Hacked Off

In 2016 it was reported that the Russian government targeted the US election system, and whilst there wasn’t any evidence that votes were tampered with, they could have changed data or even deleted voters.

With the start of the US presidential 2020 election campaigns, we take a look at why you’d want to hack an election and the pros and cons of online voting.

Key points:

1’00 Why would you want to hack an election?

4’13 The challenges of online voting

8’34 The ‘public intrusion test’ on the Swiss Government’s voting system

15’02 The benefits of online voting

17’24 Electronic voting machines

22’32 The Mueller Report - Russian interference in the 2016 presidential election

27’29 The pros and cons of paper ballets

Useful links:

Demystifying Tech Podcast: Will the UK ever get to vote electronically? - https://www.businesscloud.co.uk/podcasts/will-the-uk-ever-get-to-vote-electronically

Defcon report on Cyber Vulnerabilities in U.S. Election Equipment, Databases, and Infrastructure - https://www.defcon.org/images/defcon-25/DEF%20CON%2025%20voting%20village%20report.pdf

Download on iTunes: apple.co/2Ji61Ek

Listening time: 32 minutes

For more information, follow us on Twitter @secarma or email us at [email protected]

Hosted by: Holly Grace Williams, Technical Director at Secarma

Ever wondered if you should be hiring a cybersecurity advisor or CISO, or whether the roles you currently have in place are right for your organisation? Mark Avery, Independent Cybersecurity Advisor, talks about the different CISO options, the pros and cons of these roles and how they can help support your organisation. He also discusses the challenges of the CISO role. How it is often misunderstood, resulting in demanding workloads and eventually burn out.

Key points:

0’24 Guest Introduction

2’16 Understanding and implementing security foundations

4’00 How would an organisation know they need a cybersecurity advisor?

7’17 What scale of company needs a cybersecurity advisor?

9’55 Different types of cybersecurity advisors and CISOs

19’29 How to decide what kind of cybersecurity person is right for your business

21’39 The challenges of the CISO role

24’58 Why might a company not want a CISO?

27’37 Choosing the right policies for your company

Useful links:

www.clubciso.org

Download on iTunes: apple.co/2Ji61Ek

Listening time: 35 minutes

For more information, follow us on Twitter @secarma or email us at [email protected]

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Marc Avery, Independent Cybersecurity Advisor

Book author, founder of the IN Security movement, judge to numerous awards in business, books and security; Jane Frankland has worn many hats over her 22 years in cybersecurity.

She talks with passion about her work with leaders and women in cybersecurity, helping them build enviable and impactful results, going from being burnt out and under appreciated to being motivated, connected and sought after.

Key points include:

0’41 Guest introduction

3’24 Burn out in security industry

6’23 The benefits of a peer network

13’24 The fear of putting yourself out there

19’14 The challenges of writing a book

29’48 Building a peer network

32’29 The IN Security Tribe

38’45 The challenges of staff turnover in cybersecurity

43’54 The importance of wellbeing for CIOs

Useful links:

www.jane-frankland.com

*IN Security by Jane Frankland https://www.amazon.co.uk/InSecurity-Failure-Attract-Retain-Cybersecurity/dp/178133269X

Download on iTunes: apple.co/2Ji61Ek

Listening time: 48 minutes

For more information, follow us on Twitter @secarma or email us at [email protected]

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Jane Frankland, CISO Advisor, Author, Keynote Speaker & Champion for Women in Cybersecurity

Whilst the British Airways breach of 2018 is 'old news' it has been bought to the fore front of everyone's mind with the recent announcement that they face a record-breaking GDPR fine of £183 million.

Secarma's Technical Director discusses what we know about the BA breach, the misconceptions over what may have happened and the remediation steps you can take after a data breach.

2'25 - What happened to British Airways?

13’31 - Attack misconceptions

15’51 - Have there been similar attacks?

21'45 - Can you remove third party scripts? If not what should you do?

22’27 - Are you using Content Security Policy and Sub Resource Integrity?

Download on iTunes: apple.co/2Ji61Ek

Listening time: 29 minutes

For more information, follow us on Twitter @secarma or email us at [email protected]

Hosted by: Holly Grace Williams, Technical Director at Secarma

Mike Koss, Head of Security and Risk at N Brown Group reminisces about the ‘good old days’ when security was just a hobbyist thing, his career in IT security and how he believes the future of the CISO role it should be developed into a business position and a separate technical position.

Key points include:

0’30 Guest introduction

1’38 IT security in retail

11’21 Security relationships with the board

14’37 When security was just a hobbyist thing!

24’13 The pros and cons of bug bounties

30’16 Capture The Flag vs testing in the ‘real world’

43’43 Should CISOs have a technical degree or a business degree? The future is a CTSO role!

49’20 Defence in depth, not just an annual Pentest

Download on iTunes: apple.co/2Ji61Ek

Listening time: 60 minutes

For more information, follow us on Twitter @secarma or @secarmalabs or email us at [email protected]

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Mike Koss, Head of Security and Risk at N Brown Group

Secarma’s Technical Director Holly Grace Williams speaks to Mo Ahddoud Security Consultant and interim CISO, about his vast experience in the cybersecurity industry. They cover everything from the difference between a Security Manger and CISO role, the benefits of working with start ups and a little bit about his experience working with critical infrastructure.

0’49 Guest introduction

1’50 The Security Manager role vs the CISO role

4’06 The CISO role in different sectors

10’04 How to separate the snake oil from the useful technology

13’41 The benefits of working with start-up sized vendors

22’40 Tailoring vendor offerings

30’08 To patch or not to patch

36’25 The supply chain risk

46’34 The affect of IOT on critical infrastructure

Download on iTunes: apple.co/2Ji61Ek

Listening time: 55 minutes

For more information, follow us on Twitter @secarma or @secarmalabs or email us at [email protected]

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Mo Ahddoud, Security Consultant and interim CISO

We talk to Zeshan Sattar, Director of Learning & Skills Certification at CompTIA, about how organisations like CompTIA can help people not only in getting certified, but reskilling, upskilling and networking within IT and Cybersecurity.

1’53 What is CompTIA?

6’00 Developing the exams with industry experts

8’24 Continuing professional development with certifications

13’56 Who are these certifications for and where do you start?

18’36 What is a BETA exam?

22’56 CompTIA isn’t just exams! How they help you reskill or upskill.

33’43 The CompTIA Certification Roadmap – choosing the right certification for your role and level

38’24 It’s all about community and networking!

Useful links:

CompTIA Certification Roadmap - https://certification.comptia.org/why-certify/roadmap

CompTIA Security+ Hub - https://certification.comptia.org/it-career-news/hub/comptia-security

Cyberseek - https://www.cyberseek.org/

Download on iTunes: apple.co/2Ji61Ek

Listening time: 42 minutes

For more information, follow us on Twitter @secarma or @secarmalabs or email us at [email protected]

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Zeshan Settar, Director of Learning & Skills Certification at CompTIA

We talk to Senior Security Consultant Thomas Ballin, on what he thinks are the major facets of red team engagements, how they can differ by provider or scenario, and how he thinks they might evolve over time.

0’32 Thomas’ unconventional route into the cybersecurity industry and his role at Secarma

4’31 The many ‘definitions’ of penetration testing

7’30 The benefits of red teaming and where to start

15’02 The race between attack and defence

20’15 Debriefing after a red team

26’00 The future of red teaming

31’31 What you should do after a red team

37’47 The infrastructure that’s used for red team engagement

41’00 How to become a red teamer!

Download on iTunes: apple.co/2Ji61Ek

Listening time: 47 minutes

For more information, follow us on Twitter @secarma or @secarmalabs or email us at [email protected]

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Thomas Ballin, Senior Security Consultant at Secarma

We take a look at the history of malicious software, some of the oldest known attacks and how it has changed over the years. Holly also speaks about her own personal experience of the 2017 Notpetya attack and predicts what the future holds for malicious software attacks. It doesn’t look good…

1’22 Different types of malicious software

5’33 The oldest known malware attacks

12’13 Dealing with the Notpetya attack

16’14 Automated propagation

19’24 Manual propagation

20’24 The future of malware

21’47 Why anti-malware isn’t perfect

Download on iTunes: apple.co/2Ji61Ek

Listening time: 33 minutes

For more information, follow us on Twitter @secarma or @secarmalabs or email us at [email protected]

Hosted by: Holly Grace Williams, Technical Director at Secarma

We share the talk we presented at UKFast’s recent Cybersecurity 101 workshop, in a little more detail, discussing where companies should start with cybersecurity and how they can be comfortable that they have covered a broad enough area of security to be safe.

1’41 What is Cyber Essentials and is it right for your company?

5’57 Risk management – building a security culture and getting the board involved

10’39 Security protections – what you can do yourself and when to get a third party involved

19’43 Incident detection – alert generation, automatic monitoring and training the team

27’57 Minimising impact – response testing and planning, root cause analysis and backups

Download on iTunes: apple.co/2Ji61Ek

Listening time: 39 minutes

For more information, follow us on Twitter @secarma or @secarmalabs or email us at [email protected]

Hosted by: Holly Grace Williams, Technical Director at Secarma