Security Insights

securityinsights
  • 0.0 (0)
  • TECHNOLOGY
  • EVERY TWO WEEKS
Security Insights Podcast

A podcast that takes a deeper look at today’s most important issues in cyber security, and beyond.

  1. 12 SEPT

    Cyber escape rooms - and experiential learning

    Conventional security training leaves a lot to be desired. So what can CISOs do, to deliver training and security awareness in a way that is effective, and engaging? Over the last few episodes we've discussed both the psychology, and human factors, around cybersecurity. To finish the series, in this programme we will look at experiential learning, or learning by doing. Our guest is Amy Stokes-Waters. She delivers exactly that, by running escape rooms for organisations who want to improve security awareness, but want to move away from slide-heavy courses, and checkbox compliance. She's also written a paper on experiential learning in cybersecurity. But does it work? She discusses cyber escape rooms, learning theory, and the pros and cons of measurement with editor Stephen Pritchard.

    29 min

  2. 30 AUG

    Human Risk Management: tackling cybersecurity's weak spot

    How do we manage the risks posed by human behaviour? In this, the second of our short series exploring the links between human behaviour and security, we look at the emerging field of human risk management. The statistics are quite frightening: 90 per cent of security breaches involve human error or social engineering. But how do we, at a business level, categorise those risks? If we don’t understand the risks, we can’t reduce them. A better understanding of where the risks are – and which behaviours are risky – makes it easier to design counter measures, such as training. Our guests this week are Lev Lesokhin and Charlotte Jupp, of OutThink – an firm that’s pioneering human risk management. We discuss what human risk management involves, and how security teams can make use of it, without crossing privacy boundaries.

    30 min

  3. 15 AUG

    Mind games: the psychology of cybersecurity

    How important is human behaviour in cybersecurity? How well do we know our people, and do we understand the risks posed by individuals' actions? Research suggests that the overwhelming majority of cyber breaches start with human error or poor practice. But despite investments in security training and security awareness, we still make mistakes. Over the next three episodes, we will examine some of the human factors around cybersecurity, including human risk management, and how we change behaviour. We'll start the series by looking at the psychology of cybersecurity, as well as how to measure change. Our guest is Dr Thea Mannix, a neuroscientist and head of research at Praxis Security Labs

    30 min

  4. 1 AUG

    AI: chatbots, cut and paste, and data leaks

    Our guest for this episode is Tim Freestone, of Kiteworks. He’s a long-standing expert in data protection and data privacy. And he's been following the growth of AI, and what it means for data privacy, security and confidentiality. Even data specialists have been surprised by the rapid take up of generative AI and its benefits. But do we have the measure in place to guard against the potential security risks it brings? It is not just malicious hackers who make AI tools such as chatbots a risk. Even something as simple as pasting information into a generative AI tool can cause problems. And he argues that we need to apply security's zero trust approach to AI too. Interview by Stephen Pritchard

    30 min

  5. 19 JUL

    IT, OT, and CNI: a hidden threat?

    Any advanced economy relies on the smooth running of its infrastucture. And whether it’s transport, logistics, healthcare, the banking system, manufacturing – even food production – industrial and operational systems are what keeps it all running. Those systems are now being targeted by malicious actors. Both state-sponsored and criminal groups are looking closely at operational technology and industrial systems. Recent research suggests that many, if not most, of the groups attacking critical national infrastructure are linked to national intelligence agencies. And that raises some difficult questions about how both businesses, and their governments, should respond. Our guest is Mark Magpie Graham, technical director for threat intelligence at Dragos, who carried out the research.

    30 min

  6. 5 JUL

    Ransomware: can transparency bring security?

    It's hard to put an exact figure on ransomware attacks. All the available research shows incidents continue to grow year on year, and that the vast majority of cyber incidents are now ransomware or other extortion attacks. But could more transparency and information sharing help defend against ransomware? If more organisations disclosed attacks, we would have a clearer picture of the problem and be able to respond more quicky to new techniques or attack vectors. That's the argument put forward by this week's guest. Sabeen Malik is vice president of global government affairs and public policy at Rapid7. She has put together a ransomware disclosure framework, based around the "3 Cs" of capabilities, context, and collective action. She tells Stephen Pritchard how it works, and why it could help.

    30 min

  7. 20 JUN

    Cyber war: new lessons from history?

    The idea of cyber war is not new; researchers first suggested the concept 30 years ago. Since then, there's been a debate on what cyber war means and what can be done to prevent it. Some experts even suggest cyber war is already happening, even if it is mostly in the shadows. For Peter Kestner, the rise of cyber attacks and an increasingly volatile geopolitical situation were just two of the reasons to examine cyber warfare in more detail. Peter is both a keen student of history, and a cybersecurity professional with over 25 years' experience in consulting in the sector. He decided to combine the two interests, and the result is his new book, "The Art of Cyber Warfare". Peter believes that by looking into conflicts in the past, we can learn valuable lessons about how warfare, and especially cyber warfare, might develop. But history can also teach us how to improve our defences, against adversaries who are as comfortable attacking civilian as government or military targets. Please note this episode contains some stronger than usual language.

    30 min

  8. 6 JUN

    A CISO's Journey: Mani Nagothu, SentinelOne

    The CISO’s role is changing; that is clear enough. Indeed, constant change and the need to adapt is always a feature of cybersecurity. And that’s why our guest this week lists curiosity as one of the key attributes for a cybersecurity career. Mani Nagothu is field CISO at SentinelOne. Before that she headed up IT security for an energy company. That followed a career as a consultant. But she didn’t start out in cybersecurity, but as an engineer. And the CISO’s role itself is becoming less technical, and more business focused, she says. In this episode Mani talks to Stephen Pritchard about her career so far, what it takes to be successful as a CISO, and why greater diversity is the key to strengthening our security teams, and so our defences.

    30 min
See All (100)

About

A podcast that takes a deeper look at today’s most important issues in cyber security, and beyond.

Information

  • Creator
    securityinsights
  • Years Active
    2020 - 2024
  • Episodes
    100
  • Rating
    Explicit
  • Copyright
    © Copyright 2020 All rights reserved.
  • Show Website
    Security Insights

To listen to explicit episodes, sign in.

Stay up to date with this show

Sign in or sign up to follow shows, save episodes and get the latest updates.
Select a country or region

Africa, Middle East, and India

Asia Pacific

Europe

Latin America and the Caribbean

The United States and Canada