Tell us about yourself and how you reached this point in your career?
I am an electric engineer from NED & Executive MBA (during covid) by education. I’ve been in Cybersecurity / Technology industry for well over two decades serving different clients across various industries in Pakistan, all around APAC and internationally. Transitioned through many different roles e.g., working both in-house and client facing roles while performing network & systems administration, network infrastructure security (design/build/management), performing computer forensics acquisitions & investigations, PCI QSA auditor, infosec consultant, global security architect and presales APAC lead for emerging technology/OT security.
Currently, Founder of “Securing Things” initiative, registered in Hong Kong, providing independent IT & OT cybersecurity advisory & consulting services and training to clients globally.
What is your vision & goal?
My initiatives are reflective of my vision and goals i.e.: “Securing Things for a Smart & Safer Society”.
For businesses (of all sizes): Am on a mission to help organizations secure their digital transformation journey and business operations via Securing Things, an independent IT & industrial / OT cybersecurity advisory and consulting services, awareness via Security Awareness & Phishing Simulation platform and other cybersecurity solutions.
For individuals: raise general awareness of cyber risks and for cybersecurity enthusiast, to help them transform their professional careers via awareness and education through Securing Things Newsletter, and “Securing Things Academy” (to be launched soon).
How do you see the Industry-Academia gap?
In contrast with the advancements in technology and the pace of innovation in recent years; traditional teaching methodology and curriculums taught in academia, have been playing catch up with the industry for the last decade/more and post covid plus with growing use of AI, the industry and academia gap has widened. The 4-year degrees (except for medical, legal, and similar required professions) nowadays, seems an overkill, disconnected and well behind meeting skills the industry demands. Fresh graduates struggle to find work (mainly due to lack of required skills and exposure) and end up doing additional short courses/certifications. Hence, we have seen so much growth in online/OnDemand skill-based education industry. The only way forward is collaboration between industries and academia, to prepare and produce a work force based on the philosophy of “learn by doing” things – solving real world problems and challenges.
What was your strategy during Covid-19?
In my previous role, I was given the role to build emerging tech cybersecurity practice for APAC region across 3 key areas for the business with OT cybersecurity as the key practice focus. Only had 1 CIO/CISO in person meet just before the covid hit and had to change the strategy to instead travelling teach sales/presales organization across each country in APAC region to knock the doors and arrange remote meetings. Help build scale the business with a dozen leads and eventually close/win them over a long sales cycle. Had to use onsite engineers/network engineers and technicians to be the eyes, hands and legs to collect the data/details to deliver the projects ranging from assessments to discovery to building policy guidelines and OT anomaly detection security solution deployments.
How are we handling Cybersecurity Issues in Pakistan?
There are some great initiatives both from the private sector and policy makers on addressing cybersecurity risks and challenges faced by Pakistan’s critical infrastructure, businesses, and digital citizens (e.g., Prevention of Electronic Crimes Act (PECA), National Cyber Security Policy 2021, Personal Data Protection Bill 2021, National Telecom Security Operations Centre (NTSOC) and PTA’s Cyber Security Framework etc. to name a few).
However, given the size of our nation and the proliferation of their use of technology, and due to the lack of digital literacy and security awareness, we’ve seen cyber incidents, extortion, blackmailing, fraud, and attacks on the rise. There’s a much required and needed attention on work to be done on policy and its enforcement and continuous updates per the changing threat landscape. We do also require more skills and resources/talent pool in defending nations critical assets.
What are the security risks we have in Pakistan business & individual?
Like any other country, businesses, and individuals in Pakistan, face similar security risks and challenges around cybercrime & cyber threats (like, fraud, theft, PII leaks, espionage, nation state attacks, etc.).
Businesses don’t have cybersecurity on their priority list/consideration, usually an afterthought. The banking sector has lived its fair share of lessons, though there’s big significant improvements made by many, some institutions still have long way towards maturity. Govt., Industrial, and critical infrastructure sectors need much more cybersecurity budgets/attention from leadership and adapt cybersecurity industry best practices.
For individuals, due to lack of awareness, hacks of social media accounts are a norm. There’s a need for a govt. back campaign to raise awareness via authorized bodies.
Lack of cybercrime reporting shows a lack of trust in the system, which is due to political instability for many decades. The solution is to establish transparent processes, clear accountabilities, and the right support systems.
What are the 5 top things you think we are behind from the rest of the world?
- Governance
- Law and order
- Business Ethics
- Education
- Cybersecurity Awareness
What are the best 5 things you think we are better from other countries?
- Giving Charity
- Volunteering for social cause / in crisis like natural disasters.
- Young and ambitious population
- Nation’s Hospitality for visitors/tourists
- Landscape and unique geopolitical position (but this has its challenges as well).
How can we make Pakistan a better Country?
Pakistan stands at a pivotal moment in history, confronting multifaceted challenges and crisis e.g. religious identity & diversity, geopolitical, socio-economic, and more. To forge a stronger and more resilient nation, urgent reforms are imperative across key sectors such as education, judiciary, business ethics, policies, religious affairs, healthcare, security, and economics. All require visionary, strong leadership, long term planning, and commitment for executing such reforms for a better and secure future.
What was your first salary?
Rs. 0, yes, I worked almost 5 months for free (for a mobile operator) as help desk/network support role without salary before landing a proper internship role at an ISP for Rs. 5000/- in mid-to-late 2000.
