Caffeinated Risk

Co-author of the original book on Enterprise Security Risk Management, it only made sense to have Rachelle be the first Caffeinated Risk guest.  Like many guests, there was just too much material for a 30 minute episode. This espresso shot encore digs into that nuanced  topic of truly partnering with business stakeholders. 
 

Anyone with a bit of time in the security industry is well acquainted with Murphy's law but  crisis management specialists are who you call when things suddenly get very real.  While common security guidance advocates protection,  readying your organization to weather the inevitable failure in prevention measures starts with resilience.

international crisis management thought leader  Alexandra Hoffman and 2022 IFSEC Global Influencer and Meta's head of Global Security Protective Intelligence Tim Wenzel  dive deep into what resilience really means at the organizational level.

Security folks are fond of saying "it's not if but when ...", listen in to learn  more about how to prepare your organization for that eventuality from those who have been there with some of the biggest companies in the world. 

Recorded two days after the July 2022  nationwide telecom outage,  co-hosts Tim and Doug explore the deeper ramifications of losing access to the very services that are so tightly integrated into our lifestyle.  While the complete root cause of the Rogers' outage may never be publicly shared, most organizations face similar constraints, leading to a discussion about ethics and our shared commitment to the common good.

Documents referenced in the show:
ACM Code of Ethics
Energy sector asset management

Sooner or later every risk management professional faces the hard reality that comprehensive risk management programs can't be implemented on spreadsheets. A corporate vice president mandate, minus the funding, started Josh Sokol on  a journey that turned his initial platform solution into an opensource project that morphed into a commercial venture. 

While meeting the risk management and compliance needs of organizations large and small, the Simple Risk founder remains committed to a practical  approach for stewarding cyber security issues and mentoring the next generation of security professionals. 

This episode explores the true GRC platform needs -- not the marketing -- and the cyber security executive's role in enterprise risk management.  

   

Chief Information Security Officer Martin Dinel has all the same technology challenges of every other large organization. Placing Alberta in front of that CISO title brings the additional requirements of protecting government secrets, interfacing with national security, protecting financial and health information of more than 4 million people as well as the infrastructure of a province almost the size of Texas. 

Mr. Dinel shares some innovative ideas for sourcing and retaining talent,  observations on how the education system needs to change and his vision for turning Alberta into a cyber security center of excellence. 

Very few organizations, from three letter agencies to the local brew pub are not using cloud services to some degree and those previously resistant had no choice once Covid 19 hit. In 2022, with global conflict, organized crime,  multiple supply chain and service concerns, what is required of a security professional responsible for navigating  risk for their enterprise which invariably includes "Cloud"?

Illena Armstrong, president of the Cloud Security Alliance, shares her insights on these challenges, honing in on key considerations for both organizations and the information technology industry as a whole.  A business first, strategist and advisor,  Ms. Armstrong was previously Editor in Chief, and VP of Editorial for SC Magazine, exploring cyber security issues across the globe for more than a decade, interviewing industry leaders before CISO was even a title. 

Acknowledged by IT World  Canada as one of the top 20 women in cyber, Cara  Wolf shares insights into the Canadian tech industry , the need for innovation and tactics for drawing senior leadership's attention to cyber security issues during a candid discussion on the changing aspects of cyber crime . Long before cyber crime was a mainstream concept Ms. Wolf was a seasoned fraud investigator with American Express travel, setting the stage for a number of entrepreneurial  ventures combining technology and risk management.  Cara Wolf's  latest company,  Ammolite Analytx specializes in complex information security problems and threat centric solutions, whether those threats are physical, cyber or a hybrid.  

The threat landscape is evolving, if your security controls are not, the outcome is all but assured.

In this episode Tim and Doug are joined by Canadian cyber security serial entrepreneur Ian Paterson, CEO of Plurilock. Mr. Paterson shares hard won insights from extensive data science research and development , how this intelligence enables continuous monitoring to be applied to a technology stack and bring organizations closer to a zero trust model. 

Ian's wealth of experience in the Canadian cyber security industry also opened up  discussions about startups,  staffing and the commercial cyber security industry, some of which, due to time limits, will appear in espresso shot bonus episodes in the future.

A light hearted espresso shot with renowned information security writer Winn Schwartau and Tim McCreight discussing the serious and all too common problem of uncontrolled ingress and egress.

While the first electronic firewalls may have come into vogue in the late 80's, Winn and Tim uncover parallels with perimeter security developed in the middles ages.  

An espresso shot covering a great idea Dave Tyson originally shared in his book and discussed during  our 2021 interview on identifying where security can contribute to the business value chain and some strategies for selling the benefits.  

With thought leaders like Dave there are many more insights than time in each monthly episode, so in 2022 we'll be combing through older interviews and sharing previously unpublished interview content in smaller 5-8 minute blocks.  These short excerpts will be released periodically in between the monthly full episodes.