Cyber Security Weekly Podcast

National Cybersecurity – Capacity Building For Resilience 2020

Cybersecurity Taskforce Webinar Session 27 July 2020 - Also available for viewing on MySecurity TV (https://youtu.be/7JEEQ1GO1Pk)

(https://youtu.be/7JEEQ1GO1Pk)Standards Australia has joined with the NSW Government, AustCyber and industry to establish a new taskforce to improve the practice of cybersecurity across Australian industry.

The Taskforce brings together defence, energy, health, financial services, and the education sector and has agreed on improving support for Australia becoming a more resilient nation in terms of cybersecurity through sector-specific initiatives and technical guidance, greater cooperation between technologies, and learning from global examples.

Features

The Hon. Victor Dominello MP, Minister for Customer Service, NSW Government

Prerana Mehta, Chief of Ecosystem Development, AustCyber

Dr Jed Horner, Strategic Advocacy Manager, Standards Australia

Simon Bush, General Manager, Australian Information Industry Association

Moderator: Chris Cubbage, Executive Editor & Director, MySecurity Media

Interview with Mark Johnston, Head of Security, Google Cloud, Asia Pacific having presented at the RSA Conference APJ on Cloud Safeguarding: View from Cloud Providers.

As enterprises become more reliant on public cloud services, it’s critical that effective strategies are in place for cloud safeguarding. Given the shared responsibility model, what are the best practices? The RSA Conference session explored several key areas including establishing clear lines of responsibility; achieving visibility;deciding where to invest time and resources; focusing on the most important controls; managing identities in the cloud; and having the ability to detect, react and recover from incidents.

With over 20 years of security domain expertise across the financial, government,

In the second of this three part podcast series with Fortinet, we dive into Culture with a focus on high performance teams, creating a 'Culture of Security' and the broader interdependence to the Security Industry Culture.

Joined by Cornelius Mare, Director of Security Solutions Fortinet ANZ and Glenn Maiden, Director FortiGuard Threat Intelligence, ANZ this is a highly insightful discussion and directly relevant to the on-going management of enterprise crisis during the COVID-19 pandemic and its relationship and impacts on corporate culture.

As the world continues to respond to the pandemic and undergoes an accelerated digital transformation and destabilised geo-political landscape, the preparation, management and review of cyber related crisis is a fundamental discipline in an enterprise security posture. This series explores crisis management and connections to culture and the renewed challenge of building a team in a remote workforce and bench-marking compliance, risk and regulations.

Recorded between Sydney and Canberra, 21 July 2020, courtesy of Fortinet.

For more information on Fortinet visit www.fortinet.com (https://www.fortinet.com/)

Episode 207 - The 3 C's of Cyber - Crisis, Culture & Compliance - Fortinet Series Ep1 (https://blubrry.com/mysecurity/63027397/episode-207-the-3-cs-of-cyber-crisis-culture-compliance-fortinet-series-ep1/)

Episode 216 - The 3 C's of Cyber - Crisis, Culture & Compliance - Fortinet Series Ep3 (https://blubrry.com/mysecurity/66787074/episode-216-the-3-cs-of-cyber-crisis-culture-compliance-fortinet-series-ep3/)

Stay tuned for Episode 3 where we dive deeper into the third 'C' - 'Compliance' and wrap it all up with each of the 3 C's of Cyber.

Additional Links - Book Mentions

https://simonsinek.com/product/the-infinite-game/ (https://simonsinek.com/product/the-infinite-game/)

https://www.amazon.com/Leaders-Guide-Cybersecurity-Boards-Lead-ebook/dp/B07MWDF4L4 (https://www.amazon.com/Leaders-Guide-Cybersecurity-Boards-Lead-ebook/dp/B07MWDF4L4)

More Books - visit https://mysecuritymarketplace.com/books-listing/ (https://mysecuritymarketplace.com/books-listing/)

A unique online counterpart event between Australia and Israel was held on July 1 with Yigal Unna, Director General of the Israel National Cyber Directorate and Dr Tobias Feakin, the Australian Ambassador for Cyber Affairs & Critical Technology providing their insights into a world where, according to Mr. Unna, “the cyber-attack surface is on steroids”.

Held in partnership with the Australia-Israel Chamber of Commerce, Israel-Australia Chamber of Commerce, Israel Trade Commission and MySecurity Media, the event proposed the theme: Has national cybersecurity awareness and resiliency improved in 2020 and is a new online posture necessary to better combat motivated and agile attackers?”

Mr Unna opened to outline the Israel National Cyber Directorate, directed still by a 2012 Cybersecurity Strategy, with a three pillar focus on protecting access to systems and reducing the attack surface, and more broadly ensuring the strategy is applied across the ICT space and telecommunications.

On a day described by the Australian Prime Minister Scott Morrison as a ‘pivotal day’, releasing the Australian Defence Strategy and Force Structure Plan, the Prime Minister confirmed there is rising strategic risk and we are in a “global contest of our age.”

In his opening address, Ambassador Feakin provided deep insights into how Australia is dedicating significant funding towards enhanced cybersecurity and how Covid19 has rapidly accelerated business digitalisation, bringing enhanced cybersecurity risks due to immediate implementation needs. The challenge in Australia relates to both how fast cyber-attacks can be detected and how fast they can be responded to.

Each guest presenter confirmed electronic warfare is becoming more sophisticated and more prevalent and how ‘offensive vs defensive’ activity is a key resource consideration. The speed of attribution will become a focus of future cybersecurity defence and the role of the private sector in supporting national cyber security and delivering services will continue to increase.

The session closed with consideration to the national responsibility for cybersecurity and setting ground rules for enforcement and having a deterrent capability is critically important. In particular, as technology across a wide range of domains rapidly advances.

Both Australia and Israel have advanced cybersecurity capabilities, but never has there been such a demand and never has it been more important.  Future and further collaboration is undoubtedly mutually beneficial.

Podcast is an edited version. The full recorded Webinar session, held July 1, 2020, is available for viewing here (https://youtu.be/SW0_O3IhVlY)

Listen to the Podcast for a special book giveaway and one-on-one briefing. Still Open.

Interview with Morey Haber, CTO & CISO, BeyondTrust on the launch of the 2nd edition of his first book, “Privileged Attack Vectors: Building Effective Cyber-Defense Strategies to Protect Organizations”. The first edition was a best-seller on Amazon when it was launched 3 years ago.

Since then, the world has changed, Morey felt the need to write a second edition to cover brand new concepts in cyber-security that will help CISOs and their teams to better protect their organizations from the ever increasing cyber-attacks – such as “Just-in-Time PAM” and “Universal Privileged Management” – concepts that prompted global analyst firms to recommend Privileged Access Management as the number one priority for CISOs.

Morey wears "two hats" at BeyondTrust in his positions of Chief Technology Officer and Chief Information Security Officer. In order to keep his own organization secure from the ever increasing cyber-attacks as well as contribute to BeyondTrust's innovative product roadmap, he utilizes the lessons acquired over almost three decades of experience in IT and cyber-security.

To date, he’s authored three books, "Privileged Attack Vectors", "Asset Attack Vectors", and "Identity Attack Vectors"; and oversees BeyondTrust's global strategy for privileged access management and remote access solutions. 

“Privileged Attack Vectors (2nd Edition)” details the risks associated with poor privilege management, the techniques that threat actors leverage, and the defensive measures that organizations should adopt to protect against an incident, protect against lateral movement, and improve the ability to detect malicious activity due to the inappropriate usage of privileged credentials. This revised and expanded second edition covers new attack vectors, has updated definitions for privileged access management (PAM), new strategies for defense, tested empirical steps for a successful implementation, and includes new disciplines for least privilege endpoint management and privileged remote access. It is the perfect read for any cyber-security professional.

Listen to the Podcast for a special book giveaway and one-on-one briefing.

For further information on Universal Privilege Management (https://www.beyondtrust.com/solutions/universal-privilege-management) or click here for a special book competition (https://www.beyondtrust.com/events/usergroups/apj-beyondtrust-special-book-competition) “Identity Attack Vectors” direct with Beyondtrust.

FURTHER LISTENING

Episode 183 - Identity Attack Vectors: Implementing an Effective Identity and Access Management Solution – Interview with author Morey Haber, CISO & CTO, BeyondTrust https://blubrry.com/mysecurity/53901560/episode-183-identity-attack-vectors-implementing-an-effective-identity-and-access-management-solution-interview-with-author-morey-haber-ciso-cto-beyondtrust/ (https://blubrry.com/mysecurity/53901560/episode-183-identity-attack-vectors-implementing-an-effective-identity-and-access-management-solution-interview-with-author-morey-haber-ciso-cto-beyondtrust/)

Episode 176 - Privileged Access Management (PAM) and analysis of the BeyondTrust Microsoft Vulnerabilities Report 2019

In the first of a three part series with Fortinet, we speak with Cornelius Mare, Director of Security Solutions Fortinet ANZ and Glenn Maiden, Director FortiGuard Threat Intelligence, ANZ and delve into crisis management during a COVID-19 pandemic and its relationship to culture and compliance and how these three critical areas are interdependent.

As the world responds to a global pandemic and undergoes an accelerated digital transformation and a destabilised geo-political landscape, the preparation, management and review of cyber related crisis is a fundamental discipline in an enterprise security posture. This discussion explores crisis management and connections to culture and the renewed challenge of building a team in a remote workforce and benchmarking compliance, risk and regulations.

Recorded between Sydney and Canberra, 15 June 2020, courtesy of Fortinet.

For more information on Fortinet visit www.fortinet.com (https://www.fortinet.com)

Part 2: Culture - Episode 210 - The 3 C's of Cyber - Crisis, Culture & Compliance - Fortinet Series Ep2 (https://blubrry.com/mysecurity/64800426/episode-210-the-3-cs-of-cyber-crisis-culture-compliance-fortinet-series-ep2/)

Part 3: Compliance - Episode 216 - The 3 C's of Cyber - Crisis, Culture & Compliance - Fortinet Series Ep3 (https://blubrry.com/mysecurity/66787074/episode-216-the-3-cs-of-cyber-crisis-culture-compliance-fortinet-series-ep3/)

Interview with Sharon Hiu, APAC Channel Analyst with Canalys, based in Singapore.

This is our second update podcast (recorded 22 May, 2020) to gain current Canalys observations of the APAC Technology Channel sector and the impacts of the COV...

We missed timing this with World Password Day (May 7 - First Thursday of May) but took the opportunity to speak with Geoff Schomburgk, Australia and New Zealand Country Manager for Yubico. Geoff discusses the move towards a passwordless future and some of the key benefits and considerations for businesses and services looking to eliminate passwords.

World Password Day highlights the need for protection and security, and as more people work remotely due to COVID-19, the pandemic could be the catalyst for the acceleration of passwordless adoption as seamless security will need to support the new norm.

Gartner predicts 60% of large and global enterprises, as well as 90% of midsize enterprises, will implement passwordless methods in over 50% of use cases by 2022 (https://www.gartner.com/smarterwithgartner/embrace-a-passwordless-approach-to-improve-security/).  "Passwordless authentication, by its nature, eliminates the problem of using weak passwords. It also offers benefits to users and organizations. For users, it removes the need to remember or type passwords, leading to better user experience and customer experience. For organizations, there’s no longer a need to store passwords, leading to better security, fewer breaches and lower support costs."

Yubico is a leading contributor to the FIDO2 (https://www.yubico.com/solutions/fido2/) and WebAuthn (https://www.yubico.com/solutions/webauthn/) open standards that are relied upon by some of the leading platforms, browsers and technology businesses globally and are the first open authentication standards to make passwordless logins possible.

This podcast includes the opportunity to win one of three YubiKey 5Ci (https://mysecuritymarketplace.com/v2-solutions/yubikey-5ci/) keys (OFFER NOW CLOSED) - also available for purchase from $70.00 (single) on the MySecurity Marketplace (https://mysecuritymarketplace.com/) - listen in for details.

Interview recorded 14 May, 2020

Interview with Ray Griffiths, ANZ OT Lead, Perth and Zoe Thompson, Manager Accenture Security Practice, Canberra discussing the Australian Security of Critical Infrastructure Act 2018 and how a broad attack surface across Critical Infrastructure also increases the opportunities for malicious actors to wreak havoc if they can penetrate cybersecurity defences anywhere in the system.

The discussion also includes the Perth Innovation Hub, which compliments the Sydney Cyber Fusion Centre, as well as recent exercises conducted by the Australian Cyber Security Centre and attacks in Israel.

Recorded on 4 May, 2020 courtesy of Accenture

Accenture Podcast Series: Building cyber resilience to grow and innovate with confidence (https://australiancybersecuritymagazine.com.au/accenture-podcast-series-why-threat-intelligence-is-your-best-defence-accentures-new-cyber-fusion-centre-sydney/)

SERIES #1 - Episode 195 - Accenture Podcast Series: Why threat intelligence is your best defence - Accenture’s new Cyber Fusion Centre, Sydney

SERIES #3 - Episode 214 - Accenture Podcast Series: Addressing Cybersecurity Breaches in a COVID-19 Environment with changing MO and an evolving threat landscape

Interview with Professor Rory Medcalf, head of the Australian National University National Security College and author of Contest for the Indo-Pacific - Why China Won't Map the Future.

Based on our Book Review (https://www.asiapacificsecuritymagazine.com/editors-book-review-contest-for-the-indo-pacific-why-china-wont-map-the-future-by-rory-medcalf/), we discuss with Rory the background, structure and strategic importance of the book, now with the developments of the COVID-19 pandemic, originating out of Wuhan, China in late 2019. The impact of a novel Coronavirus on the world in the first half of 2020 has been profound and is intensifying and accelerating contestation between China and Australia, as well as the USA and other nations.

As Medcalf writes in the book, “it’s time for government and business to brace and hedge, to prepare for the risks of multiple plausible futures.”

RELATED LINKS

APSM Editor's Book Review (https://www.asiapacificsecuritymagazine.com/editors-book-review-contest-for-the-indo-pacific-why-china-wont-map-the-future-by-rory-medcalf/)

Undersea deterrence and strategic competition in the Indo-Pacific (https://www.aspistrategist.org.au/undersea-deterrence-and-strategic-competition-in-the-indo-pacific/)

Get the Book (https://www.blackincbooks.com.au/books/contest-indo-pacific)

RELATED PODCAST EPISODES

Episode 199 - National Security implications of COVID-19 - Prof John Blaxland & Jacinta Carroll - Australian National University (https://blubrry.com/mysecurity/58195097/episode-199-national-security-implications-of-covid-19-prof-john-blaxland-jacinta-carroll-australian-national-university/)

Episode 147 - Pre-War Phase, Warfare & Cyber: Amongst Space, Air, Land, Sea, Time & Perception - Interview with Dr. Malcolm Davis, ASPI (https://blubrry.com/mysecurity/42894396/episode-147-pre-war-phase-warfare-cyber-amongst-space-air-land-sea-time-perception-interview-with-dr-malcolm-davis-aspi/)