Blog Posts

In this post, we’ll prepare some PASTA —not the edible kind, but the Process for Attack Simulation and Threat Analysis —using a very real, very common banking scenario. Threat modeling often gets a bad reputation. Too theoretical. Too many diagrams. Too much “security says NOs" Industry surveys paint an interesting picture. While a strong majority of software organizations say threat modeling is important, far fewer actually do it consistently as part of every project. While

It was one of those drizzly Mumbai Mondays, traffic crawling like extras fleeing doom in a gritty apocalypse movie . The boardroom of Bharat Srestha Bank (BSB) matched the weather perfectly—gloomy and tense. Prajesh Mantri, CEO and usual hype machine, had that “kuch toh gadbad hai” expression, dead serious, tapping the marker like a gavel in filmi court. ““sab theek nahi lag raha,” he muttered in an edgy and strained voice. “Europe war ne bazaar hila diya—Board’s chopping 10%

List of policies, SOPs, and toolkits every bank must standardise. Why data discovery classification & minimisation is foundational. KRIs