Upasana Gupta

Contributing Editor, CareersInfoSecurity

Upasana Gupta oversees CareersInfoSecurity and shepherds career and leadership coverage for all Information Security Media Group's media properties. She regularly writes on career topics and speaks to senior executives on a wide-range of subjects, including security leadership, privacy, risk management, application security and fraud. She also helps produce podcasts and is instrumental in the global expansion of ISMG websites by recruiting international information security and risk experts to contribute content, including blogs. Upasana previously served as a resource manager focusing on hiring, recruiting and human resources at Icons Inc., an IT security advisory firm affiliated with ISMG. She holds an MBA in human resources from Maharishi University of Management, Fairfield, Iowa.

4 Do's and Don'ts of Networking

Upasana Gupta • March 8, 2012

"It was purely my networking that saved us and gave us time to defend ourselves appropriately," says Abbas Kudrati of the National Bank of Kuwait, following a recent cyber incident that impacted the bank.

Cisco Updates Certification Training

Upasana Gupta • February 28, 2012

Cisco has announced a major update to Cisco CCNA and CCNP security certifications to deliver specialized training in IT security to meet the needs of emerging technologies.

5 Tips to Reduce Insider Risks

Upasana Gupta • July 25, 2011

"The action and manifestation of risk is not necessarily evident to today's users in the way it was in the past, and that creates a big inherent challenge for a CISO," says Malcolm Harkins, CISO at Intel Corp.

Risk Management Grows CISO Role

Upasana Gupta • April 12, 2011

CISOs today are evolving into strategic and risk managers, going far beyond the old-fashioned role of working solely within the IT department to manage and protect data.

PCI Training Gets High Marks

Upasana Gupta • March 12, 2011

"We are training organizations to become more security focused and get them away from the check box mentality," says Jeremy King of the PCI Security Standards Council, describing the group's new approach to increasing PCI awareness globally.

Executive Training for Security Leaders

Upasana Gupta • January 19, 2011

"The impact of executive training on IT security is about owning the responsibilities, sharing accountability and balancing the risks," says Lee Congdon, CIO at Red Hat.

The Business of Security

Upasana Gupta • December 9, 2010

"Companies are increasingly looking for individuals who have a business mindset and can make the connections among security, IT risk and business," says John Reed, executive director of Robert Half Technology.

How to Manage Gen Y

Upasana Gupta • October 8, 2010

With baby boomers reaching the retirement stage, and the first throngs of Gen Y entering the information security workplace, the profession is evolving - and gaining new definition.

Crisis Leadership: How to Survive

Upasana Gupta • July 30, 2010

The Heartland case is a prime example of how information security incidents can impact an organization's reputation - and define a leader.

What it Takes to be a PCI-Qualified Security Assessor

Upasana Gupta • February 25, 2009

The Payment Card Industry Data Security Standard (PCI DSS) is intended to help organizations proactively protect sensitive customer account data. The standard was developed by the founding payment brands of the PCI Security Standards Council, including American Express, Discover Financial Services, JCB International,...