Cyber Security, data breaches, Hackers, Chief Information Security Officers, Talking Cyber Security (formerly 'The Australian CISO') is a podcast for anyone interested in Cyber Security. Hear about data breaches, cyber news, how security personnel 'tick', how to answer questions at an interview, lessons learnt while doing the security role, how security people network, how they succeed etc. Use the email address theaustralianciso@gmail.com to make comments, pose questions or even ask to be on The Australian CISO podcast.The main presenter is Richard Heron. Richard is an experienced CISO and has learnt many tough lessons during the many and varied Security Management roles he has held since 2002. He also holds some security accreditations as well. Richard enjoys AFL, podcasting, e-Biking and charity work.
Richard revisits the very important Cyber field of Data Loss Protection.
Richard completes his summary of the March 2025 Gartner Risk and Security Conference held in Sydney Australia.
Richard describes Day 1 of Gartner's Sydney and Risk Conference held recently in Sydney.
In this episode, Richard introduces basic concepts of Crisis and Incident Management. This is the first of a few episodes where Crisis and Incident Management will be discussed.
In this episode, Richard discusses 10 lessons and approaches that will help you survive in cyber security.
In this episode, Richard covers the top 25 lessons derived from the 2024 Talking Cyber Security podcast.
In this episode, Richard does a bit of a reflection of 2024, and prompts your thinking for the upcoming year.
In this episode, Richard covers various topics including CyberCon Melbourne 2024, 2 new starters in the Cyber industry, some cyber personalities and plans for 2025. Please excuse the sound quality - it's good but not as good as it usually is. Thanks for listening!
Richard describes his experiences of Day 1 at Melbourne BSides 2024.
Richard continues answering commonly asked security questions.
In this episode, Richard starts to answer many common security questions. More questions to come in future episodes.
In this episode, Richard mentions last episode's Essential 3 basic hygiene practices as well as touching on the upcoming AISA CyberCon 2024 Conference.
In this episode, Richard discusses 3 basic security hygiene activities that you're probably not doing as a diligent security staff member.
In this episode, Richard finishes his discussion regarding questions and answers to expect when interviewing for less experienced security roles.
In this episode, Richard discusses the types of questions you can expect in interviews if you are applying for "junior" roles.
In this episode, Richard discusses with a friend the merits of doing 'phone screening' before the official interview process commences. It is amazing what can be gleaned during the screening process.
In this episode, Richard discusses the various presentation styles he has witnessed. Are you a newsreader? Are you a Storyteller? A Ted Talker or a Data Diver?
In this episode, Richard covers the recent Corinium Intelligence's Melbourne CISO 2024 and briefly mentions the recent world-wide IT outage.
In this episode, Richard asks us all to consider personal patches we could apply to ourselves to improve our own performance.
In this episode, we discuss the music that reminds us of Cyber Security events.
Many of us use business "balanced scorecards", but have you ever thought of a personal scorecard for the work you do in Security? Richard tries to piece one together.
In this episode, we revisit the latest statistics behind time to crack passwords. Are they getting easier or harder to crack?
Listen to Richard as he dissects CISO Interview questions and answers.
In this episode, Richard discusses Imposter Syndrome and the Kruger-Denning Effect with respect to the cyber security industry.
Richard revisits the current capabilities of AI voice capabilities. He runs the same dialogue against 3 AI voice tools to determine whether they have improved since his last AI voice experiment 11 months ago.
Richard and his guest Olly Stimpson (CyberArk) complete their discussion on credential stuffing.
Richard continues his discussion with Olly Stimpson from CyberArk around the protection measures available for credential stuffing.
In this episode, Richard discusses 'credential stuffing' with Olly Stimpson from CyberArk.
In this episode, Richard introduces the basics of Artificial Intelligence and has a good look at the EU Artificial Act introduced in March 2024.
In this episode, Richard discusses the ASD's Essential 8 controls.
Richard wraps up his discussion on DLP.
In Part 1, of a 2-part episode, Richard discusses all things Data Loss Protection (DLP).
In this episode, Richard provides the highlights of episodes 41 to 52.
Richard continues recapping his first 50 episodes.
Richard reviews episodes 21 to 30 of Talking Cyber Security.
Richard summarizes the main points within each episode between 11 and 20.
Richard discusses the key points from the first 10 episodes of the 'Talking Cyber Security' podcast.
In this episode, Richard answers questions some CISOs get asked.
In this final installment of "Life as a Security Engineer", John discusses Capture the Flag contests, how to join a team and other related security talking points. The sound quality isn't great but it is certainly audible.
Richard and John continue to discuss Life as a Security Engineer.
In the first of a 3 part series, Richard finds out what the "Life of a Security Engineer" is like by interviewing his friend John.
Richard and Louay complete their discussion about all things security.
Richard and Louay Ghashash from Spartans Security continue their discussion and cover topics such as SOCs, 3rd party questionnaires, ISO 27001, risk based approaches, an analysis of security frameworks (NIST, Essential 8, ASD 35, ISO 27001) and other matters.
Richard is Talking Cyber Security with Louay Ghashash from Spartans Security.
In this episode of Talking Cyber Security, Richard goes out and about and attends a cyber security get together with Retired Major General Dr Marcus Thompson.
The Australian CISO has just been renamed to Talking Cyber Security. The new episode will be available within 48 hours.
Richard discusses the Australian Cyber Security Strategy.
In this episode, Richard discusses Board Reporting, with emphasis on a Board Dashboard. 4 examples of his Board Dashboard are available to anyone. Listen to the episode to hear where to get your copy.
We hear from Austyn Guo (Managing Consultant - Offensive Security at Tesserent) talk about his job and discussing a much forgotten aspect of security - physical security.
Richard continues his cyber discussion with Jason Murrell.
In this episode, Richard interviews Security advocate and presenter, Jason Murrell at a recent ADAPT Security event in Melbourne.