Welcome to the Zero Hour Podcast hosted by Karl Sharman and sponsored by BeecherMadden and Cyber Security Professionals. The podcast that gives you the insight, techniques and tools into top guests from the Cyber Security, Governance, Forensic and Data world. This podcast is now available on Stitc…
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. We are joined by Sandro Bucchianeri. Sandro is an award-winning, globally experienced Security Executive with over two decades of cybersecurity experience, with the last 12 years at the executive level (CISO and CSO). Sandro is currently the Group CSO at Absa Group Absa Group is an African financial services company with a global perspective. They have forged a new way of getting things done, driven by bravery and passion, with the readiness to realise the possibilities on our continent and beyond. You can find Sandro at: LinkedIn: https://www.linkedin.com/in/sandrobucchianeri/?originalSubdomain=za Absa Group Website: http://www.absa.africa Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals: www.cybersecurity-professionals.com
Now normally the show is hosted by Karla or Karl Sharman but this time we flipped it on its head and now Daniel Woods is hosting and interviewing Karl, which is strange. But Daniel provides a lot of research into the cyber insurance markets so we thought we would discuss the cyber insurance and primarily the Incident response eco-system in more depth. So let’s see how this goes and everyone interested in this space should certainly check out Daniel’s research. Daniel will be hosting a focus group to solicit feedback on the interview findings on February 10th (12:00 EST/17:00 GMT) at: https://www.twitch.tv/cyber_insurance If you have questions, he can be reached at daniel.woods@uibk.ac.at You can find Daniel at: LinkedIn: https://www.linkedin.com/in/daniel-woods-82555199/ This podcast is sponsored by: Cyber Security Professionals: www.cybersecurity-professionals.com
David Edwards joins Karla Reffold to discuss how Coventry Building Society have addressed their cyber maturity, staffing and diversity and inclusion. This discussion really focuses on leadership and how David is driving a transformation for security but also for a culture. Key Minutes 3:55 - Working with the board on security transformation 10:10 - How to identify the gaps? 14:25 - Getting sponsorship for increased engagement 32:35 - Diversity and inclusion to support engagement 37:08 - Evil Alexa 45:30 - Ten Quick Fire Questions You can find David at: LinkedIn: https://www.linkedin.com/in/davidedwardssec/ Website: https://www.coventrycareers.co.uk/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals - www.cybersecurity-professionals.com
We are joined by Jim Phillipoff, who is the Head of Global Business Development for Entertainment and Media at Irdeto, in his fourth year with the company. He is responsible for developing new projects and initiatives, most recently launching the Trusted Home project. Jim has extensive experience in the service provider industry having served as the founder and CEO of Xtra TV, a Ukrainian DTH company. He also founded several MMDS operators and an ISP in the region, managing several hundred staff and large deployments of capital. Irdeto protects platforms and applications for video entertainment, video games, connected transport, connected health and IoT connected industries. Key Minutes 2:10 Hearing about cybersecurity 3:35 Who are Irdeto? 09:20 Security at home 15:25 Securing IoT 19:43 Parental controls within security 26:20 Security for connected vehicles 31:10 Ten Quick Fire Questions You can find Jim at: LinkedIn: https://www.linkedin.com/in/jim-phillipoff-a460b8137/ Website: http://www.irdeto.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals: www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. We are joined by Ran Pugach. Ran is the Chief Product and Development Officer at Ava Security. Ava is a global technology company with offices in the UK, Norway, and the USA. They believe that they can create a better, smarter way to deliver security. They inject intelligence into their approach to security and all their solutions. They help organizations see, understand, and act on their surroundings to protect their people, business, and reputation in real-time. Key Minutes: 02:30 - Starting on the commercial side 04:20 - How do you stand out through sales 05:55 - What is Ava Security? 11:50 - Insider threat 15:40 - Increasing awareness across the business 21:10 - Internal vs External threats 24:30 - Protecting the IoT Threat 25:20 - Next for Ava Security 31:05 - Ten Quick Fire Questions You can find Ran at: LinkedIn: https://www.linkedin.com/in/ran-p-046561/ Website: https://www.ava.uk/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals: www.cybersecurity-professionals.com
We are joined by Brendan Kotze who is the CEO of CyberLumeneer. Cyberlumeneer was established to solve challenges faced daily by security operations and management teams through designing world class solutions that provide near-real-time visibility, board ready reporting, digital foot printing and continuous security control monitoring. Key Minutes: 1:30 - Industry Educations and Certifications 05:22 - The new product for Core Security 11:50 - Latest trends in the security space 15:20 - Translating for board level 17:50 - The difference between compliance and security 19:30 - Launching a product during 2020 23:00 - Getting customer feedback 26:00 - What will change in 2021? 27:00 - What does the next five years look like? 30:00 - If it’s smart its vulnerable 34:00 - Ten Quick Fire Questions You can find Brendan at: LinkedIn: https://www.linkedin.com/in/brendankotze/ Website: https://www.cyberlumeneer.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals: www.cybersecurity-professionals.com
We are joined by Michael McGuiness who is a Senior Cybersecurity Specialist at the Co-Operative Bank. The former Chemistry graduate from Durham University has recently celebrated five years at the Co-Operative Bank. Michael was also recently nominated as the Cyber Security Awards newcomer of the year for 2020. Key Minutes: 2:26 - Hearing of Cybersecurity 05:02 - Finding first job in cybersecurity 08:10 - The skills gap 09:22 - Graduate Scheme 11:22 - Launching Cyber Awareness week 18:22 - Career mapping 20:22 - Getting mentors 22:42 - Certifications 24:50 - Getting into cybersecurity 25:47 - Ten Quick Fire Questions You can find Michael at: LinkedIn: https://www.linkedin.com/in/michael-mcguinness-6406041a1/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals: www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. We are joined by Greg Van Der Gaast. Starting as one of the most notorious hackers of the 1990's having been involved in the largest mass hack of the time and setting off an international incident after hacking into a nuclear weapons facility, Greg has over two decades of technical, management, and leadership experience in Information Security. A frequent speaker about bringing visibility, care, and accountability to the Information Security industry and breaking out of today's reactive status quo, he is an expert in building efficient and effective InfoSec organisations by enabling leadership, addressing root causes, and harnessing human potential. Key Minutes: 09:30 - How do security leaders do better? 15:40 - Understanding the board 21:10 - How to meet the job description? 33:43 - The vendor landscape 44:10 - Ten Quick Fire Questions You can find Greg at: LinkedIn: https://www.linkedin.com/in/gregvandergaast/ Re-Thinking InfoSec: https://www.amazon.com/gp/product/B084KJSH92/ref=dbs_a_def_rwt_hsch_vapi_tkin_p1_i0 Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals: www.cybersecurity-professionals.com
We are joined by Lior Arbel, who is Performanta Group’s General Manager for Europe & North America and Chief Strategy and innovation Officer. A focused and driven security executive with nearly 20 years of IT security industry experience, Lior joined Performanta in 2013 as CTO in the UK, before becoming GM in 2015. Lior started at IBM where his passion for information technology grew. Previous roles included moving to a start-up, PortAuthority Technologies, offering a data leak prevention solution. PortAuthority Technologies was acquired by Websense (now Forcepoint) where Lior continued to work for the next 8 years, ultimately overseeing the company’s strategic Data Security Solutions department as Senior Director. Key Minutes: 03:30 - The 12 year Education 07:55 - Journey into Cybersecurity 14:32 - The Purple Tribe culture 20:17 - Challenges of Covid-19 24:40 - The next 18 months in cybersecurity 27:00 - Standing out in the cybersecurity industry 32:00 - Innovating internally 35:25 - The Cybersecurity Awards 27:45 - Ten Quick Fire Questions You can find Lior at: LinkedIn: https://www.linkedin.com/in/liorarbel/ LinkedIn: https://www.linkedin.com/company/performanta/ Website: http://www.performanta.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals: www.cybersecurity-professionals.com
We are joined by Erkang Zheng, Founder of JupiterOne, who is a leader in cybersecurity with 15 years of experience in all domains from identity and access, penetration testing and incident response to data, application and cloud security. Zheng holds several patents and is passionate about combining innovation and execution to deliver practical solutions that address cybersecurity challenges at their root cause. He was previously the head of software security architecture and assurance practice for Fidelity that serviced over 12 million customer accounts. He also led a team of engineers building customer protection solutions as well as patent-pending security R&D. Before Fidelity, Zheng held global leadership roles at IBM Security and at a number of tech startups. Key Minutes 02:25 - First time meeting cybersecurity 03:18 - Founding Jupiter One 08:57 - Improving the audit process 11:15 - DevOps implemented into security 14:35 - Identifying the people to build the products 16:32 - Focusing on your long-term career 18:30 - The big news 22:30 - Moving on up 24:57 - Funding through a VC 28:45 - Standing out in a crowded market 31:12 - What is next? 36:43 - Keeping up to date with trends 38:00 - Ten quick fire questions You can find Erkang at: LinkedIn: https://www.linkedin/com/in/erkang Twitter: https://twitter.com/erkang Website: https://jupiterone.com/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals - www.cybersecurity-professionals.com
Dr. Darren Williams is the founder and CEO of BlackFog. In the wake of increasing privacy concerns across the world he founded BlackFog to combat the growing number of applications and online sites that breach your privacy rights. With more than 20% of online activity associated with data profiling it was clear that something had to be done to curb this growing threat. Unlike companies that focus on malware and viruses this new category focuses specifically on data loss prevention, ransomware and malvertising. Key Minutes 05:26 - The first time hearing Cybersecurity 06:30 - Blackfog 15:50 - Is data usage a choice for consumers? 18:00 - What effects has GDPR had? 20:25 - Delivering in a noisy market 25:50 - Changes in the landscape with remote working 27:00 - Trusted networking 31:20 - The start-up lessons 42:30 - Ten Quick Fire Questions You can find Paul at: LinkedIn: https://www.linkedin.com/in/darrenwwilliams/ Website: https://www.blackfog.com/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. We are joined by Paul Innella the CEO of TDI in Washington DC. Since 2001, TDI has grown into a world-class consulting firm offering cybersecurity services to government agencies and commercial clients around the world. Paul is a recognised cybersecurity expert who has published articles, delivered seminars and lectures and conducted interviews to a worldwide audience. Finally, Paul chairs the charitable White Hat USA organisation which has raised over $2 million through the cybersecurity community to help children at the Children’s National Hospital. Key Minutes 09:19 - Starting a business 13:27 - Starting young 16:49 - 20 years on 21:44 - Standing out in a crowded market 24:29 - Increased spending in cyber 28:20 - The changing shift at board level 31:00 - The changing landscape 26:15 - The diversity perspective 37:05 - WhiteHat 43:40 - Ten Quick Fire Questions You can find Paul at: LinkedIn: https://www.linkedin.com/in/paul-innella-b829a9/ Website: http://www.tdisecurity.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. We are joined by Fausto Lendeborg who is the CEO and Co-Founder of Secberus. Secberus is a cloud security posture management and compliance reporting platform which allows enterprises to embed security and compliance into the CI/CD pipeline to automate the auditing of cloud infrastructure. -32 Key Minutes 02:13 - The first time hearing about cybersecurity 07:08 - What’s Secberus? 15:45 - Accelerators 16:21 - Seed funding 17:35 - Hiring the first people in the company 18:20 - The differences in start-ups 19:58 - Standing out in a crowded market 24:13 - Moving to the cloud 26:03 - Getting the attention of a CISO 28:37 - How is the pandemic hitting your business? 31:36 - The importance of treating people well 37:48 - How do you keep developing? 49:28 - Ten Quick Fire Questions You can find Fausto at: LinkedIn: https://www.linkedin.com/in/faustolendeborg/ Website: http://www.secberus.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience This podcast is sponsored by: Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. We are joined by Dom Vogal. Dominic has an established track record as a business security leader, serving in critical roles on numerous projects including security strategy development and endpoint security management in various industries (financial services, government, telecommunications and critical infrastructure). Vogel is a skilled communicator having been the keynote speaker for a number of major conferences and events. As Chief Strategist at Cyber.SC, Vogel focuses much of his energy on helping startups and small/midsize businesses with their cybersecurity challenges. His company also specializes is performing on-demand cybersecurity services for understaffed and overburdened larger enterprises. Key Minutes 03:40 - First hearing cybersecurity 06:28 - Getting your first job in cybersecurity 08:50 - Entry level jobs in cybersecurity 11:03 - How have companies got hiring wrong? 15:52 - Why are CISOs leaving the industry? 21:30 - Being a virtual CISO 32:35 - Always be learning 34:30 - Being value led 36:50 - The latest threats 41:40 - Educating people on risk 45:20 - Ten Quick Fire Questions You can find Kevin at: LinkedIn: https://www.linkedin.com/in/domvogel/?originalSubdomain=ca Twitter: https://twitter.com/domvogel Website: https://www.cyber.sc/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. We are joined by Kevin Senator who is the CEO of Bayshore Networks the company that is solving industrial and IT network security. Kevin is a veteran software sales executive with this being his 7th start-up. Before this, he spent 9 years as a VP of worldwide sales at Counterpane, a managed security monitoring service provides who successfully got acquired by BT. Key Minutes 5:20 Learn from the start-up experience 13:55 The new normal 19:40 Bayshore Networks explained 32:30 Understanding cybersecurity 35:45 OT Security 45:00 Ten quick fire questions You can find Kevin at: LinkedIn: https://www.linkedin.com/in/kevin-senator-46bb821/ Website: http://www.bayshorenetworks.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. We are joined by Adam Nygate, Founder of 418Sec. Adam has taken the opportunity to work and live across Europe, Southeast Asia and Australia, before returning to the UK to work in security within the government. After working at BJSS, he opted to start 418Sec with the help of CyLon, the London cybersecurity accelerator. 418Sec was designed to help secure the world’s open source code. Key Minutes 05:00 - The idea of a start-up 09:00 - Starting a business on my own 10:30 - Using a accelerator 13:00 - Raising pre-seed investment 15:00 - Selling a product as a start-up 20:00 - Risk from source code 24:55 - How do you standout in a crowded market? 29:05 - How has the industry changed? 39:18 - Getting into the industry 42:20 - Ten Quick Fire Questions You can find Adam at: LinkedIn: https://www.linkedin.com/in/adam-nygate/?originalSubdomain=uk Twitter: https://twitter.com/adam_nygate?lang=en Website: http://www.418sec.com/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Dr. Neil Costigan brings over 25 years of effective entrepreneurial and technical leadership in venture-backed startups and global technology corporations throughout the EU and US. Before BehavioSec, he built his career in software development, executive leadership, and entrepreneurship. The company’s Behavioral Biometrics platform is widely deployed across Global 2000 companies for its proven ability to dramatically reduce account fraud and data theft. Founded in 2008 out of groundbreaking academic research, BehavioSec technology allows companies to continuously verify digital identities with superior precision in real-time. Key Minutes 4:05 - How was BehavioSec started? 6:30 - What do you do? 12:30 - Raising capital 26:00 - Covid-19 decision making 30:28 - Predictions in cybersecurity 35:40 - Reaching the CISO as a cyber vendor 37:15 - What's next for BehavioSec? 39:00 - Ten Quick Fire Questions You can find Neil at: LinkedIn: https://www.linkedin.com/in/neilcostigan/ Website: https://www.behaviosec.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. We are joined by Brian Haugli, Co-Founder of SideChannel and #CISOlife. Brian is viewed as a "full stack CISO", an executive security leader and mentor focused on building high-performance security teams, deploying effective operating models, and delivering risk management capabilities for global, domestic, and local enterprises. Key Minutes: 4:17 - SideChannel 06:50 - Next steps for a CISO 09:32 - Expanding the company 16:38 - Selling to a CISO 26:50 - Transformation following Covid-19 34:40 - Third Party Risk 40:00 - How do you keep learning? 42:10 - Ten Quick Fire Questions You can find Brian at: LinkedIn: https://www.linkedin.com/in/brianhaugli/ Website: https://www.sidechannel.com YouTube: https://www.youtube.com/channel/UCtDlpJo3O8Z08mF_KoIkxWQ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. Today, we are joined by Anthony Johnson. Anthony has served as the Global CISO and Managing Director for multiple Fortune 100 companies, where he led some of the largest, most complex cybersecurity programs in the world. In addition to advising emerging and startup companies, Anthony is currently a Managing Partner at Delve Risk, where he leads a practice focused on driving technology and risk management transformation. Key Minutes: 3:55 - Diversity 6:40 - Delve Risk 13:55 - Supporting the security vendors 16:40 - Buying patterns following Covid-19 18:50 - The reporting lines for a CISO 21:22 - C-suite recognising the value of cybersecurity 23:12 - Are we prepared for risk? 26:20 - Changes following Covid-19 29:43 - Entrepreneurship for CISOs 32:35 - Limiting burnout 36:35 - Lessons from a start-up 42:55 - Biggest tips for anyone entering the security space 44:00 - Ten Quick Fire Questions You can find Anthony at: LinkedIn: https://www.linkedin.com/in/anthony-johnson-delverisk/ Website: http://www.delverisk.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. Today, we are joined by Nithin Thomas. He founded SQR Systems in 2010 with a platform to secure communication backbone that enables secure and compliant communications on apps and IoT sensors. He has established multiple R&D and commercial programmes and partnerships with the Ministry of Defence (UK), the US Department of Defense we well as intelligence and government agencies within the Five Eyes Community. Key Minutes 3:10 - Education 4:45 - Hearing cybersecurity for the first time 7:59 - The evolving of his company 10:08 - Standing out in a product heavy market 11:26 - Solving CISO’s pain 14:51 - Future risks 18:24 - Investing in a threat that doesn’t exist 21:49 - AI and Machine Learning in cybersecurity 22:54 - IoT and security 28:33 - Growing a start-up during the recession 31:48 - Learning to grow a business 35:30 - Keep learning You can find Nithin at: LinkedIn: https://www.linkedin.com/in/nithinthomas/ Website: https://www.SQRSystems.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. Today, we are joined by Thomas Croall. Thomas is the current Business Continuity and Resilience Manager for SkyScanner. Before this, he did a similar role at Bank of Scotland, Manchester City Council, HSBC, Atos and Tesco Bank. He also served in part of the resilience team that lead the 2012 Olympic and Paralympic Games in London. Key Minutes: 6:05 - Managing natural disasters 10:00 - Scenarios for stress testing 15:07 - Communicating during crisis 18:10 - The term business continuity 20:50 - How prepared are company’s? 24:55 - Protecting your revenues and ultimately your customers 28:20 - Standing out with customers 31:08 - Changes are coming 40:55 - Ten Quick Fire Questions Key Messages: Create scenarios to match the stresses of the real experience You have to maintain a relationship with your customers and employees during a crisis What are you going to do with your business model to be able to weather the storm? You can find Thomas at: LinkedIn: https://www.linkedin.com/in/tcroall/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. Today, we are joined by Kevin Cunningham. Kevin has over a decade of experience in business continuity, crisis management and disaster recovery for Equinix, NBC Universal, UBS and the New York City Emergency Management Department. Key Minutes 04:13 - Protecting revenue vs protecting people 05:41 - What does success look like during Covid-19? 14:36 - Who is accountable for this? 16:02 - Gaining attention within business continuity and crisis management 22:03 - Cybersecurity partnering with business continuity 28:24 - Location risk 31:55 - Investing in risk 33:57 - Advice for a career in business continuity 39:02 - Sharing information between organisations 40:27 - Ten Quick Fire Questions Key Quotes Companies have to deal with multiple emergencies or crisis’s in order to be able to be more effective Cybersecurity needs to be hand in hand with business continuity and crisis management Organisations need to invest in business continuity to mitigate the risk for the next pandemic. You can find Kevin at: LinkedIn: https://www.linkedin.com/in/kevin-cunningham-ms-cem-cbcp-6733768/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. Today, we are joined by Vicki Gavin. Vicki has been in business continuity, crisis management and cybersecurity since the early 90s. She has worked at organisations such as Barclays, the Economist and Kensington Mortgages. She is a public speaker and multi award winner within cybersecurity and crisis management. Key Minutes: 1:10 - Hearing about cybersecurity and business continuity for the first time 02:46 - Focusing on the responses 07:23 - Communicating bad messages with senior executives 17:04 - Falling apart under the pressure of a crisis 19:05 - Focusing on people and mental health within crisis management 22:20 - Covid-19 surprises 27:25 - The gap between cybersecurity and business continuity 34:38 - Dealing with new risks 37:44 - Skills gap in the industry 44:50 - Ten Quick Fire Questions Key Messages: What happens in an incident is never what is expected. You can never predict a black swan event. Don’t plan for the scenarios, plan for the impact. If you don’t do crisis exercise, you crisis team won’t be prepared. You can find Vicki at: LinkedIn: https://www.linkedin.com/in/vickigavin/?originalSubdomain=uk Twitter: https://twitter.com/vickigavin?lang=en Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. Today, we are joined by Michael Faber. Michael has been in business continuity, crisis management and operational risk since the early 90s. He has worked in financial services his entire career working at organisations like Norwich Union, JP Morgan, Schroders and TP ICAP. He is the past chairman of BSI committee responsible for the development of the first British Standard in Governance and the former vice-chairman of the European Institute of Governance Awards and the Institute of Operational Risk. Key Minutes 5:15 - New business as usual 11:50 - Business continuity with cybersecurity 19:20 - Budgets in business continuity planning 24:20 - Can we produce revenue from business continuity? 29:00 - The risks that we need to manage 31:45 - How will the financial services market move forwards from here? 36:50 - Brand reputation internally and externally 45:00 - Ten Quick Fire Questions Key Messages Bridging the gap of knowledge and language between the business and the cybersecurity and risk lines are crucial. Risk has two words inside it - threat and opportunity. We need to turn the word risk into the positive. We need to map end to end process of the services we provide, and make sure we manage the risk and impact to the customer. You can find Michael at: LinkedIn: https://www.linkedin.com/in/michaeljfaber/?locale=de_DE Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. Today, we are joined by James Green. James is Director, Risk Advisory Services at SAI Global. He is passionate about life safety and helps the C-Suite understand the importance of business continuity not just during an emergency, but as an integral part of day to day operations. He has worked on risk events that have occurred all over the globe, including civil unrest in Egypt during the Arab Spring, executive travel and protection in the Pacific Rim, and the effects of destructive tornadoes in Oklahoma. Key Minutes 02:30 - Your degree isn’t always what you do 03:45 - The first time hearing business continuity 07:30 - The focus of the risk that just happened 11:40 - How do you plan to prepare? 13:25 - We need to show more value to leadership 15:55 - Will companies invest? 18:02 - Who invested well before Covid-19? 22:42 - Connecting the dots in business continuity 26:50 - Has cybersecurity cost business continuity? 28:23 - Combining cybersecurity and business continuity 29:30 - Where does PR or marketing fit in? 33:25 - Cybersecurity during Covid-19 35:50 - What’s the predictions of change following Covid-19? 43:40 - Building a career path in risk or business continuity 46:10 - Ten Quick Fire Questions Key Messages 1. Working together including decision making is the critical deliverable within crisis management 2. Investments needs to be increased in risk mitigation and resiliency 3. The lines between risk, business continuity and cybersecurity are becoming tied together even more so during Covid-19 You can find James at: LinkedIn: https://www.linkedin.com/in/jamesegreen Blog: saiglobal.com/hub/authors/james-green SAI Global: https://saiglobal.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. Today, we are joined by Kitty Parry. Kitty is a serial entrepreneur with deep experience in the regulatory technology and finance. In 2014, Kitty was recognised as a Young Global Leader by the World Economic Forum for her entrepreneurial success. She is now Founder and CEO of DeepView, an enterprise cyber security software solution using AI to alert photo and video data leaks. The privacy-forward archiving solution allows regulated employees to safely and compliantly use encrypted chat channels e.g. WhatsApp for work chats. Key Minutes 05:57 - Young Global Leader 07:47 - The first time meeting cybersecurity 11:27 - Developing DeepView 15:36 - Getting companies to buy-in to you 17:55 - Two products that are a easy fit for company’s 20:44 - Covid-19 trends 24:23 - Standing out in the crowd 28:04 - Building start-ups with and without funding 28:17 - Moving to California 30:57 - UK vs US funding 33:13 - Taking investment at any stage 36:12 - The next few years within cybersecurity 38:25 - Ten Quick Fire Questions Key Takeaways 1. Personal social media is screaming out for management. 2. DeepView have built algorithms that recognise components within video and photo that could be data leakage 3. Organisations need to be privacy first. You can find Kitty and DeepView at: LinkedIn: https://www.linkedin.com/in/kittyparry/ DeepView: http://deepview.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and your host today is Karla Reffold. Today, we are joined by Noureen Njoroge. Noureen is a Security Consultant at Cisco Systems, her area of expertise is threat intelligence. She is the President of Women in Security for North Carolina and the Founder of the Mentor/Mentees Cybersecurity Group with over 4,000 members. Key Minutes 0:10 - Arriving in the USA 1:30 - Working at Cisco 4:00 - Entering cybersecurity from other markets 7:53 - Staying in touch during Covid-19 09:08 - Being a mentor 11:22 - Building to 4,000 members 12:38 - Growing the community further 17:15 - Diversity in cybersecurity 19:15 - Career Pathways in cybersecurity 21:38 - Plenty of resources for a career in cybersecurity 22:05 - Certifications in cybersecurity 24:30 - Managing your time to keep improving 26:30 - The importance of awards 28:15 - Threats in cybersecurity 31:20 - Changes in the industry 32:10 - Ten Quick Fire Questions Key Takeaways 1. Choose what you are passionate about 2. Pick your mentor wisely 3. There is not one path into cybersecurity You can find Noureen at: LinkedIn: https://www.linkedin.com/in/noureennjoroge/ WiCyS: http://wicys.org Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Today, we are joined by Naveen Vasadula. Naveen is an Information Security Risk professional with a strong financial services experience knowledge built over the past 23 years working in London, Paris, Zurich, Singapore, Hong Kong, and Japan. Covering a range of Global Senior Executive Management positions. Including Security Risk, Control and Compliance strategy, technical and Business Risk Assessments methodology and implementation, Process design, metrication and implementation, and global security consultation. Naveen is also one of the host of the Cyber Talks Interview series. Key Minutes 02:32 Education with dyslexia 05:32 First time hearing cybersecurity 08:10 Working in financial services 11:27 The dark side of the CISO role 18:12 Influence within your organisation 21:37 Getting business skills 26:02 Values of networking 33:12 The importance of mental health 40:32 The positives for cybersecurity following Covid-19 41:52 Ten quick fire questions Key Takeaways 1. Influence is everything. 2. Find a mentor or a leader to learn from 3. CISOs need to look after their physical and mental health. You can find Naveen at: Website: http://www.ciso-international.com/ LinkedIn: https://www.linkedin.com/in/vasudevanaveen/ CyberTalks: https://cybertalks.co.uk/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour podcast and I’m your host Karl Sharman. Today, we are joined by Christophe Foulon. Chris focuses on securing people and process with a solid understanding of the technology. He has over 10 years as an Information Security Manager and Cybersecurity Strategist with a passion for customer service, process improvement and information security. He has led teams over 30 people across multiple locations with significant experience in optimizing technology. After mainly being self-educated he has a masters degree in cybersecurity. As a career coach, Chris is passionate about helping others with their cybersecurity careers and Co-Hosts the Breaking into Cybersecurity podcast. Hope you enjoy. Key Minutes 01:58 - Growing up in the Caribbean 03:08 - A hands on experience to learning 07:10 - Hearing cybersecurity for the first time 09:58 - Making the transition into cybersecurity from IT 11:48 - How does having IT background help you within cybersecurity? 14:11 - Digital transformation within cybersecurity 16:38 - Communicating with the business 17:31 - Objectives as a consultant 18:20 - How cybersecurity can be enable digital transformation? 19:45 - What is cyber resilience? 22:59 - What is the important skill of working in the federal cybersecurity market? 24:31 - Key advice of breaking into cybersecurity 25:51 - Avoiding burnout in cybersecurity 27:33 - The importance of helping others 29:28 - Unusual paths into cybersecurity 31:06 - Being curious in cyber 32:33 - Thoughts on the future of cybersecurity 34:18 - Keeping up with trends 35:07 - Ten Quick Fire Questions Key Takeaways - Volunteer, help and ask to show your passion - Speak to the business in a language they can understand - Don’t come into this industry just for money You can find Chris at: Website: https://podcasts.apple.com/us/podcast/breaking-into-cybersecurity/id1463136698 Twitter: https://twitter.com/chris_foulon LinkedIn: https://www.linkedin.com/in/christophefoulon/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the ZeroHour Podcast and as I am starting a new podcast, your host today is one of the SC Magazines top 50 women in cybersecurity, its Karla Reffold. In today’s epsiode we are joined by Haydn Brooks. Haydn started in a big4 environment working in cyber risk mainly focusing on supply chain and third party security. The pain he saw and the difficulty clients were having drove him to co-found Risk Ledger. Now as CEO he developed the product through Cylon, the cybersecurity London accelerator and has now raised their initial venture capital investment to expand the product globally into the market. This exciting platform enables its customers to check security over their entire supply chains with minimal staff. In 2019, he was recognised as a Forbes 30 under 30 member. Key Minutes: 02:00 - Growing up in West London 02:40 - Education in biomedical science 03:55 - Risk Ledger 04:35 - Learning from KPMG and Deloitte 06:45 - The start-up and Venture Capital scene 07:55 - Using accelerators to progress 12:45 - Speak to your future customers 14:45 - Finding your co-founder 15:55 - Building trust with people 17:15 - Finding your hacking, hustler and hipster trio 20:15 - Raising your first round of investment 24:45 - What does the product solve? 29:15 - Future of supply chain security 34:05 - How do you reach c-suite level executives? 36:10 - Learning how to build a company 43:05 - Ten quick fire questions Key Takeaways: - 2/3 of data breaches happen through supply chains or third parties - Look for the right people with the right values - Practice your pitch more than you actually do your pitch - Learn as much as you can about running a business to provide confidence to investors - Don’t get a Titanic ringtone for a doorbell You can find Haydn at: LinkedIn: https://uk.linkedin.com/in/haydn-brooks Company Website: https://riskledger.com/company/about/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the ZeroHour Podcast and I’m your host Karl Sharman. Today we are joined by Ian Edwards. After leaving IT in 2017, he moved into Cybersecurity. After quick progressions, Ian was appointed as Information Security Manager for MEDICA Group in 2018 and leads the Information Security and Risk team, maintaining the Group’s information security and quality management systems and leading on risk management and cyber security strategy. In the relatively short space of time with the company Ian has driven a security transformation programme. Ian is also delivering a fresh and modern security awareness programme to further develop MEDICA’s ‘human firewall’. Key Minutes 2:55 Hearing cybersecurity for the first time 3:30 Working local over city life 5:00 Getting to Medicaid 5:38 Arriving on site for the first time 6:46 Reporting lines 08:09 Having oversight 09:07 Stepping up to manage 09:48 Challenges in management 10:44 Time being a key issue in security 11:48 Focusing on data protection as a business need 12:45 How you learn regulations? 14:32 How can Data Protection and Cybersecurity work together? 16:35 Mitigating supply chain risk 18:58 Communication with third parties 20:40 How do you get senior buy in from a technical perspective? 23:35 The importance of getting recognised through awards 27:35 Planning your career ahead 28:55 Prediction of industry changes 32:10 Challenges around recruitment 34:23 Ten Quick Fire Questions Key Findings - Smaller organisations can be behind the curve in data protection or Cybersecurity normally because they lack the expertise they require. - Reporting into the decision makers of the company is highly important to achieve success as a security department. - You have to focus your time on prioritising the business outcomes. You can find Ian at: LinkedIn: https://www.linkedin.com/in/iandvedwards/ Company Website: http://www.medicagroup.co.uk Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the ZeroHour Podcast and I’m your host Karl Sharman. Today we are joined by Lisa Ventura. Lisa is an inspiring woman in the industry of cybersecurity and was recently in the top 50 women of influence. Currently the CEO and Founder the Cybersecurity Association, Lisa has been through a lot of great and testing experiences in her life including autism. We run through her rollercoaster story till 2019 where she was the winner of “Cybersecurity Personality of the Year” at the Cyber Security Awards. Key Minutes 1:10 Lisa’s Italian heritage 2:45 Education in writing 4:30 Managing Chris Tarrant 7:20 Practising your negotiating 10:00 when did you first hear about cyber security? 11:50 your first role in the industry 14:58 Going through a divorce & multiple losses but still keep on track 18:00 getting diagnosed with autism 19:05 Moving past the mountains 21:50 managing your time in a challenging time 24:32 Focusing on cybersecurity within SME 26:20 Working for yourself within cyber security 28:15 Why is there momentum towards getting women in security? 31:15 how will publications, events and book help inclusion? 32:40 what can we do to help recruit more women? 34:28 what real initiatives can company do to enhance more women into security? 35:20 what one area would you focus on to improve participation? 36:20 Lisa’s new book 38:25 Getting diagnosed with Autism 42:40 Approaching social situations with autism 44:00 How should people change their approach to hiring when considering autism? 45:10 Linking autism to women in security through promotion 45:55 Not looking too far ahead 49:15 Quickfire questions Key Findings - More women need to come forward to share positive experiences to help get others into the industry - There is still such a head in the sand approach to cybersecurity - Getting the diagnosis of autism helped Lisa to handle her previous loss and challenges. You can find Lisa at: Personal Website: www.lisaventura.co.uk Company Website: https://cybersecurityassociation.co.uk Blog: www.cybergeekgirl.co.uk Lisa is also available at Twitter and LinkedIn Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Scott is the Senior Managing Director at Ankura Consulting Group and Co-Leader of the Risk Management Practice. His teams focus on the operational risk and resilience challenges of their clients in the areas of cybersecurity, business continuity and disaster recovery, and emergency and crisis management. They help clients understand their risk posture, improve their readiness, and become more resilient in the face of operational disruptions. Scott has previously held leadership roles with FTI Consulting & Risk Solutions International. Scott has worked with a variety of companies including Fortune 500 and mid-market companies in all sectors, government agencies and departments, airports, higher education institutions, and selected not-for-profits. KEY MINUTES 2:30 - from marketing to cyber 3:20 - the link from risk to resiliency 4:36 - Crisis management and continuity fitting into cyber 6:51 - Where are the issues? 12:33 - What’s driving motivations to improve cybersecurity? 18:35 - What is at the heart of most breaches? 22:14 - Third party risk to your organisation 25:35 - Focusing on how risk industries 35:10 - OT vs IT recruitment within cyber 39:55 - How do you make this all excitable? 44:45 - Mergers & Acquisitions with an impact to cyber 49:00 - Prioritising workload 56:35 - How do you know when you’re finished with a client? 61:25 - Choosing where you work? 64:25 - Being a consultant 66:01 - Getting into cybersecurity 68:40 - Ten quick fire questions THREE KEY TAKEAWAYS - Human beings still remain in being the leading cause for most incidents. - The buck stops at the board. The board doesn’t normally hire cyber articulate people which needs to change. - In M&A, speed of deal is leading executives to have blinders on & not assessing correctly. You can find Scott at: LinkedIn: https://www.linkedin.com/in/scott-corzine-0121ab/ Website: https://ankura.com/people/scott-corzine/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Douglas is the Vice President of Cyber Security Solutions at Special Counsel, an Adecco company. Douglas and his teams provide incident response, governance, compliance, and end-to-end preventative security solutions for clients across the globe. He is also the founder and host of Cyber Security Interviews. Douglas has previously held leadership roles with Kivu Consulting, Kraft Kennedy, and Duff & Phelps after founding cybersecurity and technology consulting firms over the past two decades. he has conducted hundreds of investigations involving data breaches, trade secret theft, insider threat, and a variety of other legal and compliance issues. KEY MINUTES 01:58 - Having parents working in consultancy 04:28 - Self Education 05:00 - First time finding cybersecurity 06:00 - Entering cybersecurity 08:00 - Difference between cyber investigations and incident response 09:28 - Where are the incidents coming from? 12:06 - Common mistakes from organisations 13:29 - Insider Threat 14:56 - Compliance landscape 16:04 - Step by step guide to handle an incident 20:33 - Speeding up detection 22:06 - Moving quickly but effectively through an incident 24:43 - Limiting damage to organisations 28:23 - Disruption of new communication and storage technologies 31:18 - Pressure from Consumers, regulators and investors 33:13 - The meaning of cybersecurity 34:23 - Making security more transparent 36:03 - Dealing with the evolving threat 37:53 - Coming out of your comfort zone 40:11 - Learn as much as you can 42:29 - Ten quick fire questions THREE KEY TAKEAWAYS - A lot of organisations feel if they don’t see a problem it doesn’t exist. - You have to know you are going to have an incident so you need to prepare your people for it - Organisations are not taking the time when doing cloud implementation to build in security or even an incident response process. You can find Doug at: LinkedIn: https://www.linkedin.com/in/douglasabrush/ Website: https://cybersecurityinterviews.com/ Podcast: https://cybersecurityinterviews.com/episodes/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour Podcast and I’m your host Karl Sharman. Today we are joined by Allan Alford. Allan is Chief Information Security Officer (CISO) at Mitel, previously CISO at Forcepoint and CISO at Polycom. With 30 years’ experience in IT and Engineering, Alford has a long history with product security as well, having served as Pearson’s Product Information Security Officer (PISO), and as Sr. Director of Product Security at Polycom. KEY MINUTES 2:20 - Things are not stable for the adults 3:30 - Attending Harvard while at high school 6:55 - Working to pay for your education 8:20 - What cybersecurity means? 9:50 - Making the transition from IT to Cyber 10:58 - Making the transition from Product Security to CISO 12:25 - Picking the right and best products 14:38 - Cloud Security Transformation 16:04 - Being in the role of the CISO 16:53 - The first 90 days in being a new CISO 19:57 - Communicating with board & C-Suite 22:01 - Using metrics to deliver your budget 24:10 - Moving away from security being seen as a cost centre 26:30 - People first approach 29:25 - Choosing Mitel 30:55 - Branding Mitel in the cybersecurity industry 32:00 - Constantly learning 34:28 - Standing out as a vendor 38:20 - Out of your comfort zone 39:50 - Advice for individuals starting in the industry Three key takeaways - Educate and train your team - Never stay still, keep evolving - Find the business need first You can find Allan at: LinkedIn: https://www.linkedin.com/in/allanalford/ Website: https://allanalford.com/about Podcast: https://podcasts.apple.com/no/podcast/defense-in-depth/id1450197741 Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Welcome to the latest episode of the Zero Hour Podcast and I’m your host Karl Sharman. Today we are joined by Tony Cole. Tony is a veteran within cybersecurity having served in senior positions at Symantec, McAfee and FireEye over a 30 year career. Tony is now the CTO for Attivo Networks, the award-winning leader in deception for cybersecurity threat detection as well as serving as a member of the NASA Advisory Council. Key Minutes: 3:30 First time hearing about cybersecurity 4:20 What does it mean to work in cyber? 5:26 Working for FireEye, McAfee & Symantec 12:27 Now CTO at Attivo, who & why? 14:00 Delivering strategy 15:30 Countering threat 16:55 The meaning of adversary 20:45 Leading with Threat Intelligence 21:57 Prevention or Detection? 24:08 Active Cyber Defense 25:50 It won’t happen to me 27:25 Countering the evolving threat 29:20 Increasing budgets within cybersecurity 31:32 What is deception? 34:55 Finding room for regulations 36:14 Relating to nation state risks 39:40 Being a target in the Pentagon 45:40 Being a leading figure within cybersecurity 45:38 The best advice for a person coming into cybersecurity 51:50 Ten Quick Fire Questions Key Points - An adversary focus can help us rebuild our security to ensure that even if they get in they are not successful - Make the adversary work harder to achieve their goals or make it difficult enough where they go after someone else instead. - It will happen to you, and it’s more likely happened to you already, as you have been focused on prevention over detection. You can find Tony at: LinkedIn: https://www.linkedin.com/in/wmtonycole/ Twitter: https://twitter.com/NoHackn Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Partha is the Director of Infrastructure Security Architecture at Bank of Montreal. Partha last week left Insurance company Guardian Life for a new exciting challenge at BMO in New York! Partha has worked at major organisations such as Bank of America and JP Morgan all within cyber security architecture, engineering and strategy. He has two Masters of Science within Technology and Cyber Security. Key Minutes 03:10 - Getting into cybersecurity 04:20 - Why engineering & architecture 05:30 - Definition of Cybersecurity & AAA 08:02 - Goal of Architecture 10:42 - Changing cybersecurity architecture 15:50 - How do you work across a large organisation to impact risk? 19:00 - Banking to Insurance 21:35 - Linking strategy to architecture 23:30 - Prioritising what needs to be worked on 25:21 - Managing a large number of customers for architecture 27:20 - Implementing new technologies like Cloud 28:22 - What do you class as a strong security framework? 29:50 - Biggest challenges 31:45 - What is your recommendation in securing funding for new roles or technologies? 34:30 - What advice would you give to people looking to get into cybersecurity? 37:00 - 10 Quick Fire Questions Key Points - AAA within cybersecurity: Awareness, agility & advanced technology - Be close to the business - Always plan and prioritise You can find Partha at: LinkedIn: https://www.linkedin.com/in/parthasarathi-chakraborty-baa24810/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Nic is currently Head of Platform Engineering and Devops at Virgin Atlantic Airways. Nic started out as a chemistry teacher in the mid-nineties. Experimenting with designing molecular modelling webpages for his students led him to switch into a career in Technology in 2000. He has worked across the development life cycle as a coder, a project and portfolio manager, a technical trainer, a solution and enterprise architect and in various delivery and operations leadership roles. He has worked in many industries including Manufacturing, Insurance, Film, Visual Effects and Broadcast. Key Minutes 15:00 - Why Virgin? 17:00 - The Virgin Brand and the people 18:15 - Leading Devops 20:00 - Why choose devops within transformation? 23:00 - Why was devops a better way to go for Virgin? 25:05 - Changing mindsets 33:00 - Delivering to the executives or the leadership team 39:55 - How a Third party supplier needs to act? 44:00 - Are you more Dev or more ops? 46:30 - Getting your hands dirty 48:40 - Multi-delivering for success 54:00 - Regular conversations with the business 57:20 - The type of person you would hire 58:30 - Ten quick fire questions Key Points - What should be consistent through any team or delivery is trust. - Put security throughout the whole project - Technology has to be delivering for the business. You can find Nic at: LinkedIn: https://www.linkedin.com/in/nic-whittaker-33a63a3/?originalSubdomain=uk Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.beechermadden.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Thomas has more than 25 years of experience, he has a unique view on enterprise security with experience across multiple domains from policy and risk management, secure development and enterprise incident response and forensics. Thomas has held roles varying from a security architect for a large fortune 500 company to consultant for both industry vendors and consulting organizations. He is an active participant in the InfoSec Community including being a director of Security BSides London. Key Minutes: 2:35 Meeting Cyber Security for the first time 3:57 What is cyber security to you? 5:55 Individuals leading to the biggest threat 9:15 The most common threats 11:55 Will the threats go away? 13:00 How can we keep moving forwards to protect ourselves? 14:55 What is the main objective of any attack? 16:40 The more innovation is leaving us open to risk 20:15 How do we make the business aware of the risk? 24:00 What changes if you are communicating threats to the business? 27:07 Finding vulnerabilities in the business 28:14 What tools can be used to support this? 31:48 Managing the threat 33:52 How can individuals protect theirselves from the threats? 35:23 What about events, can they lead to cyber attacks? 37:53 Who will win hackers or organisations? 39:45 Ten Quick Fire Questions Key Points: - Security has to be an enabler - An individual can be as destructive as a group - You need talented staff to protect the business - We can be in a better place by solving the simple issue. You can find Thomas at: Twitter: @fvt Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Tim is an award-winning C-Suite senior leader and champion of harnessing data to improve business outcomes. He is a strong believer in the power of the data narrative and the art of story-telling to enhance Board-level insight and in the need to bring data into the heart of the business. He was the British Army’s first Chief Data Officer and Chief Analytics Officer, before founding Ensifera Limited, a consultancy specialising in data, leadership and transformation. He was recently supporting Southern Water, as Head of Data Transformation. Key Minutes: 02:25 - Learning in the environment of the Army 03:10 - Transitioning into Data 07:40 - How do you embed a vision with the use of data? 09:25 - Driving insight 11:10 - Is the success of an outcome linked to data? 13:00 - What data can be used? 15:10 - Financial value in ALL data 17:50 - Delivering the message up to board level 20:00 - Culture 22:00 - Being a leader in the data world 27:10 - How Important are people with this? 30:05 - Recruiting similar to you 31:15 - The gap between business and technology 34:15 - How do you build a data culture? 37:30 - The implementation of GDPR 39:00 - What’s been Tim’s biggest success? 40:15 - Ten quick fire questions Key Points: - You can link data together to provide better outcomes - It allows organisations to make better decisions throughout the processes - Guessing can lead to a more harmful culture You can find Tim at: LinkedIn: https://www.linkedin.com/in/tim-carmichael-link/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Ben is CTO and cofounder of Obsidian Security. He previously cofounded Carbon Black and most recently served as the company's chief security strategist. He has also has been a lecturer at University of Chicago’s Masters Program in Computer Science and a cybersecurity specialist at the National Security Agency (NSA) as well as serving on the board of a variety of security companies. Key Minutes 1:30 The first time Ben heard of Cyber Security 4:00 What does cyber security mean to you? 6:40 Starting Carbon Black 9:15 Carbon Black reaching a global audience 10:58 Staying in front of your competitors 13:00 Why did you leave Carbon Black? 14:47 Starting Obsidian Security 19:45 What’s unique about Obsidian? 24:17 Being a CTO 27:40 Learning from previous lessons 31:42 Hiring strategy 35:27 Retaining high level talent 38:48 Standing out from the crowd 42:27 Democratising cyber security 54:30 Biggest tips for founders or entrepreneurs 56:30 Ten Quick Fire Questions Key Points - Take the approach of people first - If you have 100 employees, that 100 people increases the risk because they are human - When hiring we emphasis culture fit. You have to focus on character. - If we don't retain our staff, its because we haven't created the right environment You can find: Conor on LinkedIn at: www.linkedin.com/in/conordsherman Obsidian on Twitter at: @obsidiansec Ben on Twitter at: @chicagoben Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Conor is currently VP of Security at Clear after recently leaving Apollo Global Management as Director of Cyber Security. Conor has successfully built, redesigned, and reinvigorated cyber security programs for fast paced, high performing companies. By leveraging security orchestration and automation (SOAR), and machine learning techniques, Conor delivers highly effective Security Operation Centers (SOCs), Threat Intelligence and hunting capabilities. The programs are aligned with business objectives, and bring exponential threat reduction with incremental investment. He takes a “hands on” leadership style and builds programs with a first principles mindset following the Agile methodology. Key minutes 07:25 - What Cyber Security Means 08:30 - Defining Confidence 10:30 - Why would a organisation spend more on Cyber Security? 17:50 - How would you go out and assess vulnerabilities within an organisation? 22:15 - Would knowing your vulnerabilities help organisations move forwards 23:50 - The difference between a SOC and a threat intelligence program 27:00 - External vs internal threats 30:10 - Implementing these into any organisation 35:00 - The difference between a threat intelligence and threat hunter program 38:40 - Selecting the right vendors 44:25 - How long does it to build a program? 46:00 - What does success look like? 49:10 - Building the next generation of Investigation centres Key Points - Everything with Cyber Security has to bring integrity, trust and confidence - Security needs to be integrated within everything from day one - Threat intelligence is your lead indicator of an attack. SOC is your response. Threat hunting is you being pro-active before an attack has or is about to happen. You can find: Conor on LinkedIn at: https://www.linkedin.com/in/conordsherman Conor on Twitter at: https://twitter.com/conordsherman?lang=en Conor on Medium at: https://medium.com/@ConorDSherman Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Mike Spain is an innovation and growth expert and neurodiversity advocate in the cyber sector with excellent links across UK Government, industry and academia. He is a driven, adaptable and innovative leader with influence at senior government and C-level industry. His leadership of diverse multi-organisational teams in complex and challenging environments consistently delivers measurable benefit. Mike has over 10 years consulting experience across a variety of sectors including cyber, defence and government. He leads the operations of Cyber Growth Partnership and Cyber Exchange initiative, working passionately to enable growth of the UK cyber sector and development of a sustainable UK cyber ecosystem. Key points: - A diverse team could lead up to 50% greater performance, which would make any board sit up and listen. - Neurodiversity will add another pool of talent that people may not be accessing when there is a skill shortage. - We need to make sure that neurodiverse personal get access to an industry that actually has access like every other industry Key minutes: 11:05: What is neurodiversity 13:10: Common barriers in the workplace 15:00: How to approach job listings 18:30: Coordinating at national level 20:15: How can recruiters do more to make this more accessible? 23:00: How can individuals improve the cyber security eco system? 25:20: Neurodiversity and cyber security in the future You can find: Mike at: https://www.linkedin.com/in/mike-spain-14a07b3/ Cyber Exchange at: https://cyberexchange.uk.net Cyber Growth Partnership at: https://www.techuk.org/about/our-staff/programmes/item/3438-mike-spain Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Chris Baynham-Hughes is the UK Head of DevOps & Redhat Emerging Technology at ATOS. His background is in software delivery, business transformation, process re-engineering, practice management and business strategy. Chris works with clients to deliver solutions that not only transform delivery capability, but also set a sustained culture of relentless improvement. When Chris is not undertaking adventures in DevOps Chris is usually found running and swimming around the mountains. Key points: - Achieve the balance of both cultural and technological change required to maximise ROI - Recognise, address and solve business problems - Focus activities on pain points rather than ‘DevOps by numbers’ Key minutes: 5:30 emerging Technolgoies 8:00 first leadership role 12:30 measuring happiness in your team 16:00 what is Devops 20:00 Open shift containers 24:30 Procurement/Vendors 28:00 Benefits to the business for implementing Devops 45:00 Helping implement cultures 50:00 Emerging technologies in transformation 59:30 A high performing team 01:10:30 Ten Quick Fire Questions Find Chris's work at: https://atos.net/en/expert/chris-baynham-hughes Twitter: https://twitter.com/OnlyChrisBH LinkedIn: https://www.linkedin.com/in/chrisbh/?trk=hp-identity-name Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Dan Raywood is the contributing editor of Infosecurity Magazine. He has written about IT security since 2008, having spent five years as news editor of SC Magazine, 20 months as Editor of IT Security Guru and six months as an Analyst in the Information Security Practice at 451 Research. He has spoken at 44CON, SecuriTay, SteelCon and Infosecurity Europe, as well as writing for a number of vendor blogs and presenting on webcasts. Key points: - To get ahead, you need mentors; - Hiring is key as you will hire the people to enable the technologies to work; - Accepting cybersecurity risk for the business is a huge step forwards Key minutes: 1:40 - Why Dan got into journalism 6:00 - Starting in information security 8:45 - Connections over knowledge 10:00 - Breaking big news in Cyber Security 15:00 - State of Cyber Security 17:00 - Trends in Cyber Security 20:00 - GDPR 23:45 - Predictions for Cyber Security 29:40 - How do we improve the state of security? 30:30 - Next big topic in cyber security 32:20 - Objectives of a journalist 33:30 - Top ten questions You can view the report here: https://www.infosecurityeurope.com/__novadocuments/484123?v=636650221535700000 You can reach InfoSec at: https://www.infosecurityeurope.com/about/ Their new North American conference: https://www.infosecuritynorthamerica.com/ Find Dan Raywood's work at: https://www.infosecurity-magazine.com/profile/dan-raywood-1/ Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
We are joined by Christian Toon at InfoSec Europe 2018. Welcome to the latest episode of the Zero Hour Podcast and I’m your host Karl Sharman. Christian Toon, is the CISO at Pinsent Masons. Christian has spent the last 14 years successfully disrupting traditional approaches to information protection and management for large international organisations. From a career in end user security, moved into Big 4 Consulting to build a practice around ‘CISO for Hire’ services that involved engagements with financial and insurance services clients. Leaving PwC after nearly 3 years, joined Pinsent Masons to lead their information protection strategy across a firm of over 3200 employees around the globe. Three takeaways: - Make a lot of noise, to create disruption. - Hire on behaviour. - Behaviour and experience will go a lot further than qualifications. Key Minutes: 1:40 - Meeting Security 2:45 - Passion for Security 5:30 - Disrupting the industry 7:30 - Information Risk Sharing 12:30 - Law Sector 14:00 - People not in security 15:15 - There is no skills gap 20:00 - Team building exercises 20:20 - Recruiting on behaviour over skills 22:50 - Tom Langford 23:30 - Taking a wider approach 25:20 - Retaining talent 30:20 - Biggest tip for recruitment Connect with Christian on LinkedIn or Twitter. Connect with Pinsent Masons at: www.pinsentmasons.com Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Simon is the Co-Founder & Managing Director of Hut Six Security; a start-up creating a comprehensive solution to human error in information security. Simon works closely with clients consulting on their security awareness needs and designing specific and customised campaigns. I'm not sure if you can tell but Simon and I had this discussion at InfoSec Europe 2018! Three takeaways: - Human factor in security is a massive issue with no complete solution yet; - There's not going to be one solution as there's no one approach or similar situations in every organisation; - When building training programmes, customise them for each individual, role and outcome - also make them engaging! Connect with Hut Six Security on their website: www.hutsix.io Find them on Twitter: @hutsixsecurity Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
We are joined by Daniel Ng at InfoSec Europe 2018. Daniel is the CEO of Cyber Owl - a system that provides early warnings from cyber attacks. Dan spent ten years at KPMG before Cyber Owl and is also the Chair of the Working Group at the IoT Security Foundation, a non profit working towards establishing principles and improving capability globally for security. Three takeaways: - You never stop learning. - You need to be harder to breach than the next person/organisation. - The risk profile sets out the resources required. Connect with CyberOwl on website: www.cyberowl.io Email CyberOwl at: info@cyberowl.io Follow us: Twitter: @zero_hourpod Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Richard Merrygold is the Director of Group Data Protection at HomeServe. He is responsible for the protection of data across the European and UK business. He has recently developed and implemented a group wide privacy framework in preparation for GDPR covering all aspects of compliance for over 4 million customers. Three takeaways: - There is no difference between Information Security, Data Protection, Data Privacy and Data Security - they are a combination. - GDPR is a fantastic opportunity to provide a better relationship and insight into your customers. - GDPR will more likely lower your costs and drive up revenue. Follow Richard on Twitter: @RichMerrygold Connect with Richard on LinkedIn: https://www.linkedin.com/in/richard-merrygold-7856847/ Follow us: Twitter: @zerohour Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Karla Reffold is an experienced and passionate recruitment business owner, having set up BeecherMadden over 6 years ago. In October, she successfully sold her company to the global recruitment company, Nicoll Curtin - although she is still the CEO. Despite the tests of being a single parent to two young children, her corporate governance and cyber security recruitment company operates in UK, Europe and US. As well as this she has recently been recognised as a contributor for Forbes and a judge for the Cyber Security Awards in London. Three takeaways: - Transition people from relevant sectors where people have the soft skills required to be successful - Money isn't everything - Build your network Find Karla on LinkedIn: https://uk.linkedin.com/in/karlajobling & at Forbes: www.forbes.com/sites/forbeshumanresourcescouncil/people/karlareffold/#608939103b9c Follow us: Twitter: @zerohour Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com
Zane Lackey is the co-founder and Chief Security Officer at Signal Sciences and serves on the advisory boards of the Internet Bug Bounty Program and the US State Department backed Open Technology Fund. Prior to Signal Sciences, Zane was the Director of Security Engineering at Etsy and a Senior Security Consultant at ISec Partners. He has been featured by BBC, Forbes and Wired. As well as a frequent speaker at BlackHat, RSA and Microsoft BlueHat. Three takeways: - Cyber Security is a business risk - Security isn't the winner, the business is - Implement security at the heart of every transformation Follow Zane on Twitter: @zanelackey Read Zane's thoughts: https://medium.com/@zanelackey Follow us: Twitter: @zerohour Instagram: @zerohourexperience Website: www.karlsharman.com This podcast is sponsored by: BeecherMadden - www.beechermadden.com Cyber Security Professionals - www.cybersecurity-professionals.com