How to find and rationalize hidden tools that are costing you money

One of the more harmful threats to enterprise cybersecurity (and cyber budgets) is the accumulation of excess security tools. Some of these tools are Shadow IT solutions that were needed a couple of years ago but have since been abandoned. Others are orphans from various acquisitions and mergers. Many are hidden and CISOs are often not even aware of them.

The threats to the enterprise can be extensive. Hidden tools pose a security problem because malware can attach itself to these ignored pieces of code. Attackers can also leverage the gaps between tools to create an effective hiding place while they gain network access. And then there is the cost issue. The enterprise is paying license fees for tools that are not being used.

In this podcast, Wipro Partner Angshuman Chattopadhyay discusses how Wipro SMC-AI uses AI to find and rationalize hidden tools. Wipro SMC-AI employs a highly customizable automation mechanism that gives CISOs the option to instantly repair holes while operating in the background, or have a human approve every change before it’s implemented.

About the speaker
Angshuman Chattopadhyay

Angshuman Chattopadhyay is a cyber security professional with 23+ years of experience in consulting, implementation, and managed services. He leads Wipro’s cybersecurity and risk services infrastructure practice. Angshuman is responsible for go-to-market, solutions management, platform development, and service delivery. He has published numerous cybersecurity articles, including Zero Trust thought leadership, and spoken at various industry forums.

About the host

Evan Schuman

Evan Schuman, a veteran IT journalist, currently writes for DarkReading and Computerworld. His byline has appeared in articles for numerous media companies, including The New York Times, Associated Press, Reuters, SCMagazine/SCMedia, VentureBeat, TechCrunch, and eWEEK. Evan has been been quoted on security issues in The Wall Street Journal, The Washington Post and Time, among others. He has consulted on cybersecurity content issues for Microsoft, Harvard Business Review,  Oracle, HP Dell and MIT, and regularly lectures on cybersecurity topics at Columbia University and New York University.