In this episode of Behave, host Munya Hoto welcomes Alison Crockford, the Information Security Senior Adviser at Euroclear, for an insightful discussion about the world of information security and the challenges of building a security culture within organizations.

Alison shares her diverse career journey, from running nightclubs to working at Apple, to her current role in information security. Her experience in communications roles and obtaining a master's in organizational culture and behavior further equipped her to bridge the gap between psychology, technology, and cybersecurity.

The conversation delves into Alison's day-to-day activities as an information security senior adviser, emphasizing the importance of building secure thinking, understanding security culture, and the shift from compliance-driven metrics to a focus on positive behavior change metrics. The discussion also touches on the proliferation of AI in technology and the challenges this brings in terms of governance and security within organizations.

Alison’s LinkedIn: https://www.linkedin.com/in/alisoncrockford

Today, we are joined once again by Janet Roberts, Former Global Head of Security, Education, and Awareness for Zurich Insurance.

Janet's fascinating career journey, which began in journalism and included stints in media relations and paralegal work, eventually led her to the dynamic field of security awareness, even though it was initially only supposed to occupy 10% of her time in a domestic U.S. insurance company.

Today, Janet and Joe look at the Gartner Report into CISO Foundations Building a Culture of Security Consciousness. Throughout their discussion, they challenge the notion that security awareness is limited to phishing exercises and annual training. Janet highlighted the need for a broader range of metrics that go beyond click rates to measure behavioral change effectively.
Localization and cultural considerations in security awareness, vendor partnerships, and long-term strategies for building security awareness programs are discussed.

Janet’s Instagram: https://www.instagram.com/janetroberts77/ 

Report: https://www.gartner.com/en/doc/773138-ciso-foundations-build-a-culture-of-security-consciousness-introducing-the-gartner-pipe-framework

Today Munya is joined by Mora Durante Astrada, the LatAm lead at Zurich Insurance and an accomplished security consultant.

Mora's captivating journey began in her native Argentina, where her background in journalism and communication led her to the intriguing intersection of security and human behavior.

In this insightful conversation, Mora shares her experiences and expertise, emphasizing the importance of bridging the gap between global security strategies and localized implementation. She highlights the challenges of tailoring security awareness programs to different Latin American countries, each with its unique culture and language nuances. Mora underlines the significance of making security content relatable and accessible, particularly for non-technical audiences.

Mora’s LinkedIn: https://www.linkedin.com/in/moraduranteastrada/

In this engaging episode, Munya is joined by Yanya Viskovich, a Senior Manager of Security Consulting at Accenture.

Yanya's unconventional journey into the cybersecurity realm, starting from a legal background and traversing international roles, brought a unique perspective to the discussion. She began her career as a criminal prosecutor and later moved on to the United Nations and the International Committee of the Red Cross, then to her current role at Accenture in Switzerland, where she focuses on human factors in security.

The conversation took a fascinating turn towards the critical issue of burnout culture in the cybersecurity industry. Yanya shares her personal experience with burnout and highlighted the alarming statistics surrounding this problem. Together they discuss the organizational and cultural factors contributing to burnout, emphasizing the importance of psychological safety and a just culture in mitigating the issue.

Yanya’s LinkedIn: https://www.linkedin.com/in/cyberaware-yv/?originalSubdomain=ch

In this week’s episode, host Joe Giddens sits down with Julie Haney, the program lead at the US National Institute of Standards and Technology (NIST), to discuss the recent Gartner report, “Security Awareness Efforts Fall Short. Now What?”

Julie and Joe delve into the challenges faced by security professionals running programs and the mounting urgency to measure program effectiveness.

Julie’s LinkedIn: https://www.linkedin.com/in/julie-haney-037449119/

In this episode of the Behave Podcast, host Munya is joined by Dr. Daniel Shore and Zac Broomfield, co-founders of MultiTeam Solutions. 

The discussion revolves around their unique journey into the world of cybersecurity and team dynamics, highlighting the critical need for psychological safety within cybersecurity ecosystems.

They stress the need for proactive measures to foster connections, empathy, and understanding among cybersecurity professionals. The conversation highlights that cybersecurity success hinges on human behavior and teamwork, advocating for a shift from compliance-driven approaches to a culture of psychological safety. By prioritizing this, MultiTeam Solutions aims to transform organizations, bridging the gap between cybersecurity and team dynamics for enhanced resilience and innovation.

In today’s episode of Behave, Munya Hoto, VP of Marketing at CybSafe speaks with Security Expert, Mo Amin.

Mo is recognized as an authority in the security industry with an extensive career spanning nearly 20 years. His journey into the security field began in helpdesk and desktop support roles, gradually moving into security investigations and forensics, with this exposure to the human side of security, particularly user understanding and behavior, igniting his interest in security culture.

The conversation revolves around the evolution of security culture, human risk management, and the challenges of building effective security awareness programs within organizations. They touch on the changing landscape of security awareness training, and the shift toward understanding the importance of measuring and influencing behaviors, ultimately leading to the concept of human risk management.

In this episode, Munya has an insightful conversation with Ash Hunt, current Global Chief Information Security Officer (CISO) at Apex Group.

Ash has worked extensively across UK Government departments, FTSE/FORBES organizations, and Critical National Infrastructure (CNI), in addition to authoring the UK’s first quantitative framework and actuarial model for information risk. He has also served as a media commentator for Sky News & ITV on cyber security issues.

He is currently the Global Chief Information Security Officer (CISO) at Apex Group Ltd — a global, top-tier independent service provider operating from over 80 offices in more than 40 markets worldwide, with over 10,000 employees.

Today, they discuss what Ash has found in terms of the ineffective practices in Information Security, how he approaches risk management, as well as how many industries aren’t moving rapidly enough toward the human risk elements of security.

To learn more about Ash, head to his LinkedIn page: https://www.linkedin.com/in/ashjhunt/?originalSubdomain=uk

In this episode of Behave, Ben is joined by Dr. Jason Nurse, Director of Science and Research at CybSafe.

With a long career of research in the space, Dr Nurse explores the interdisciplinary nature of cybersecurity, privacy, and trust, especially considering the impact of new technologies on these areas.

Today, Ben and Jason have an in-depth discussion around how leadership, policies, training, and change can affect a security culture, what questions SebDB can answer, and the two way relationship between change and your company’s security culture.

To learn more about Jason, head to his LinkedIn page here: https://www.linkedin.com/in/jasonrcnurse/

On this episode of Behave, Munya sits down with Stephen Middleton, Information Security Officer at EMR.

With 20 years in the IT world, starting with an IT Helpdesk role straight out of college, Stephen has seen the changes to the industry and has wide exposure to the many corners of the IT world, including project management, product management QA, testing, and more.

Today, they discuss how Stephen approaches the many changes we see year after year - from the hygiene of security to how teaching real-world examples outside of a work environment can help employees truly understand the importance of security when online in any capacity.

They also explore how an open and inviting mental health culture can influence employees to carry this honesty and understanding into their work in cybersecurity, as well as the IT Apprenticeship program headed by Stephen.

Connect with Stephen on LinkedIn here: https://www.linkedin.com/in/middletonstephen/?originalSubdomain=uk