Cyber Security Weekly Podcast

This episode of the Cyber Security Weekly Podcast focuses on the Australian Information Security Association (‘AISA’), with a wrap up and insights to the WA Conference, held 17 November 2017, a look out to BrisSec 2018 and the largest ever National Conference, 'Australian Cyber Security Conference', 9-11 October, 2018, Melbourne Convention Centre. Discussions include the benefits of being a member of AISA, calls for contribution and the importance of collaboration. MySecurity Media’s Chris Cubbage speaks with Daisy Sinclair, Mourad Khalil, Kelly Taylor, Helaine Leggat, Alan Fereday and Editor of the Australian Cyber Security Magazine, Tony Campbell. If you're an AISA member or considering to join - you'll enjoy this podcast!

In this interview, Chris Cubbage interviews Shannon Sedgwick, CEO of GM Risk Group, a consulting firm specialising in protecting media staff, both in terms of physical and cyber security, as they travel in hostile environments.

Shannon has personally provided protective services to media companies and has travelled to over 30 countries this year, including the Congo, Afghanistan and Iraq.  Shannon discusses the services that GM Risk Group provide, how to mitigate risk, and the increased focus of media companies on duty of care and overall safety for journalists.

If you, or members of your team work in regions of the world, where data or physical safety are at risk, then you’ll enjoy this interview with Chris Cubbage and Shannon Sedgwick.

This is the fourth of a group of interviews from the Risk Management Institute of Australasia's National Conference in Canberra 15-17 November, 2017.

This is the third of a group of interviews from the Risk Management Institute of Australasia (RMIA) National Conference in Canberra 15-17 November 2017. In this interview, Chris Cubbage interviews Rinske Geerlings of ‘Business As Usual’, and discuss business continuity plans, or BCPs, preparing for cyber attack related incidents, the formation of crisis management teams for organisations, and the Business Continuity Standard, ISO 22301.

Rinske highlights that cyber attacks aren’t simply about disaster recovery, where the damage has been caused but has ceased, but rather a situation where victim organisations are not even sure which systems they can safely use, due to continued infection or attack.  Rinske highlights that cyber attacks aren’t only about IT downtime, but also Social Media Marketing and Communications, regarding the public response to customers, suppliers and other stakeholders.

If you’ve been holding back on a Business Continuity Plan, or need some advice on making your’s stronger, you’ll enjoy this interview with Chris Cubbage and Rinske Geerlings.

Following the interview, Rinske Geerlings was awarded 'Risk Consultant of the Year' for 2017 by RMIA - Congratulations Rinske!!

In this interview, Chris Cubbage interviews Dr. Gavriel Schneider, author of “Can I See your Hands: A Guide To Situational Awareness, Personal Risk Management, Resilience and Security”.

Prior to writing this book Gavriel’s team had trained over 40,000 people in various security awareness programs, processes and procedures, and know through firsthand experience that the fundamental failing of security, whether cyber or physical, is people.

You’ll hear how “Can I see your Hands” is a reinforcement tool for security professionals, but also digestible by the everyday person, who are time poor, but need to understand core messages of security. And for those that prefer to watch than read, you’ll be pleased to know Gavriel’s book is supported by online videos.

Morry Morgan and Chris Cubbage catch up on the past fortnight's events and upcoming events for MySecurity Media.

Shout out for Rebecca Vogul who is seeking participants for her PhD research and looking to interview high-level individuals in private sector organisations that have suffered a cyber-related malicious insider threat incident. The research aims to inform a framework of mitigation techniques to combat the insider threat. The research project is approved by Macquarie University's Ethics Committee and measures in place to ensure the participants' and their organisation's identity are protected.  Becky can be contacted on [email protected] (mailto:[email protected]).

We enjoyed a BassPR round-table lunch with Phil Kernick, Founder and Chief Technology Officer of CQR Consulting (http://www.cqr.com) and a discussion about what the future holds for the cyber security landscape in Australia in the year ahead.  Phil Kernick has 25 years’ experience in information security and technology and this was an open and frank discussion. CQR has grown to about 60 staff and is a wholly Australian-owned provider of independent cyber and information security consulting services. The company is headquartered in Adelaide and has offices in New York and Oxford (UK) as well as in Melbourne, Sydney and Brisbane.  The company prides itself on being bilingual in the languages of business and technology.

MySecurity Media were also media partners with the Risk Management Institute of Australasia's national conference (http://rmiaconference.com.au/) in Canberra 15 - 17 November and Chris conducted interviews with RMIA’s CEO Scott Ryrie & RMIA President Anthony Ventura, as well as Dr Chris Wallace, Jason Brown, Shannon Sedgwick, Rinske Geerlings, Dr. Gavriel (Gav) Schneider and Anooshe Mustaq of the Raqib Taskforce.

Then we headed to Perth for the AISA (http://asisonline.org/)WA Conference on Friday 17 November and joined over 300 delegates and 26 exhibitors, put together with the hard work of Daisy Sinclair, Mourad Khalil and thanked by AISA Board Members, Kelly Taylor and Helaine Leggat. We also took time out with Alan Fereday, Tony Campbell, ECU's Dr. Peter Hannay, Steve Schupp of Asterisk and ES2's Andy Battle and Steve Simpson.

Morry's week included the Melbourne Women in Cyber Mentoring Event 20-21 Nov, and he interviewed some super cyber women for #WICME2017.  Morry's Podcast interview - Episode 10 is now available (http://www.australiancybersecuritymagazine.com.au/episode-10-womenincyber-mentoring-with-sandra-ragg-erica-hardinge-michelle-price-megan-haas/) - you’ll hear from Sandra Ragg, Head of the Office of the Prime Minister’s Cyber Security Special Advisor Lead Cyber Resilience Taskforce, Erica Hardinge, Head of Security Enablement at ANZ Bank, Michelle Price, Chief Operating Officer at AustCyber, and Megan Haas, Partner, Cyber Security and Forensic Services at PwC, which was where the event was held.

We also discuss the latest news, events, podcasts and lots more. Thanks also for the sponsor support from SAI Global for promoting their Cyber Resilience Webinars (https://register.gotowebinar.com/register/756629312907650051), Macquarie University's Master of Cyber Security course (https://courses.mq.edu.au/2018/domestic/postgraduate/master-of-cyber-security?utm_source=website&utm_medium=banner702x90&utm_campaign=FTS204&utm_content=AustralianSecurityMagazine) and for FLIR Systems (http://www.flir.com.au/security/UnitedVMS/). Enjoy the wrap-up!

This is the first of a group of interviews from the National Conference of the Risk Management Institute of Australia, or RMIA, in Canberra, 15-17 November 2017.

In this interview, Chris Cubbage interviews Dr. Chris Wallace, CEO of the Australian Reinsurance Pool Corporation, or ARPC, and discusses terrorism protection, post September 11. 

Dr Chris Wallace shares how ARPC was created to protect physical commercial assets, against both physical and cyber attack, where commercial insurance policies do not. Chris Cubbage and Chris Wallace also discuss risk mitigation, and the goal of ARPC, to reduce premiums through better education, particularly in relation to terrorism.

In this episode, MySecurity Media's Morry Morgan interviews four high calibre role models in cyber security, at the Women in Cyber Mentoring Event in Melbourne, 20 November 2017, organised by the Department of the Prime Minister and Cabinet, in partnership with PwC and Telstra.

You’ll hear from Sandra Ragg, Head of the Office of the Prime Minister’s Cyber Security Special Advisor Lead Cyber Resilience Taskforce, Erica Hardinge, Head of Security Enablement at ANZ Bank, Michelle Price, Chief Operating Officer at AustCyber, and Megan Haas, Partner, Cyber Security and Forensic Services at PwC, which was where the event was held.

The four talk about the need to increase diversity, both with respect to gender and thinking, cyber career pathways that aren’t necessarily starting from an IT background, as well as cyber crime and the need to educate Australians in a digitally ubiquitous world. We also talk about building the Australian cyber security industry and making it an international export powerhouse, as well as the upcoming mandatory data breach notification laws, which comes into effect in February 2018.

Our seventh interview at #AISACON17 in Sydney in October, is with the President of the Cyber Threat Alliance, Mr Michael Daniel.

In this interview, Michael Daniel talks about his new role at the Cyber Threat Alliance, or CTA, and how his organisation and the 12 member companies are sharing threat intelligence at speed and scale.

In particular, you’ll hear about the CTA’s ‘sharing rule’, that ensures collaboration, and improves all members’ products and services. And this sharing is quick. Michael highlights that the time from detection by one member company to deployment by another member company can be as short as only 54 minutes.

 

In this interview you’ll hear cyber security vendors working together to collectively, systemically disrupting the ‘bad guys’.

On October 25 the CTA announced the addition of Sophos (http://www.sophos.com/) and Saint Security (http://stsc.com/en/) as affiliate members.

You’ll love this interview with Charlie Miller and Chris Valasek. As the sixth interview at #AISACON17 in Sydney, we met these celebrity 'security architects', who first hacked two non-connected, commercially available cars using a diagnostic port. While some consideration was made to security in the original software, Chris and Charlie highlighted that with a little problem solving, and a lot of patience, control systems, effecting steering, brakes and lights could be manipulated. Later, the dynamic duo set their sights on 'remotely' hacking a Jeep SUV. In this interview, we’ll learn how they were able to bridge the gap between the ‘head unit’ or radio, and the control systems, and take control. All while the driver was travelling at over 100 km per hour.  Enjoy the discussion!

Morry Morgan and Chris Cubbage catch up on the week's events and upcoming events for MySecurity Media - including a look at key articles in the Asia Pacific Security Magazine, Nov/Dec 2017, with Kaspersky Lab's cyber-espionage research on 'Dropping Elephant', and interviews with F5 Networks (https://issuu.com/apsm/docs/apsm_nov_dec_2017/20), RSA (https://issuu.com/apsm/docs/apsm_nov_dec_2017/12), WithYouWithMe (https://issuu.com/apsm/docs/apsm_nov_dec_2017/22) and features with L’Oréal-UNESCO’s 2017 Australian Fellow for Women in Science (https://issuu.com/apsm/docs/apsm_nov_dec_2017/14) and the NetEvents ‘Innovators in Cloud, IoT, AI & Security’ program at the Dolce Hayes Mansion, San Jose (https://issuu.com/apsm/docs/apsm_nov_dec_2017/48). Extra plug for Dr. Gavriel Schneider's new book (https://issuu.com/apsm/docs/apsm_nov_dec_2017/24) the ASD Case Study delivered at #AISACON17 (https://issuu.com/apsm/docs/apsm_nov_dec_2017/14). Cover Singapore Feature by Jane Lo, with data collection and cybersecurity insights into the Singapore Formula One Motor GP (https://issuu.com/apsm/docs/apsm_nov_dec_2017/30), Singapore’s International Cyber Week, Cyber Security for Transportation Summit 2017 and Cyber Security for Airports and Maritime Summits. Assessments of the Australian Cyber Security Strategy and Protecting Crowded Places from Terrorism Strategy and upcoming events with RMIA in Canberra, ISACA in Melbourne and AISA in Perth.