Today we are joined by Paula Cizek, Chief Research Officer at Nobl, where she guides leaders and teams through the change management process, from assessing the organization’s readiness for change to implementing initiatives. In this episode, we explore the fascinating topic of Corporate Change and how its lessons can be applied to cybersecurity.

In the vast ocean of the corporate world, change is as constant as the tides. It can be exhilarating for some and daunting for others. As leaders, we often stand at the helm, eager to navigate new courses. Yet, we must remember, that not all aboard share the same vision or enthusiasm for these uncharted waters.

Why is it scary for many? How do leaders balance the excitement of innovation with the practicalities and emotions of their teams? We’ll explore the dichotomy of change - the loss and the gain, the risk and the reward.

We'll unpack the layers of change management, from the first ripples of a new idea within the executive team to the waves it creates throughout an organization. How do we bring everyone on deck, giving them the time to adjust their sails and embrace the journey?

We'll also navigate the treacherous waters of resistance. Not every objection is an excuse, and sometimes, they signal hidden icebergs. How do we, as leaders, distinguish between the two?

So, tighten your lifejackets and get ready to dive into the deep end of transformation. In this episode “Shift Happens: The Art of Navigating the Seas of Cyber Change”.

————

In this Episode we cover:

Why there’s such a gap between the exec team and boots on the ground when it comes to accepting and being excited by change

The difference between “Fail Safe” and “Safe to Fail” changes and projects

Why we should Start with the Skateboard

That not every objection to change is an excuse

How to communicate change effectively

Being comfortable with being uncomfortable when it comes to negotiation

Why Risk and Uncertainty are different beasts

——————

Links to everything we discussed in this episode can be found in the show notes and if you liked the show, please do leave us a review.

Follow us on all good podcasting platforms and via our YouTube channel, and don't forget to share on LinkedIn and in your teams.

It really helps us spread the word and get high-quality guests, on future episodes. 

We hope you enjoyed this episode - See you next time, keep secure, and don’t forget to ask yourself, ‘Am I the compromising position here?’

Keywords: Cybersecurity, Cyber threats, Change management, Organisational, transformation, Risk management, Innovation, and Leadership

SHOW NOTES

Find them here

ABOUT PAULA CIZEK

Paula Cizek is the Chief Research Officer of NOBL, where she guides organizations through large-scale transformation. A thought leader in change management and change resistance, she specializes in translating complex concepts into simple, practical tactics that deliver immediate and meaningful change.

Before joining NOBL, she was Innovation Manager at the IPG Media Lab, advising brand and media clients on emerging technology. Prior to that, she was Senior Innovation Consultant at Mandalah, where she led consumer behavior and brand strategy research for brands around the world. She's worked with a diverse roster of clients including Warner Bros., Chanel, Capital One, Bayer Pharmaceuticals, Airbnb, Chipotle, Grupo Bimbo, and more, and she's been published or quoted in publications like BrandingMag and Women's Wear Daily. She graduated from Georgetown University, majoring in Marketing and International Business.

LINKS FOR Paula Cizek

Paula’s LinkedIn

NOBL

Welcome to the third part of our AI mini-series.

In this episode, Jeff and Lianne discuss how AI is transforming the world of cybersecurity, and what you need to know to stay ahead of the curve.

They share their personal experiences with using AI tools, such as the custom GPT suite and the tool they are creating, Security Sage, to enhance their security practices and workflows.

They also explore the challenges and risks that AI poses to cybersecurity, such as phishing, vishing, OSINT, data leaks, and model inversion attacks.

They offer some practical advice on how to use AI safely and responsibly, and how to leverage it to become a better cybersecurity professional.

In this Episode we cover:

How AI is democratizing and disrupting the field of cybersecurity

How to use prompt engineering to get the best out of AI models

How to protect yourself and your organization from AI-enabled cyberattacks

How to use AI to improve your cybersecurity function and become an ally and enabler for your business

How to keep up with the latest developments and trends in AI and cybersecurity

—————————————————————————————————————————————————————

Check out the rest of the AI mini-series by visiting our YouTube page or wherever you listen to your podcasts!

Links to everything we discussed in this episode can be found in the show notes and if you liked the show, please do leave us a review.

Follow us on all good podcasting platforms and via our YouTube channel, and don't forget to share on LinkedIn and in your teams.

It really helps us spread the word and get high-quality guests, on future episodes. 

We hope you enjoyed this episode - See you next time, keep secure, and don’t forget to ask yourself, ‘Am I the compromising position here?’ 

Show Notes

What is the Metaverse, Exactly? Wired

AI Winter: The Highs and Lows of Artificial Intelligence. History of Data Science

Over 84% of us are using AI - Jeff got this stat from here

Midjourney

Google Deep Dream

Weird DALL.E

Open AI’s Custom GPT Suite

Jeff and Lianne’s talk on Product Security which includes lots of insight on threat modelling, attack tress and abuser stories

Recommended Coursera Course for CHATGPT Prompt engineering

Helena Hill’s Episode

ChatGPT will provide more detailed and accurate responses if you pretend to tip it, according to a new study. Windows Central.

Report that suggests the younger generation are more permissive with their data and privacy. Cybsafe.

Hear Lianne and Jeff talk about AI at the Future of Cybersecurity Conference in Manchester on 8th February 2024

Microsoft’s Harms Modelling

AI Daily Breakdown

AI Gaming

The Royal Institution Christmas Lectures on AI

About Lianne Potter

As the Head of SecOps for the largest greenfield technology transformation project in Europe, Lianne is building a leading edge security team from scratch to meet the needs of a modern retail organisation while empowering her team to think innovatively to create new standards in best practices.

Lianne has delivered talks across the globe to share her vision for a new type of security function.

Drawing upon her expertise as a cyber-anthropologist (through her consultancy, The Anthrosecurist), her practical experience as a security-focused software developer and as a security practitioner; Lianne combines the human and the technical aspects of security to evangelise a cultural security transformation.

She is on the advisory board for a community enterprise aimed at encouraging diversity in tech, is a published author, podcast regular and Host of Cybersecurity Podcast Compromising Positions, and won Computing.com’s Security Specialist of the Year for her work on human-centric approaches to security.

In 2021 she won two awards for Security Leader of the Year 2021 and Woman of the Year in the Enterprise category and in 2023 she won Cyber Personality of the Year in The Real Cyber Awards.

She is doing a Masters in AI and Data Science in 2024.

LINKS FOR LIANNE

LinkedIn

Compromising Positions Podcast

ABOUT JEFF WATKINS

Jeff is Chief Product and Technology Officer for xDesign.

He is a lifelong technologist with nearly 25 years’ experience in the industry, first having started coding at age 6.

Having worked in the Financial Services, Healthcare and Retail industries, on enterprise and national scale programmes.

Over the years he has become increasingly interested in Cybersecurity and AI and how both will shape our future, both technologically and the human impact.

Jeff has founded multiple CyberSecurity teams and is currently working on several new pieces around the secure development and deployment of Generative AI based solutions.

He is a tech blogger, writer, podcaster and host of Compromising Positions and public speaker, having recently keynote at the Webinale international web conference in Berlin.

Jeff has a Masters in Cybersecurity and will be starting his Masters in AI and Data Science in 2024.

LINKS FOR JEFF

Linkedin

Compromising Positions Podcast

Keywords: AI, Cybersecurity, Threat Modelling, Prompt Engineering, AI Attacks, Human Risk, Data Leaks, Model Inversion, AI Education, Podcast

No episode this week!

We’re back to finish off our AI mini-series on the 4th January where your hosts, Jeff Watkins and Lianne Potter discuss how they utilise AI in their work as cybersecurity and tech specialists, their own hints and tips on how to get the best out of the tool, and their predictions for AI usage within the security field in 2024.

If you’re missing your Compromising positions fix, why not visit our back catalogue of 13 fantastic episodes, or watch our festival special, The 12 Days of Breachmas for short, bursts of sweet cybersecurity content!

Links in the show notes and see you next Thursday!

Show Notes

Watch our 12 Days of Breachmas to Tide you over until next Thursday!

Listen to our back catalogue on YouTube, Spotify, or Apple Podcasts

Welcome to the second part of our AI mini-series.

Last week, Helena Hill, UX and AI expert provided us with some great practical advice on how to navigate Large language models like ChatGPT in our daily work.

She gave us ideas for usage and also what we should be wary of both from a cybersecurity perspective and a quality perspective. See the show notes for a link to that episode, it is a must-listen if you’re interested in this topic!

As we’ve been talking to our guests this year, the topic of  AI and chatgpt came up several times and It quickly became apparent that their insights deserved a standalone episode. So we’ve been snipping them out of the main episodes to bring you, in the tradition of a season-based show, a lovely clip show! You’ll hear some familiar voices from season 1 and a few that will be joining us next year for future seasons. 

Enjoy five hot takes on AI from five very interesting people!

——————————————————————————

In this Episode we cover:

In a knowledge economy, is it ethically right to pass off LLMs output as our own?

Should we ban our employees from using tools like ChatGPT because of cybersecurity concerns?

AI is only as good as the data is built upon - so not very good according to data analysts worried about bias!

Will AI replace customer service reps?

And what companies are putting AI on the risk register?

——————————————————————————

Join us next week for our final episode of 2023 and last in our AI special where your hosts, Jeff Watkins and Lianne Potter discuss how they’ve been using AI in cybersecurity and beyond.

Links to everything we discussed in this episode can be found in the show notes and if you liked the show, please do leave us a review.

Follow us on all good podcasting platforms and via our YouTube channel, and don't forget to share on LinkedIn and in your teams.

It really helps us spread the word and get high-quality guests, on future episodes. 

We hope you enjoyed this episode - See you next time, keep secure, and don’t forget to ask yourself, ‘Am I the compromising position here?’

Show Notes

Helena Hill’s Episode onHow to use ChatGPT and AI to Level UP your Cybersecurity Function

Reema Vadoliya’s Episode on If Data is the New Oil, How do we Prevent Data Spills

Christian Hunt’s Episode on The Human OS - Why We Can’t Just CTRL + ALT + Delete Our Compliance Problems

This week we are joined by Helena Hill, a seasoned UX Strategist and Consultant and AI expert with a wealth of experience spanning diverse clients, from pre-start-ups to global industry giants.

Last week Helena taught us how we in the cybersecurity team can effectively use the User experience team, and its principles to improve our security controls and create a better journey. If you’ve not listened to that episode yet, do check it out. 

This episode we’re asking Helena about her other expertise in AI and how cybersecurity teams can use tools like ChatGPT to make our lives easier

We’ll touch upon cybersecurity concerns around AI, but mostly this will be a practical episode on how to get the most out of these exciting tools.

This episode concludes season 1 and we’d like to say a huge thank you to everyone who has supported this journey, either by just listening, sharing, subscribing, leaving a review or providing feedback. 

We can’t thank you enough for lending your ears and your thoughts on this rather unusual approach to talking about cybersecurity by only speaking to non-cybersecurity professionals! 

And of course, a huge thank you to all our kind guests who have been so generous with their time and expertise. But this is not the end of compromising positions! We have enough episodes already recorded to last us well into summer next year and we intend to keep bring you fantastic guests and new insights for all of 2024. 

We’re going to a few weeks off in January but you won’t have to go cold turkey! We’ll be releasing a AI special mini-series, shorts for our 12 days of breachmas and trailers for season 2! 

Links to everything Helena discussed in this episode can be found in the show notes and if you liked the show, please do leave us a review.

Follow us on all good podcasting platforms and via our YouTube channel, and don't forget to share on LinkedIn and in your teams.

It really helps us spread the word and get high-quality guests, like Helena, on future episodes. 

We hope you enjoyed this episode - See you next time, keep secure, and don’t forget to ask yourself, ‘Am I the compromising position here?’

This week we are joined by Helena Hill, a seasoned UX Strategist and Consultant and AI expert with a wealth of experience spanning diverse clients, from pre-start-ups to global industry giants.

In this episode, we explore the fascinating topic of UX and cybersecurity.

We’re going to learn from the UX function to see how we can create a better user experience for people on their security journey, learn how to get buy-in from the business about implementing controls such as MFA,  and how to ‘sell’ our security value offering as a positive user experience. 

And of course, crucially, how to take those first few steps to engage with the UX team!

Key Takeaways for this episode are:

UX and Cybersecurity share the same challenge of educating and getting buy-in from the organization to elevate their importance on the business agenda.

Understanding the user journey is crucial for both UX and Cybersecurity teams to build a better usable security journey.

Empathy mapping helps build a picture of a person and understand their needs and expectations.

Leveraging user expectations and their ease of use thresholds can help create appropriate security controls.

Collaboration between UX/UR and Cybersecurity teams can lead to innovation in the security space and improve the user experience.

This is the first of our two part conversation with Helena, next week we will be talking about her other specialism in AI, which kicks off our Christmas miniseries on AI

Links to everything Helena discussed in this episode can be found in the show notes and if you liked the show, please do leave us a review.

Follow us on all good podcasting platforms and via our YouTube channel, and don't forget to share on LinkedIn and in your teams.

It really helps us spread the word and get high-quality guests, like Helena, on future episodes. 

We hope you enjoyed this episode - See you next time, keep secure, and don’t forget to ask yourself, ‘Am I the compromising position here?’

Show Notes

What is a Persona Non Grata? Developed at DePaul University, the Persona non-grata approach makes threat modelling more tractable by asking users to focus on attackers, their motivations, and their abilities. Once this step is completed, users are asked to brainstorm about targets and likely attack mechanisms that the attackers would deploy. Read more: Cyber Threat Modelling: An Evaluation of Three Methods  by FORREST SHULL AND NANCY R. MEAD

Downloadable Empathy Map

The stat 1 cybersecurity professional per 100 developers can be found in Toby Irvine’s article The Ratio

An article explaining Dunbar’s Number

A Usability Study of Five Two-Factor Authentication Methods By Ken Reese et al.

Research Insights: Optimal MFA options for Web3 audiences

The State of the Auth: Experiences and Perceptions of Multi-factor Authentication

“Nah, it’s just annoying!” A Deep Dive into User Perceptions of Two-Factor Authentication By Karola Marky et al.

“Don’t punish all of us”: Measuring User Attitudes about Two-Factor Authentication By Jonathan Dutson et al.

The original, and arguably the best book on Nudge Theory - Nudge: The Final Edition: Improving Decisions About Money, Health, and the Environment by Richard H. Thaler and Cass R. Sunstein. This is a must-read book to learn about influencing behaviour change

About Helena Hill

Helena Hill is a seasoned UX Strategist and Consultant with a wealth of experience spanning diverse clients, from pre-start-ups to global industry giants. Her expertise encompasses fostering in-house UX and customer experience teams, orchestrating and implementing cutting-edge UX methodologies, and collaborating with clients to craft innovative, user-centric digital experiences.

As a thought leader, Helena frequently takes the stage to share her insights on user experience design, customer experience, and service design. She has recently extended her skills into the exciting realm of passenger experience. Furthermore, Helena holds a ChatGPT expert certification, showcasing her high level of expertise in conversational AI and how it can be utilised to exceed user and customer expectations.

Links related to Helena Hill

Helena’s website

Helena’s LinkedIn

This week our guest is Melina Palmer, a renowned keynote speaker in behavioural economics and the CEO of The Brainy Business, as well as hosting one of the best podcasts on the subject of the practical application of behavioural economics.

In this episode, we're going to discuss the art of influencing both up and down, and how to tailor your cybersecurity message to different audiences. 

Melina teaches us that it's not about the cookie - that is, it's not just about the product or cybersecurity awareness and controls themselves, but it's about how we frame information and communicate change.

With her expertise in behavioural economics, Melina shows us how to make change easier, reduce decision fatigue, and increase social capital through understanding and compromise.

What you’ll learn in this episode:

Effective communication is key to influencing both up and down in an organization. Tailoring your message to the audience and framing it in a relatable way can make you a more thoughtful communicator.

Cybersecurity awareness and controls are crucial for preventing breaches, but the way you "sell" the experience matters. By making engagement positive and impactful, you can increase social capital and encourage people to follow the rules.

Change can be overwhelming, especially when we're already dealing with a lot of decisions and cognitive load. To make change easier, it's important to focus on what matters in the moment and avoid overwhelming people with too many changes at once.

By understanding how our brains work and tailoring our communication and change management strategies accordingly, we can make a positive impact on our organizations and help drive progress.

If you're interested in understanding the behavioural science behind cybersecurity and how we can communicate more effectively, then you're in the right place. 

Links to everything Melina discussed in this episode can be found in the show notes and if you liked the show, please do leave us a review.

Follow us on all good podcasting platforms and via our YouTube channel, and don't forget to share on LinkedIn and in your teams.

It really helps us spread the word and get high-quality guests, like Melina, on future episodes. 

We hope you enjoyed this episode - See you next time, keep secure, and don’t forget to ask yourself, ‘Am I the compromising position here?’

Show Notes

Melina has created a fantastic It’s Not About The Cookie worksheet so you can start using it in your organisation today

An article on delivering bad news on a Friday. It isn’t the book Lianne mentioned (she can’t remember what book that was!) but this article covers why bad news from leadership on a Friday is a bad move! ByKorn Ferry

An article on Decision Fatigue

ABOUT MELINA PALMER

Melina Palmer is a globally celebrated keynote speaker showing companies how they can easily get customers to buy and employees to buy in by leveraging the power of behavioural economics.

She is the CEO of The Brainy Business, which provides behavioural economics training and consulting to businesses of all sizes from around the world.

Her podcast, The Brainy Business: Understanding the Psychology of Why People Buy, has downloads in over 170 countries and is used as a resource for teaching applied behavioural economics to many universities and businesses. Melina teaches applied behavioural economics through the Texas A&M Human Behavior Lab and obtained her master’s in behavioural economics from The Chicago School of Professional Psychology.

A proud member of the Global Association of Applied Behavioral Scientists, Melina has contributed research to the Association for Consumer Research, Filene Research Institute, and writes on Behavioral Economics & Business for Inc Magazine.

Her first book, What Your Customer Wants and Can’t Tell You (2021), won first place in the Chanticleer International Book Awards in its category, of which her second book, What Your Employees Need and Can’t Tell You (2022), was also a finalist. Her highly anticipated third book, The Truth About Pricing, is scheduled to be published in January 2024.

LINKS RELATED TO MELINA PALMER

The Brainy Business (Website)

The Brainy Business Podcast

LinkedIn

This week our guest is Melina Palmer, a renowned keynote speaker in behavioural economics and the CEO of The Brainy Business, as well as hosting one of the best podcasts on the subject of the practical application of behavioural economics.

In this episode, we discuss how silos and tribal mentalities occur in the workplace due to confirmation bias and how we can expand the circle of empathy to create a more cohesive team.

We'll also delve into the issue of time discounting, availability bias and optimism bias to understand why people are drawn to the easy option in the moment.

We shall explore how the cybersecurity team's curse of knowledge can be a barrier to effective communication, and the need to create easier-to-digest content that enables 'buy-in.' 

Key takeaways for this episode are:

Understanding the behaviour that leads to insecure cybersecurity behaviour is crucial in developing effective cybersecurity strategies.

Silos and tribal mentalities in the workplace can be detrimental to team dynamics and productivity. Leaders should work towards creating a 'team company' culture.

Confirmation bias and focusing illusion can lead to negative relationships and narrow perspectives. It's important to listen and build positive connections.

Cybersecurity messages should be framed in a way that resonates with users and takes into account their knowledge and habits.

To effectively communicate cybersecurity information, it's important to get into the mind space of the person you're communicating with and provide easy-to-digest content.

If you're interested in understanding the behavioural science behind cybersecurity and how we can communicate more effectively, then you're in the right place. 

Links to everything Melina discussed in this episode can be found in the show notes and if you liked the show, please do leave us a review.

Follow us on all good podcasting platforms and via our YouTube channel, and don't forget to share on LinkedIn and in your teams.

It really helps us spread the word and get high-quality guests, like Melina, on future episodes. 

We hope you enjoyed this episode - See you next time, keep secure, and don’t forget to ask yourself, ‘Am I the compromising position here?’

SHOW NOTES

The original, and arguably the best book on Nudge Theory - Nudge: The Final Edition: Improving Decisions About Money, Health, and the Environmentby Richard H. Thaler and Cass R. Sunstein. This is a must read book to learn about influencing behaviour change

The Power of Us: Harnessing Our Shared Identities for Personal and Collective Successby Jay Van Bavel and Dominic J. Packer

A short video on the philosophy of Ayn Rand

Melina’s episode on Confirmation Bias

Melina’s episode on Focusing Illusion

We couldn’t find the exact study Melina mentions in regards to teachers bias and the impact on grades but we did find another similar study that shares almost the same results - (Biased) Grading of Students’ Performance

Melina’s episode on Availability Bias

Melina’s episode on Time Discounting

Melina’s episode on Optimism Bias

ABOUT MELINA PALMER

Melina Palmer is a globally celebrated keynote speaker showing companies how they can easily get customers to buy and employees to buy in by leveraging the power of behavioural economics.

She is the CEO of The Brainy Business, which provides behavioural economics training and consulting to businesses of all sizes from around the world.

Her podcast, The Brainy Business: Understanding the Psychology of Why People Buy, has downloads in over 170 countries and is used as a resource for teaching applied behavioural economics to many universities and businesses. Melina teaches applied behavioural economics through the Texas A&M Human Behavior Lab and obtained her master’s in behavioural economics from The Chicago School of Professional Psychology.

A proud member of the Global Association of Applied Behavioral Scientists, Melina has contributed research to the Association for Consumer Research, Filene Research Institute, and writes on Behavioral Economics & Business for Inc Magazine.

Her first book, What Your Customer Wants and Can’t Tell You (2021), won first place in the Chanticleer International Book Awards in its category, of which her second book, What Your Employees Need and Can’t Tell You (2022), was also a finalist. Her highly anticipated third book, The Truth About Pricing, is scheduled to be published in January 2024.

LINKS RELATED TO MELINA PALMER

The Brainy Business (Website)

The Brainy Business Podcast

LinkedIn

A word of warning listeners, we do discuss the darker side of crime, including human trafficking which some of our listeners may find upsetting. If this isn’t for you, feel free to skip this one and we’ll see you next week.

——————————————————————This week our guest is Ray Blake. Ray is an advisor on financial crime matters and co-creator of the Dark Money Files podcast.

In this episode, we explore the motivations driving individuals to commit such crimes, probing whether it's sheer greed, the allure of victimless crimes, or a complex mix of factors.

We discuss how the lack of direct interaction with victims and the personal rationalizations criminals make facilitate the perpetuation of these crimes.

We also talk about the concept of corporate values and how they may not always align with individual morals, leading to a disconnect that can be exploited.

Furthermore, we look at the responsibility and moral hazard inherent in the fight against fraud, highlighting how cybersecurity often wrongfully blames the victim rather than focusing on the perpetrator.

Key Takeaways for this Episode:

Financial crime and cybercrime are closely related, and the lines between them are blurring.

The lack of interaction with the victim makes it easier to commit financial crime, and rationalisation is the story of organised crime.

Companies need to take responsibility for fraud and liability, and regulation and refunding customers can incentivise them to make the system safer.

Personal stories are key to creating empathy and driving change, and bad security communications can cause rebellion.

Links to everything Ray discussed in this episode can be found in the show notes and if you liked the show, please do leave us a review. Follow us on all good podcasting platforms and via our Youtube channel, and don't forget to share on LinkedIin and in your teams.

It really helps us spread the word and get high-quality guests, like Ray, on future episodes.  We hope you enjoyed this episode - See you next time, keep secure, and don’t forget to ask yourself, ‘Am I the compromising position here?’ 

Show Notes

Jenny ‘The People Hacker’ Radcliffe

People Hacker: Confessions of a Burglar For Hire by Jenny Radcliffe

PSR announces plans to stop APP scams

Cybercrime To Cost The World $10.5 Trillion Annually By 2025

Goldfinger Quote Jeff was referring to was:

"Man has climbed Mount Everest. Gone to the bottom of the ocean. He has fired rockets at the Moon. Split the atom. Achieved miracles in every field of human endeavour...except crime!" - Goldfinger

Statistics on human trafficking

About Ray Blake

Ray is a commentator and adviser on financial crime matters and has worked extensively across regulated financial services and related fields for many years, working frequently with Boards, MLROs and Compliance teams to help them meet their regulatory accountabilities. He’s also co-creator with Graham Barrow of The Dark Money Files Podcast which looks at financial crime from a whole range of angles.

Links related to Ray Blake

The Dark Money Files

Ray’s LinkedIn

This week we have a very special guest, Reema Vadoliya. Reema is the passionate business founder of data consultancy, People of Data, a gifted storyteller, and a professional problem-solver. 

In this episode, Reema shares her insights on how to collaborate more effectively between cybersecurity and data professionals. She emphasizes the importance of empathetic communication, how sometimes quantifying risks is about gut feeling, not just metrics… 

We look at how we can use data-driven storytelling to engage and educate people about cybersecurity, including how to make our phishing simulation stats not only more interesting to non-cybersecurity people but also how to make it actually drive meaningful behavioural changes.

Top 5 Takeaways for Building a Strong Data Culture and Cybersecurity:

1. Collaboration is key: The best way to ensure data security is by fostering good relationships between cybersecurity and data teams. Encourage open communication and explain the importance of keeping data safe.

2. Empathy is crucial: To solve problems effectively, it's important to understand the actual problem. Avoid closed questions and focus on the "why" behind the issue.

3. Checklists can help: Consistent, repeatable, and reusable rules of engagement can prevent insecure practices and reduce the need for constant consultation with the security team.

4. Quantifying risks is complex: Sometimes, you need to rely on gut feeling to balance a complex risk landscape. Business analysts can help identify potential risks that may have been overlooked.

5. Start small: Building a strong data culture takes time. Start by removing barriers that make data feel unobtainable and use storytelling to help people understand complex concepts. Make better use of phishing data to tell better stories and improve outcomes.

Links to everything we discuss in this episode can be found in the show notes and if you liked the show, please do leave us a review.

Follow us on all good podcasting platforms and via our youtube channel, and don't forget to share on LinkedIin and in your teams. It really helps us spread the word and get high-quality guests, like Reema, on future episodes. 

We hope you enjoyed episode 7, If Data is the new oil, how do we prevent data spills?  - See you next time, keep secure, and don’t forget to ask yourself, ‘Am I the compromising position here?’

Show Notes

The phrase ‘Data is the new oil’ was coined by Clive Humby in 2006. In this, he meant that data, like oil, needs refinement and processing to turn it into something useful. We couldn’t find the original conference in which Humby said this, but I did find an interesting article looking at this assertion years later called ‘Data is the new oil of the digital economy’ by WIREDwhich is worth a read.

As of November 2023, GDPR fines can be up to 20 million euros, or up to 4% of a company’s global turnover of the preceding fiscal year (whichever is highest for the company found in breach of this regulation).

A ‘DBA’ is a Database Administrator’. A DBA is a person who manages, maintains, and secures data in one or more data systems so that a user can perform analysis for business operations. DBAs take care of data storage, organization, presentation, utilization, and analysis from a technical perspective.

The meme Jeff was talking about is the ‘Prince or Popstar meme.’ A nice write up of it can be found here.

One of the best books at looking at the successes of checklists is Matthew Syed’s thought-provoking book, Black Box Thinking: The Surprising Truth About Success - highly recommended by team CP!

Data in Practice: Systematizing data quality at Uber

Uber’s Data Blog

About Reema Vadoliya

Reema is a passionate business founder, gifted storyteller and tireless advocate for inclusion in data. By challenging audiences to reshape their perception of data as a dreary necessity, she draws out the real human stories which organically empower intentional inclusion in data and beyond. 

After seven years and multiple roles in data, Reema decided to launch her new, trailblazing company, People of Data. Through this organisation she seeks to create a world in which data can be used as a springboard for understanding the real people that data represents.

Reema is confident speaking about data strategy, analytical exploration, data collection and governance. Her talks offer a passionate manifesto for a world in which Equality, Diversity, Inclusion, and Belonging (EDIB) are the beating heart of all data handling and usage. 

An experienced speaker not afraid of digging into the gristle of the difficult topics, Reema’s talks push beyond a 1D (one demographic) view of data and offer a refreshing, multi-dimensional consideration of how humanised data can pioneer a brighter future.

Links related to Reema Vadoliya

Reema’s LinkedIn

Reema’s Consultancy, People of Data