Cyber security in the workplace has become increasingly important as more organisations migrate to digital and the cloud. With the adoption of digital channels growing exponentially across all sectors, so too has the number of high profile data breaches and ransomware attacks.

As regulators and auditors seek evidence of security awareness activities, organisations are under enormous pressure to proactively protect their people, reputation, and valuable assets. Still, many cyber security awareness initiatives fall flat due to a lack of engagement from end users.

To efficiently and effectively build a highly skilled workforce that is prepared to address cyber threats in complex enterprise environments, it is vital to consider security awareness training as more than a compliance checkbox exercise.

This podcast will discuss:

-Best practices for next-generation training

-Taking a targeted, tailored approach to security awareness training

-Building momentum for an awareness campaign and avoiding user fatigue

-Analysing your audience to create an awareness campaign that resonates

-Making your cyber awareness program relatable for your employees

In today’s complex business environment, organisations need to be able to respond rapidly to any changes and adapt policies where necessary.

The only way to adapt to the dynamic, disrupted, and distributed nature of business is to be agile. This requires organisations to have an agile policy management program in place so they can react quickly to changes in risks, regulations, strategy, processes, roles, and responsibilities.

An effective policy management program will provide a framework of governance, identify risks, define compliance, and play a crucial role in organisational success. It should also engage staff and clarify the standards of what is expected of them.

The podcast will explore:

• How to monitor the internal and external environment for changes that impact policy.

• Key steps to defining a policy management program that is agile and dynamic to the needs of the business.

• Engaging employees on policies to ensure they know what is expected of them.

• How to ensure policies are being followed and aligned with the needs of the business.

The aftermath of a cyber attack can be chaotic

An incident response plan enables organisations to detect, contain, eradicate, and recover from an attack effectively, without chaos. By reinstating normal operations as quickly as possible, organisations can limit the damage when an attack occurs.

This podcast will discuss:

• The digital challenges that organisations are facing today

• Training people to recognise and respond to a cyber incident

• Accountability after a cyber attack

• Failing to plan is planning to fail

• How organisations can learn from security incidents

Special guest: Sarah Armstrong-Smith, Microsoft Chief Security Advisor

Despite increased investment in cyber security initiatives, organisations continue to be impacted by cyber attacks. Almost all successful breaches share one variable in common: human error.

The reality is organisations face a very real danger of threat from within.Against the backdrop of a complex cyber threat landscape, the insider threat has intensified as working practices have evolved and cybercriminals launch increasingly sophisticated attacks.

The mitigation of human-born error is key to reducing cyber risk in an organisation and a proactive approach to prevent employee-related threats has never been more important.

This podcast will discuss:

• Why people are at the centre of cyber security threats

• How hackers exploit people for their own gain

• Tactics to improve employee engagement in Security Awareness Training

• The CISO’s challenge in creating a cyber secure workforce

Special guest: Jenny Radcliffe, People Hacker and Social Engineer