PODCAST

Security Insights

securityinsights

A podcast that takes a deeper look at today’s most important issues in cyber security, and beyond.

technology

All Episodes

29:55

Mind games: the psychology of cybersecurity

Security Insights ·

2024/08/15

How important is human behaviour in cybersecurity? How well do we know our people, and do we understand the risks posed by individuals' actions?Research suggests that the overwhelming majority of cyber breaches start with human error or poor practice. But despite investments in security training and security awareness, we still make mistakes. Over the next three episodes, we will examine some of the human factors around cybersecurity, including human risk management, and how we change

29:55

AI: chatbots, cut and paste, and data leaks

Security Insights ·

2024/08/01

Our guest for this episode is Tim Freestone, of Kiteworks. He’s a long-standing expert in data protection and data privacy. And he's been following the growth of AI, and what it means for data privacy, security and confidentiality.Even data specialists have been surprised by the rapid take up of generative AI and its benefits. But do we have the measure in place to guard against the potential security risks it brings? It is not just malicious hackers who make AI tools such as chatbots a risk. Even

29:55

IT, OT, and CNI: a hidden threat?

Security Insights ·

2024/07/19

Any advanced economy relies on the smooth running of its infrastucture.And whether it’s transport, logistics, healthcare, the banking system, manufacturing – even food production – industrial and operational systems are what keeps it all running. Those systems are now being targeted by malicious actors. Both state-sponsored and criminal groups are looking closely at operational technology and industrial systems. Recent research suggests that many, if not most, of the groups attacking critical

29:40

Ransomware: can transparency bring security?

Security Insights ·

2024/07/05

It's hard to put an exact figure on ransomware attacks. All the available research shows incidents continue to grow year on year, and that the vast majority of cyber incidents are now ransomware or other extortion attacks.But could more transparency and information sharing help defend against ransomware? If more organisations disclosed attacks, we would have a clearer picture of the problem and be able to respond more quicky to new techniques or attack vectors. That's the argument put forward by

29:55

Cyber war: new lessons from history?

Security Insights ·

2024/06/20

The idea of cyber war is not new; researchers first suggested the concept 30 years ago.Since then, there's been a debate on what cyber war means and what can be done to prevent it. Some experts even suggest cyber war is already happening, even if it is mostly in the shadows. For Peter Kestner, the rise of cyber attacks and an increasingly volatile geopolitical situation were just two of the reasons to examine cyber warfare in more detail. Peter is both a keen student of history, and a cybersecurity

29:50

A CISO's Journey: Mani Nagothu, SentinelOne

Security Insights ·

2024/06/06

The CISO’s role is changing; that is clear enough.Indeed, constant change and the need to adapt is always a feature of cybersecurity. And that’s why our guest this week lists curiosity as one of the key attributes for a cybersecurity career. Mani Nagothu is field CISO at SentinelOne. Before that she headed up IT security for an energy company. That followed a career as a consultant. But she didn’t start out in cybersecurity, but as an engineer. And the CISO’s role itself is becoming less technical,

29:25

Cyber on demand: filling the skills gap?

Security Insights ·

2024/05/23

The cybersecurity skills gap is a problem that won't go away.Worldwide, there are close to 3.5 million vacancies in the industry. The problem seems to be worsening, not least because we are all doing more business online. And moves to recruit and retain more staff, as well as to widen the talent pool, take time. In the immediate term this leaves CISOs with gaps to fill. One option is outsourcing. Another is to use “on demand” cyber specialists. But how do these options work with building larger and

31:25

Chief Business Security Officers: a CISO's new ally?

Security Insights ·

2024/05/09

What is a chief business security officer, and what do they do? IT and data security are increasingly important. But so too are physical security and resilience. The chief business security officer, though, is a fairly new addition to the security team. Over the next three episodes of the Security Insights podcast, we’ll look at the changing role of the CISO, the role interim or outsourced security professionals can play in plugging the skills gap. We’ll cover the role of interim and virtual CISOs,

29:55

Ransomware: should payments be banned?

Security Insights ·

2024/04/25

Ransomware now accounts for the vast majority of cyber attacks.But regulators and law makers are increasingly concerned about the money being paid out to ransomware groups -- often, it is used to fund further crime. Should paying ransoms be banned? Would a ban improve security, or make matters worse? And what steps can organisations take, to cut the risk of falling victim to a ransomware attack in the first place? Our guest this week is Ian Thornton Trump, CISO at Cyjax. He believes that calls to

36:39

Cloud security: an identity problem

Security Insights ·

2024/04/04

In this episode, we look at why a lack of robust identity controls are one of the biggest causes of cloud security failures.Cloud operators, at least the larger ones, now have robust security in place. But that security is there, first and foremost, to protect their business. The "shared responsibility model" means that users are responsible for their data and applications. The problem, as our guest this week identifies, is that senior managers fail to understand that point, and expect the cloud to

37:11

The end of passwords?

Security Insights ·

2024/03/21

Are passwords now a security risk? And if they no longer work, what should replace them?In this episode, we speak to https://www.linkedin.com/in/johncapps/ at VIDA Digital Identify, and Ev Kontsevoy, CEO of infrastructure access firm Teleport. They argue that relying on "secrets" and data to prove identity no longer guarantees security. Alternatives, including zero trust, hold out a lot of promise. But moving to zero trust needs the whole organisation behind it -- it's as much about culture as

29:45

Critical National Infrastructure: changing threats

Security Insights ·

2024/03/07

How are the threats to critical national infrastructure evolving, and how do we counter them?And are we seeing a shift from attacks based on data and ransomware, towards disruption. In this episode, we welcome back a previous guest, Trevor Dearing. Trevor is Director of Critical Infrastructure at Illumio. Trevor’s work is increasingly focused on resilience, and helping organisations to survive and recover from attacks. We discuss how organisations in the CNI space need to improve their ability to

27:26

DORA: one year to go

Security Insights ·

2024/02/22

The EU’s Digital Operational Resilience Act, or DORA, comes into force in January 2025. So there is not much time for affected organisations to prepare.DORA sets out to improve cybersecurity — or ICT risk management — across the EU’s financial services sector. The Act covers both regulated firms and what the EU terms “critical third parties” in their supply chains. In fact managing third party risk is a big part of DORA, along with measures such as improved resilience testing, incident management

28:55

Cyber governance: a new UK code of practice?

Security Insights ·

2024/02/08

The UK Government's Department of Science, Innovation and Technology (DSIT) is consulting on a new code of practice for business leaders, which aims to "improve cyber resilience across the UK economy". But how will this operate, and will another code of practice -- alongside a host of existing laws and industry regulations -- help organisations be more secure? We discuss this with our guest Amanda Finch, CEO of the Chartered Institute of Information Security. Listeners can find out more about the

27:55

Web apps and security weaknesses

Security Insights ·

2024/01/25

As many as a third of serious vulnerabilities could be in web applications. But securing web apps, APIs and web-based interfaces is a challenge. In this episode, we look at why vulnerabilities have seen a steady uptick over the last few years, how identifying and securing vital web applications is essential to enterprise security, and why a fixation on technical CVEs does little to boost defences. Plus, why both security pros and reporters like a pie analogy. Our guest is Alex Kreilein, vice

29:55

Security in 2024: AI, skills, and a seat on the board

Security Insights ·

2024/01/11

What are the key security challenges for 2024? And how will CISOs address them? In our first episode for Series 5, Security Insights is joined again by Chris Dimitriadis, Chief Global Strategy Officer at ISACA. He explains why AI both poses risks, and offers benefits, why the cyber skills shortage is not going away, and how cybersecurity's voice needs to be heard by the board. Interview by Stephen Pritchard.

28:24

Security Insights: 2023 year in review

Security Insights ·

2023/12/28

In our final episode of this season, and indeed for this year, we look at some of the key trends in cybersecurity during 2023. And we discuss some of the steps CISOs might need to take, to safeguard their organisations in 2024. Our special guest is the CEO of the Chartered Institute of Information Security (CIISec), Amanda Finch.

29:55

Cyber: crime’s digital economy

Security Insights ·

2023/12/14

Nothing seems able to stop the growth of cybercrime. And ransomware, above all, has woken up boards to the threat. But there is more to cybercrime than ransomware, and the drivers behind online crime are varied too. And the scale of the problem means that few, if any, organisations can tackle it alone. Our guest this week is security expert, chief scientist at Rapid 7 and Europol EC3 adviser Raj Samani. He talks to Stephen Pritchard about why cybercrime is far more than an IT security issue, and why

29:55

Quantum computing: a security risk?

Security Insights ·

2023/11/30

Could quantum computing threaten our day to day security, and even the fabric of the internet? Researchers are increasingly concerned about the risks quantum technology poses to encryption. Organisations need to act now, if they are they are to secure their data and their operations, argue this week's guests. Ramy Shelbaya is CEO and co-founder of Quantum Dice. That’s a business spun out of Oxford university’s quantum optics lab – and which is now using quantum mechanics to create a self-certifying

29:55

The Cyber Resilience Act: a law with unintended...

Security Insights ·

2023/11/16

The upcoming European Cyber Resilience Act sets out to boost security for anything with “digital elements”. The Act will apply to hardware and software. The idea is to make it easier to update devices, and to fix any vulnerabilities. Why, then, has a group of cyber security professionals written an open letter to the European Commission asking them to change a key part of the proposed rules? Experts are concerned that, by requiring organisations to disclose vulnerabilities within 24 hours, the Act

150 results

Security Insights

All Episodes

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs