Careers Information Security Podcast

Careers Information Security Podcast

By CareersInfoSecurity.comBusinessTechnology
Download on the App Store

Careers Information Security Podcast episodes

  • Meeting the Security Standard: The Business Benefits of ISO 27001 Certification
    Interview with Mark Bernard of Credit Union Central of British Columbia

    We first met Mark Bernard last fall. The Security & Privacy Officer at Credit Union Central of British Columbia, Mark discussed risk management and the process of becoming ISO 27001 Certified.

    Today, Mark's credit union is the first financial institution to achieve ISO 27001 certification. Listen to this interview for his insights on:

    • What it means to be ISO 27001 certified;
  • How the institution has changed as a result;
  • Potential payoffs for your institution if you follow this same path.
    • 0 min
  • Offshore Outsourcing: Challenges and Benefits
    Interview with Philip Alexander, Information Security Officer

    Offshore outsourcing - it's a topic that stirs great debate among banking/security leaders. Proponents tout the potential cost-savings and easy access to top talent. Opponents point to cultural, infrastructural and, yes, security concerns inherent in offshore partnerships.

    Listen to this interview for insights from Philip Alexander, information security officer at a major financial institution - and an offshore outsourcing veteran. In a preview of his new webinar, Offshore Outsourcing: Do You Know Where Your Data is and How it's Managed?, Alexander discusses:

    • Benefits of offshoring;
  • Unique challenges;
  • Advice to banking/security leaders venturing offshore for the first time.
    • 0 min
  • Security Awareness: How to Create an Effective Program for Employees
    MaryAnne MacIntosh of Nu Union Credit Union Discusses Her Growing Initiative

    Security awareness is a key topic - for financial institution employees and customers alike.

    At Nu Union Credit Union in Lansing, Mich., MaryAnne MacIntosh oversees a program that educates everyone from the board of directors to customer service reps. And her program has not only changed the security environment within the credit union branches, but also has altered how employees approach security in their private lives. Listen to this podcast for insights on:

    • How she created this program;
  • Elements of security awareness;
  • Challenges in delivering the training;
  • What's next?
    • 0 min
  • Stephen Katz on Top InfoSec Issues of 2008
    Banking/Security Expert Shares Insights on Red Flags, Vendor Management, Other Key Challenges Facing Institutions

    He was the world's first Chief Information Security Officer at Citigroup in 1995, and for over 25 years he has been a true banking/security leader.

    Stephen Katz, founder and President of Security Risk Solutions, an information security company providing consulting and advisory services, sat down with Editor Tom Field to discuss the major issues facing banking institutions in 2008.

    Listen to this interview to hear his insights on:

    • ID Theft Red Flags - are institutions giving it enough attention?
  • Vendor Management - the need to improve oversight of vendors and their vendors;
  • Governance - what works, what still needs work;
  • Pandemic preparation;
  • Many other top issues.
    • 0 min
  • Lane Gittins on Security Management: Leading the Virtual Team
    Institutions of all sizes struggle with staffing resources - having enough hands available to tend to information security matters. At America First Credit Union in Riverdale, Utah, Lane Gittins, the Systems Security Manager, has learned to overcome this challenge by working in a consultative style - directing a cross-functional team whose members come from across the institution and don't all report to him. Listen to this interview for insights on:
    • How to establish a virtual team;
  • Creating a culture of security awareness;
  • Successes to target and challenges to avoid;
  • Tips to lead a virtual team in your institution.
    • 0 min
  • Effective Privacy and Compliance Programs
    Ken Baylor, Information Security Consultant and former Chief Information Security and Privacy Officer, Symantec

    Dr. Ken Baylor is a senior Information Security adviser to Fortune 500 companies. He is the current president of the Silicon Valley chapter of ISACA. Dr. Baylor recently served as Symantec's Chief Information Security Officer (CISO), is a CISSP, and a CISM. As CISO, he was responsible for developing all information systems security policies, overseeing the implementation of all security related policies and procedures, and for the global protection of electronic and digital assets. He also worked closely with internal product groups on security capabilities in Symantec products, and heads the Information Security department.

    Baylor shares his extensive experience as he discusses the development of effective privacy and compliance programs. Listeners will learn:

    ¢ Steps to develop effective compliance programs;


    ¢ Why 90% of privacy breaches happen inside your firewall;

    ¢ Impact of EU privacy laws on privacy management;

    ¢ What makes an effective privacy policy.

    0 min
  • John Pironti of Getronics on: Leading-Edge Risk Management Practices
    John Pironti discusses the fundamental steps that a financial organization must take to design an effective risk management program. He emphasizes the danger of focusing on the technology, instead of on the data flows in an organization. In this interview, you will learn strategies to minimize your risk from data leakage while building a robust risk management program. You also will learn:

    • The importance of business process mapping
  • Questions to ask 3rd party vendors to reduce your risk
  • How to utilize IT governance practices to help minimize your risk
    • 0 min
  • Risk Management and ISO 27001 Certification - Mark Bernard, Credit Union Central, B.C.
    Mark Bernard is the Security & Privacy Officer at Credit Union Central of British Columbia. In this podcast he talks about risk management and ISO 27001 Certification

    Mark Bernard has extensive experience in the IT security industry, both in the US and Canada. He is currently the Security and Privacy Officer for the Credit Union Central of B.C., and is leading the credit union to become the first financial institution to achieve ISO 27001 certification. Mark has a reputation for improving organizational security without increasing costs or adding layers of controls.

    During this podcast Mark discusses:

    -- How to manage a risk management program in a way that does not increase costs but adds to your organization's security

    -- What ISO 27001 certification entails and the benefits to your bank or credit union

    -- Why ISO 270001 certification can actually save you money

    -- The essential business skills that allow a security manager to excel

    0 min
  • Debbie Wheeler, CISO of Fifth Third Bank: Effective Risk Management
    The Information Security Media Group podcast with Debbie Wheeler, CISO of Fifth Third Bank focuses on the role of effective risk management for IT security and data leakage prevention.

    Debbie Wheeler, CISO of Fifth Third Bank discusses recent challenges and changes in the banking community. She highlights provisioning and options for preventing data leakage. The discussion includes how the role of the CISO is to overcome organizational resistance, and she also provides career advice for women in information security.

    · Their strategy for addressing data loss and leakage


    · Cost of adopting bleeding edge technologies

    · Why they offered a "business of banking class" to their IT staff

    · Aligning your controls to your actual level of risk

    0 min
  • Mark Lobel of Price Waterhouse Coopers: Update on Recent Information Security Trends
    In this Information Security Media Group podcast Mark Lobel of PriceWaterhouseCoopers speaks to our audience and updates on recent trends in info security and the importance of effective benchmarking.

    Mark Lobel is a nationally known expert in information security who leads the PriceWaterhouseCoopers annual survey of Information Security trends. This podcast summarizes his latest findings regarding changing threats, convergence of security functions, and why despite a decrease in certain attacks many organizations are unable to know what is happening on their networks. He also discusses the importance of benchmarking and the components of effective metrics and benchmarking programs.

    The importance of actionable information and use of Security Information Management systems

    Changes in information security convergence and its return to an IT focus

    What factors predict fewer breaches and lower downtime

    Why many firms admit they really don't know what is occurring on their networks

    0 min

About Careers Information Security Podcast

From the publisher's feed

Exclusive, insightful audio interviews by our staff with careers/security leading practitioners and thought-leaders. Transcripts are also available on our site!