Author

Surya Maulana.

Head of Zentara Cybersecurity, CISO · 32 articles

Surya serves as Head of Cyber Security and CISO of Zentara, overseeing SOC and Red Team operations. He has led government and enterprise penetration testing projects and developed OSINT-driven intelligence platforms supporting investigations and strategic security initiatives.

LinkedIn profile ↗

Articles by Surya Maulana

AI in Cybersecurity17 Sept 2026

Defending Against Executive Deepfakes: Protecting Singapore Family Offices and Private Wealth

Learn how family offices in Singapore can protect executives, private wealth, and sensitive transactions from deepfake and AI impersonation scams.

Surya Maulana

Cloud & IT Security10 Sept 2026

What Is Maritime Cybersecurity? Protecting Philippine Ports and Logistics

Learn how maritime cybersecurity can help Philippine ports and logistics operators defend against ransomware, supply chain attacks, and disruption.

Surya Maulana

AI in Cybersecurity18 Aug 2026

What Is Vishing? AI Voice Cloning Threats to Philippine BPOs

Learn what vishing is, how AI voice cloning enables social engineering, and how Philippine BPOs can protect agents from account takeover attacks.

Surya Maulana

Cloud & IT Security11 Aug 2026

Ransomware in a Multi-Cloud World: Lessons From Indonesia's Data Center Reforms

Learn how Indonesian organisations can strengthen cloud security with immutable backups, disaster recovery, and cross-region failovers amid evolving data sovereignty rules.

Surya Maulana

Blog24 Jul 2026

What Is Ransomware? How It Works and How to Prevent It

Most guides describe ransomware as software that locks your files until you pay. That description is a decade out of date, and believing it is exactly what gets businesses caught. Modern ransomware doesn’t just lock your data. It steals it first, then encrypts what’s left, then threatens

Surya Maulana

Uncategorized20 May 2026

Securing E-Government Services in the Age of Hyperconnectivity

As governments continue to digitise public services, e-government platforms have become essential for delivering efficient, accessible, and scalable services to citizens. From tax systems and healthcare records to identity databases and social services, critical government functions now operate in h

Surya Maulana

Blog15 May 2026

Protecting the Philippines IT-BPM Sector from Identity-Centric Attacks

The Philippines has become one of the world’s leading hubs for IT and business process management (IT-BPM) services. Global enterprises rely on Philippine providers to handle customer support, finance operations, software development, and back-office processes. According to the IT & Business Pro

Surya Maulana

Blog11 May 2026

Mission 2028: Aligning Philippine Enterprises with NCSP

The Philippine government has made its position clear. President Ferdinand R. Marcos Jr. approved the National Cybersecurity Plan 2023-2028, issued through Executive Order No. 58 in February 2024, as a comprehensive roadmap to protect institutions and citizens. This is not an aspirational policy; it

Surya Maulana

07 May 2026

Zero Trust Architecture for Indonesia’s Hybrid Cloud Migrations

Indonesia’s cloud adoption is accelerating as enterprises and public institutions shift toward hybrid architectures that combine on-premise infrastructure with multi-cloud environments. This shift is driven by scalability needs, the modernisation of legacy systems, and the expansion of digital publi

Surya Maulana

Uncategorized05 May 2026

Securing BUMN and Critical Infrastructure in the Age of Hyperconnectivity

Indonesia’s state-owned enterprises (BUMN) and critical infrastructure operators sit at the intersection of national economic interest and an expanding digital attack surface. They run the power grid, the fuel supply, the telecommunications backbone, and the national logistics chain. Because t

Surya Maulana

Blog24 Apr 2026

Bridging the Gap Between IT and OT Security Teams in the Manufacturing Sector

Digital transformation is reshaping manufacturing. Smart factories, connected machinery, and Industrial IoT are improving efficiency and productivity. However, this convergence of Information Technology (IT) and Operational Technology (OT) has also created new cybersecurity challenges. Historically,

Surya Maulana

Zero Trust Network Access (ZTNA) transition

Blog23 Apr 2026

The Death of the VPN: Transitioning to ZTNA for Secure Remote Access

Remote work has become the norm across enterprises, but traditional VPNs are increasingly proving insufficient for securing access to corporate resources. VPNs often grant broad network access, creating potential security gaps and increasing the risk of attackers entering the environment. For many,

Surya Maulana

Uncategorized22 Apr 2026

State-Sponsored APTs in Asia: Tactics, Techniques, and Defence Strategies

As the landscape of cyber threat intelligence in Asia evolves, state-sponsored advanced persistent threats (APTs) pose a growing risk to regional enterprises. These attacks are typically highly targeted, well-resourced, and designed to remain undetected for extended periods. Unlike opportunistic cyb

Surya Maulana

Blog13 Apr 2026

Smart City Vulnerabilities: Securing Large-Scale IoT Deployments in Southeast Asia

Southeast Asia is rapidly embracing smart city initiatives. From connected traffic systems in Singapore to IoT-enabled public utilities in Jakarta and Bangkok, these projects promise efficiency, sustainability, and improved quality of life. But rapid deployment comes with risks. Every connected sens

Surya Maulana

Blog09 Apr 2026

From Detection to Containment: How Modern Incident Response Actually Works

When a security alert appears, many organisations assume the hardest part is over. A threat has been detected, the security team has been notified, and the process can begin. On paper, this sounds straightforward. In reality, detection is only the starting point; the time between identifying a threa

Surya Maulana

Critical infrastructure cyber resilience

Blog08 Apr 2026

Securing Critical Infrastructure: A 2026 Guide to OT and SCADA Defense in ASEAN

Across Southeast Asia, digital transformation is reshaping how essential services operate. Energy providers, manufacturers, transport networks, and utilities are becoming more connected, more automated, and more data driven. This progress brings efficiency and innovation, but it also introduces a gr

Surya Maulana

Blog08 Apr 2026

Managing Insider Threats: Behavioral Analytics in a Zero Trust Architecture

Insider threats are among the most challenging risks for organisations. Unlike external attacks, insiders—such as employees, contractors, or partners—already have access to systems and data, making malicious or accidental actions harder to detect. A global breach analysis by Insider Threat Statistic

Surya Maulana

Blog08 Apr 2026

Cloud Misconfigurations: The Breach Vector Most Enterprises Still Miss

Cloud adoption has transformed how organisations build and scale technology. Infrastructure can now be deployed in minutes, environments can expand globally overnight, and teams can innovate without the constraints of physical hardware. But this speed introduces a dangerous trade-off. As environment

Surya Maulana

Blog27 Mar 2026

Threat Intelligence That Actually Works: Turning Alerts into Decisions

Security teams are not short on alerts; they are short on clarity. A typical organisation generates thousands of alerts every day across endpoints, networks, identities, and cloud systems. On paper, this level of visibility should strengthen security, but in reality, it often creates confusion as an

Surya Maulana

Blog25 Mar 2026

Supply Chain Attacks in Southeast Asia: Why “Trusted Partners” Become Entry Points

In Southeast Asia’s digital economy, trust drives growth. Organisations depend on networks of vendors, cloud providers, and outsourcing partners to scale quickly and operate across borders. This interconnected model enables speed and flexibility, but it also expands the attack surface. The more conn

Surya Maulana

Blog04 Feb 2026

Ransomware Response Plan: The Decisions You Must Make in the First 60 Minutes

Ransomware is no longer a distant, hypothetical risk. It is a board-level crisis that can unfold in minutes and escalate globally in hours. For many organisations, the real damage does not come from the malware itself, but from hesitation and confusion in the first 60 minutes after detection. This m

Surya Maulana

Blog30 Jan 2026

Fintech Security in SEA: A Practical Security Baseline for Growth-Stage Teams

Security operations teams are under pressure from both sides. On one hand, threats are increasing in volume and sophistication. On the other, hiring experienced security talent is expensive, slow, and increasingly competitive. CISOs are left with a recurring question that has no simple answer. When

Surya Maulana

Blog27 Jan 2026

MFA Is Failing: How Attackers Bypass Authentication and What Comes Next

Multi-factor authentication has long been promoted as a cornerstone of modern cybersecurity. For years, organizations were told that adding an extra authentication factor would dramatically reduce the likelihood of account compromise. While MFA still raises the bar, attackers have adapted. Today, MF

Surya Maulana

AI in Cybersecurity22 Jan 2026

Third-Party Risk Assessments: How to Stop Vendors From Becoming Your Weakest Link

Modern enterprises don’t operate in isolation. Cloud providers, SaaS platforms, payment processors, development partners, logistics vendors—every business today runs on an extended ecosystem of third parties. Each one expands capability. Each one also expands risk. High-profile breaches over the las

Surya Maulana

Cloud & IT Security07 Jan 2026

Security Metrics That Matter: KPIs for CISOs in 2026

Why Security Metrics Are Under Pressure For years, CISOs have been asked the same question by boards and executive teams: are we secure? The uncomfortable truth is that many dashboards still struggle to answer it. In 2026, this challenge is becoming impossible to ignore. Attack surfaces are expandin

Surya Maulana

Cloud & IT Security06 Jan 2026

Top 5 Cloud Security Risks Most Enterprises Still Underestimate

Cloud adoption has fundamentally changed how enterprises build and scale systems. Infrastructure is elastic, deployments are automated, and identities now define access far more than network boundaries. Yet many security strategies still assume risks that resemble traditional data centers rather tha

Surya Maulana

AI in Cybersecurity02 Jan 2026

How to Build a Security Operations Center That Actually Prevents Breaches

Breaches don’t occur because organisations lack security products. They happen because defenders fail to detect and respond before attackers move. A Security Operations Centre (SOC) should prevent that. But too many SOCs end up as log-collectors, alert generators, or compliance checkboxes, not as re

Surya Maulana

Blog27 Dec 2025

The Growing Insider Threat Problem in Hybrid Work Environments

The traditional office perimeter has not just shifted; it has effectively dissolved. In the wake of the global transition to hybrid work, the “office” is now a kitchen table in the suburbs, a coworking space in another time zone, or a laptop on a train. While this flexibility has unlocke

Surya Maulana

AI in Cybersecurity20 Nov 2025

What CISOs are Getting Wrong About Threat Modeling

When security teams refer to threat modeling, they often picture periodic exercises: white-board sessions, flow diagrams, lists of assets, and hypothetical attack paths. In 2026, however, this static approach is diverging sharply from how real-world adversaries operate. Attackers exploit cloud-nativ

Surya Maulana

Vulnerability Assessment and Penetration Testing (VAPT)

Blog28 Oct 2025

How AI-Native SOCs are Transforming Threat Detection and Cyber Resilience

Modern enterprises no longer face predictable or isolated cyber threats. Today’s attackers operate with automation, artificial intelligence, and stealth, leveraging techniques that evolve in real time. Traditional Security Operations Centers (SOCs), even when equipped with sophisticated SIEM or SOAR

Surya Maulana

SOCaaS, SOC as a Service, Security Operations Center

Blog29 Sept 2025

SOC-as-a-Service: The Smarter, Stronger Way to Secure Your Organisation

Cyberattacks aren’t slowing down. Neither should your defences. Today’s enterprises face a perfect storm of threats: ransomware, lateral movement, data exfiltration, insider risk,while internal teams are overwhelmed with alert fatigue, tool sprawl, and chronic talent shortages. Standing still means

Surya Maulana

Blog12 Sept 2025

SOC as a Service: The Smarter, Stronger Way to Secure Your Enterprise

Every enterprise today is digital at its core. From e-commerce to financial services, healthcare to manufacturing, businesses depend on connected systems, cloud environments, and data-driven operations to thrive. But as technology scales, so do risks—creating the need for advanced cybersecurity serv

Surya Maulana