Cyber Security Weekly Podcast

Special Virtual Episodes with ISACA Leaders: State of Cyber (Part 1) - Maintaining readiness in a complex threat environment

Speakers:

Jamie Norton - ISACA Board Member

Chirag Joshi - Sydney Chapter Board Member

Abby Zhang - Auckland Chapter Board Member

Jason Wood - Auckland Chapter former President

Bharat Bajaj - ISACA Melbourne Board Director

For the full series visit: https://mysecuritymarketplace.com/security-amp-risk-professional-insight-series-2025/

#mysecuritytv #isaca #cybersecurity

OVERVIEW

According to ISACA research, almost half of companies exclude cybersecurity teams when developing, onboarding, and implementing AI solutions.

Only around a quarter (26%) of cybersecurity professionals or teams in Oceania are involved in developing policy governing the use of AI technology in their enterprise, and nearly half (45%) report no involvement in the development, onboarding, or implementation of AI solutions, according to the recently released 2024 State of Cybersecurity survey report from global IT professional association ISACA.

Key Report Findings

Security teams in Oceania noted they are primarily using AI for:

 Automating threat detection/response (36% vs 28% globally);

 Endpoint security (33% vs 27% globally);

 Automating routine security tasks (22% vs 24% globally); and

 Fraud detection (6% vs 13% globally).

Additional AI resources to help cybersecurity and other digital trust professionals

o EU AI Act white paper

o Examining Authentication in the Deepfake Era

SYNOPSIS

ISACA's 2024 State of Cybersecurity report reveals that stress levels are on the rise for cybersecurity professionals, largely due to an increasingly challenging threat landscape. The annual ISACA research also identifies key skills gaps in cybersecurity, how artificial intelligence is impacting the field, the role of risk assessments and cyber insurance in enterprises' security programs, and more.

The demand for cybersecurity talent has been consistently high, yet efforts to increase supply are not reflected in the global ISACA IS/IT-community workforce. The current cybersecurity practitioners are aging, and the efforts to increase staffing with younger professionals are making little progress. Left unchecked, this situation will create business continuity issues in the future.

Shrinking budgets and employee compensation carry the potential to adversely affect cybersecurity readiness much sooner than the aging workforce, when the Big Stay passes. Declines in vacant positions across all reporting categories may lead some enterprises to believe that the pendulum of power will swing back to employers, but the increasingly complex threat environment is greatly increasing stress in cybersecurity teams; therefore, the concern is not if, but when, employees will reach their tipping point to vacate current positions.

In today’s security world, there are numerous security solutions that can limit access to company data and IT resources and lock down access. However, when it comes to using AI apps and their back-end models, the answer is not so simple. In this session we take a deep-dive into the challenge that Cisco saw looming on the horizon years ago and has culminated in a brand-new solution called Cisco AI Defence.

In today’s security world, there are numerous security solutions that can limit access to company data and IT resources and lock down access. However, when it comes to using AI apps and their back-end models, the answer is not so simple.

We speak with Carl Solder, Chief Technology Officer - Cisco Australia/New Zealand and get his insights into the challenge that Cisco saw looming on the horizon years ago and has culminated in a brand-new solution called Cisco AI Defence.

Prior to this role, Carl was Cisco’s Vice President of Engineering for the Enterprise Networking and Cloud Engineering organisation at Cisco HQ in San Jose, California. In this role he was responsible for Technical Strategy for the Enterprise Network and Cloud portfolio. His portfolio included the Catalyst Routing, Switching and Wireless platforms, the Intent Based Networking Software Innovations around Automation, Assurance, Machine

Learning and Artificial Intelligence as well as the Policy, Identity and Segmentation Software solutions that include Cisco’s Identity Services Engine (ISE).

Through his time at Cisco, Carl has also held various Engineering leadership roles in Cisco HQ San Jose and served as a Distinguished Engineer working on early developments in the area of Mass Scale Data Centre Architectures, OpenFlow and Software Defined Networking.

With more than 35 years of technical, business and sales leadership experience in the ICT industry, Carl has a diverse ICT background that provides great insight into emerging market transitions.

Further Reading/Watching

Cisco AI summit: https://www.ciscoaisummit.com/

AI defence: https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2025/m01/cisco-unveils-ai-defense-to-secure-the-ai-transformation-of-enterprises.html

OWASP Top Ten vulnerabilities for AI white paper -https://genaisecurityproject.com/resource/owasp-top-10-for-llm-applications-2025/

#Cisco #AIdefence #mysecuritytv

Vanta is the first ever enterprise-ready trust management platform – one place to automate compliance workflows, centralize and scale your security program, and build and manage trust with customers and partners.

We speak with Jadee Hanson, Chief Information Security Officer (CISO) for Vanta. Security is at the heart of what Vanta does —helping customers improve their security and compliance posture - and this starts with their own.

For further information visit https://mysecuritymarketplace.com/vanta/

#mysecuritytv #vanta #stateoftrust

We speak with Wayne Selk of the Global Technology Industry Association, or GTIA during Zero Trust World 2025, held annually in Orlando, Florida with IT professionals from 28 countries in attendance.

GTIA was formerly CompTIA. The renaming is the result of the sale of the Computing Technology Industry Association’s CompTIA brand in combination with its training and certification business, which will now operate as a separate for-profit company under the CompTIA name. As a result, the existing membership-based trade association, now known as GTIA, continues to operate with the same mission of service to the IT industry.

Zero Trust World 2025 aims to empower IT professionals to embrace a default-deny security posture and build stronger, more resilient cybersecurity frameworks. Attendees gain a deeper understanding of both known and unknown cyber threats and gain actionable strategies to secure their environments and elevate their cybersecurity efforts. Plus, it's a unique opportunity to network and collaborate with the brightest minds in the industry.

#ztw25 #zerotrust #zerotrustworld #mysecuritytv #threatlocker #gtia

Visit gtia.org for details.

We speak with Matthé Smit, Chief Product Officer of Inforcer during Zero Trust World 2025, held annually in Orlando, Florida with IT professionals from 28 countries in attendance.

Zero Trust World 2025 aims to empower IT professionals to embrace a default-deny security posture and build stronger, more resilient cybersecurity frameworks. Attendees gain a deeper understanding of both known and unknown cyber threats and gain actionable strategies to secure their environments and elevate their cybersecurity efforts. Plus, it's a unique opportunity to network and collaborate with the brightest minds in the industry.

#ztw25 #zerotrust #zerotrustworld #mysecuritytv #threatlocker #inforcer

We speak with Kieran Human, Special Projects Engineer with ThreatLocker during Zero Trust World 2025, held annually in Orlando, Florida with IT professionals from 28 countries in attendance.

Kieran ran a hands-on lab to teach what a Rubber Ducky is and how to create and deploy your own payload.

Zero Trust World 2025 aims to empower IT professionals to embrace a default-deny security posture and build stronger, more resilient cybersecurity frameworks. Attendees gain a deeper understanding of both known and unknown cyber threats and gain actionable strategies to secure their environments and elevate their cybersecurity efforts. Plus, it's a unique opportunity to network and collaborate with the brightest minds in the industry.

#ztw25 #zerotrust #zerotrustworld #mysecuritytv #threatlocker

We speak with Rob Allen, Chief Product Officer of Threatlocker during Zero Trust World 2025, held annually in Orlando, Florida with IT professionals from 28 countries in attendance.

Zero Trust World 2025 aims to empower IT professionals to embrace a default-deny security posture and build stronger, more resilient cybersecurity frameworks. Attendees gain a deeper understanding of both known and unknown cyber threats and gain actionable strategies to secure their environments and elevate their cybersecurity efforts. Plus, it's a unique opportunity to network and collaborate with the brightest minds in the industry.

#ztw25 #zerotrust #zerotrustworld #mysecuritytv #threatlocker

We speak with Slava Konstantinov, macOS Lead Architect of Threatlocker during Zero Trust World 2025, held annually in Orlando, Florida with IT professionals from 28 countries in attendance.

How vulnerable do you think your Macs are to Malware? Mac expert Slava Konstantinova uncovers the hidden data and security risks lurking in your macOS browsers and apps.

Zero Trust World 2025 aims to empower IT professionals to embrace a default-deny security posture and build stronger, more resilient cybersecurity frameworks. Attendees gain a deeper understanding of both known and unknown cyber threats and gain actionable strategies to secure their environments and elevate their cybersecurity efforts. Plus, it's a unique opportunity to network and collaborate with the brightest minds in the industry.

#ztw25 #zerotrust #zerotrustworld #mysecuritytv #threatlocker

We speak with Danny Jenkins, CEO & Founder of Threatlocker during Zero Trust World 2025, held annually in Orlando, Florida with IT professionals from 28 countries in attendance.

Zero Trust World 2025 aims to empower IT professionals to embrace a default-deny security posture and build stronger, more resilient cybersecurity frameworks. Attendees gain a deeper understanding of both known and unknown cyber threats and gain actionable strategies to secure their environments and elevate their cybersecurity efforts. Plus, it's a unique opportunity to network and collaborate with the brightest minds in the industry.

#ztw25 #zerotrust #zerotrustworld #mysecuritytv #threatlocker