Attacks: Insights into how attackers use legitimate tools for malicious purposes.Reflective Injection Attacks: A deep dive into how Akira bypasses conventional detection methods.The Shadowy World of Initial Access Brokers: Understanding the brokers that provide gateways for ransomware attacks.PowerSploit's Role: Exploring how the PowerShell Mafia’s toolkit aids in the spread of Akira.Reconstructing RDP Bitmap Cache: A look at how investigators piece together user actions from remote desktop protocol data.Mr. Abhijeet and Mr. Chirayu not only share their riveting journey uncovering Akira but also arm you with the knowledge to identify, mitigate, and shield your organization against such sophisticated cyber threats.🌐 Stay Safe in the Cyber World: Whether you’re a cybersecurity rookie or a seasoned professional, this podcast is packed with invaluable insights that will elevate your understanding and preparedness against cyber threats.#CyberSecurity #AkiraRansomware #InfoSec #RansomwareInvestigation #DataProtection #ThreatIntelligence #CyberAttack #DigitalDefense #TechInsights #PowerSploit #InitialAccessBroker #DualExtortion #HybridEncryptionPart 2https://youtu.be/PUdvXHpKNjE✨ Don’t forget to subscribe for more exclusive content, and hit that bell icon so you never miss out on cybersecurity insights. Like, share, and comment below with your thoughts or questions for our experts!Playlist CISO Talkhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1LzzrLwTiSt5d_kO_0QsEPlaylist Network Securityhttps://www.youtube.com/playlist?list=PL0hT6hgexlYzX6AWwcyDbAZQUKYJL2MdtGRC Interview Questionshttps://youtu.be/4TyfNtFGAC4Internal Auditor Playlist https://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvHow to make career progression post #isc2 and #isaca https://www.youtube.com/watch?v=PT0fnCWzAFA&pp=ygUJZ3JjIHByYWJoHow to make career in GRChttps://www.youtube.com/watch?v=_S4t9S5N4Ts&t=102s&pp=ygUJZ3JjIHByYWJoHow to Build PIMShttps://www.youtube.com/watch?v=IwAseU4ZmuQHow to Implement 27001 in an organization https://www.youtube.com/watch?v=sQqJH2naU6IHow to conduct PIAhttps://www.youtube.com/watch?v=z1BD7exH2Ow&t=774sHow to Make an career in GRChttps://www.youtube.com/watch?v=_S4t9S5N4Ts&t=7sTelegram Grouphttps://t.me/InfoseclearningStart your career in cybersecurity with free resources https://lnkd.in/g89gxkzc Cybersecurity Career: How to Make a Career in Cybersecurity 2022 https://lnkd.in/gCGBnRM7Pentesting Career https://lnkd.in/gQYenKYdTelegram Group Linkhttps://t.me/InfoseclearningCybersecurity Guidehttps://www.youtube.com/playlist?list=PL0hT6hgexlYwdYBW6yqUQMuRqvABiQPXk#ransomware #cybersecurity #infosec #hacking

  5. Sep 14

    How to Prepare for CGRC Certification in 2026

    Many professionals come from ISO 27001, audit, compliance, or traditional cybersecurity backgrounds. But CGRC is strongly aligned with NIST publications, system authorization, security and privacy control assessment, and the Risk Management Framework lifecycle.In this podcast episode, Prabh speaks with Aamir about his CGRC preparation journey, the difference between ISO-based GRC thinking and NIST-based GRC thinking, and why CGRC is useful for professionals working in governance, risk, compliance, security authorization, FedRAMP, control assessment, and AI governance. In this episode, we discuss:What CGRC certification isWhy CGRC requires NIST-based thinkingDifference between ISO-based GRC and NIST-based GRCWhy NIST RMF is central to CGRC preparationHow CGRC is different from CISSP, CCSP, CISA, CRISC and ISO 27001Why system authorization boundaries matterWhy control implementation and assessment are importantHow compliance becomes a lifecycle processWhy POA&M is important in risk assessment and remediationHow FISMA, FedRAMP, NIST, COBIT and ISO connect in GRC thinkingWhy CGRC is relevant for security and privacy integrationHow CGRC connects with AI governance and algorithmic riskKey NIST publications for CGRC preparationHow to prepare using the CBK and structured training materialsWhy candidates must think like a risk governance advisorAamir also explains that CGRC professionals should be able to support the full security lifecycle:Define authorization boundariesIdentify and categorize systemsSelect and implement controlsAssess control effectivenessSupport authorization decisionsMaintain continuous monitoringTrack remediation through POA&MAlign compliance with business and mission risk

  6. Sep 10

    Inside the Ransomware War Room | Human Side of Cybercrime with Jon DiMaggio

    Ransomware is not only a technical problem.Behind every ransomware attack, there are people — operators, affiliates, initial access brokers, negotiators, developers, money launderers, and criminal leaders making decisions under pressure.In this podcast episode, Prabh speaks with Jon DiMaggio, cybercrime investigator, founder and principal researcher at Arkham Cyber, and author of The Art of Cyber Warfare, about the human side of ransomware operations.Jon explains why organizations make a major mistake when they treat ransomware only as malware, encryption, indicators of compromise, backups, and recovery.The real adversary is human.To defend better, security teams must understand attacker motivation, fear, ego, trust, negotiation behavior, relationships, mistakes, and internal conflicts.In this episode, we discuss:Why ransomware is not only a technical problemWhy understanding the human adversary mattersHow ransomware groups operate behind the scenesThe role of initial access brokersHow affiliate teams work inside ransomware-as-a-service ecosystemsHow ransomware operators manage extortion and negotiation pressureWhy human intelligence matters in cybercrime investigationHow dark web research helps reveal attacker behaviorHow Jon investigated the LockBit ransomware groupWhy attacker psychology, ego, trust, and internal conflict matterHow technical intelligence and human intelligence work togetherHow MITRE ATT&CK, Cyber Kill Chain, and Diamond Model help defendersWhy technical indicators alone are not enoughHow ransomware negotiation patterns can manipulate victimsHow law enforcement and private-sector intelligence can support disruptionHow AI may increase the speed, scale, and automation of ransomware attacksWhy defenders must combine telemetry, threat intelligence, and human behavior analysisLinkedin Profilehttps://www.linkedin.com/in/jondimaggio/https://www.amazon.in/Art-Cyberwarfare-Investigators-Ransomware-Cybercrime-ebook/dp/B09BKLRH8P#Ransomware #ThreatIntelligence #CyberCrime #DarkWeb #LockBit #IncidentResponse #SOC #CISO #CyberSecurity #HumanIntelligence

  7. Sep 7

    How to Crack JEE: AIR 59 Shares Study Routine, Mistakes and College Advice

    JEE preparation is not only about studying for long hours. It is about discipline, consistency, the right strategy, emotional control, mock test analysis, and making smart decisions during the final phase of preparation. In this podcast, Prabh speaks with Ishaan Singh, who achieved All India Rank 59 in JEE, about his preparation journey, study routine, coaching experience, final-week strategy, college selection, and the skills students should build beyond academics. Ishaan shares practical advice for JEE aspirants and parents who are trying to understand what really matters during preparation and after results. In this episode, we discuss:Ishaan’s JEE preparation journeyHow he built a disciplined study routineHow to manage school, coaching, self-study and personal activitiesWhy focused study blocks and regular breaks matterWhy avoiding social media helped him stay focusedHow to analyze mock tests and identify weak areasWhat to revise in the final week before JEEWhy previous year questions are importantWhy students should avoid difficult new problems just before the examWhy handwritten notes can improve learningRole of coaching in structure, testing and peer supportWhy students should not constantly compare themselves with othersHow to handle setbacks during preparationHow to choose a good engineering college beyond rankingsWhy students should speak with current students and alumni before choosing a collegeImportance of curriculum quality, peer group, internships, research exposure and campus cultureGap between college education and industry skillsWhy skills matter beyond college tagsHow students from non-CSE branches can still build careers in software and technologyHow AI tools can support learning when used correctlyOne of the strongest takeaways from this session:#JEE #JEEPreparation #Engineering #IIT #StudentLife #CareerGuidance #CollegeSelection #Education #Parents #CoffeeWithPrabh

  8. Sep 3

    Privacy Ops Masterclass | Building Trust Across Product, AI and Security

    Privacy does not fail only because organizations do not have policies.Many times, privacy fails because it comes too late.After the product is designed.After the code is written.After the vendor is onboarded.After the data flow is already live.After the AI use case has already started using personal data.In this podcast/session, Prabh discusses the practical meaning of Operationalising Privacy across Product, AI and Security.This session focuses on how privacy can move from paperwork to real execution inside organizations.We discuss why privacy by design fails when privacy is reviewed only after design is complete, and why privacy must be embedded into product development, engineering workflows, AI programs, security reviews, data-flow mapping, risk scoring, and day-to-day business decisions.https://www.linkedin.com/in/devika-subbaiah-infosec/In this session, we cover:- Why privacy should not appear only at the end of product design- Why privacy by design must be embedded before code is written- What Privacy Operations really means- Difference between privacy policy and privacy operations- Why DPO oversight and Privacy Ops execution are not the same role- How product, security, legal, business and privacy teams should work together- Why data flow diagrams should be living maps, not one-time documents- How vendor changes, retention changes and subprocessors affect privacy risk- Why privacy risk should not be viewed only through a legal lens- Why privacy risk and security risk must both be assessed- How dual-axis risk scoring can help evaluate organizational risk and individual harm- How an Activity-First Data Model can reduce repeated privacy documentation- How RoPA, DPIA, TIA, LIA and consent records can be generated from a common activity record- Why privacy must scale across products, functions and AI programs- Why every privacy framework field ultimately represents a real person and a real riskThe key message is simple:Privacy that only works on the day it was checked is not privacy.Organizations need privacy systems that are operational, scalable, evidence-driven, and embedded into daily decision-making.Watch the full session and comment below:What is the biggest privacy challenge in your organization — product design, AI usage, vendor risk, data mapping, privacy operations, or DPO execution?#PrivacyOps #DataProtection #PrivacyByDesign #AIGovernance #CyberSecurity #GRC #DPDP #GDPR #ProductSecurity #PrivacyEngineering #CoffeeWithPrabh

See All (161)

Ratings & Reviews

5
out of 5
3 Ratings

About

Prabh Nair is a cybersecurity podcaster covering cyber risk, ransomware, incident response, SOC operations, GRC, AI security, threat intelligence, digital forensics, ISO 27001, CISSP, CISM, and security leadership. Built for SOC analysts, auditors, cybersecurity professionals, students, and business leaders, each episode delivers simple explanations, practical lessons, and real-world examples to help you stay ahead in the fast-changing cyber world. #CyberSecurity #InformationSecurity #CyberRisk #GRC #SOC #IncidentResponse #Ransomware #ThreatIntelligence #AISecurity #DigitalForensics

Information

  • Creator
    Prabh Nair
  • Years Active
    2021 - 2026
  • Episodes
    161
  • Rating
    Clean
  • Copyright
    © Prabh Nair
  • Show Website
    Prabh Nair

You Might Also Like