KBKAST

We are thrilled to announce the arrival of a new addition to our podcast family on KBI.FM: DevSecOps, brought to you by Cordant.

Hosted by the insightful trio of Tom Walker (the infrastructure tragic), Scott Fletcher (the security ninja), and James Vincent (the cloud alchemist), this show promises to deliver a deep dive into the world of cloud, security, and infrastructure.

Here are 3 key takeaways for you:

“The views, thoughts, and opinions expressed in this interview are solely Vishwanath Nair’s and do not necessarily reflect the views, policies, or positions of his employer, clients, or any affiliated organizations.”

In this episode, we sit down with Vishwanath Nair, Head of Cyber Risk and Compliance at Baptist Care, as he explores the evolving partnership between IT and business. Vishwanath discusses the critical role of IT in digital transformation, the importance of data as a key business asset, and the proliferation of AI tools in enhancing IT-business alignment. He addresses the historical lack of trust between IT and business, emphasizing the need for effective communication and co-design to improve this relationship.

With over 25 years of experience, Vishwanath (Vish) is a leading authority in Risk Management, specializing in Information Security (InfoSec), IT Service Management, and Business Resilience on a global scale. He has led multi-million-dollar transformation initiatives across key sectors such as Public Sector, Critical Infrastructure, Healthcare, and Manufacturing.

Vish’s recent work as the inaugural Chief Information Security Officer (CISO) at the NSW Electoral Commission earned him the prestigious CSO30 Business Value Award 2024 by Foundry. His role was critical in safeguarding the Commission’s cybersecurity, where he developed security services from the ground up, embedding them into the organization’s processes to support the delivery of secure and transparent elections.

Currently, Vish serves as the Head of Cyber Risk and Compliance at BaptistCare NSW/ACT, one of Australia’s leading Aged Care providers, where he oversees the security and compliance frameworks that protect critical services.

Previously, as Global Continuity Lead at Emirates Airlines, Vish was responsible for enhancing IT and Business Continuity practices globally. He also established Cyber/IT Trusted Advisory services, aligning business and IT strategies for optimal results across the airline’s operations.

Known for his collaborative, inclusive leadership style, Vish has built and nurtured high-performing teams, maintaining exceptional retention rates. His commitment to professional development and industry advancement is reflected in his active contributions to organizations like ISACA, AISA, and BCI, where he has served on the Board of Directors for ISACA UAE and BCI UAE.

Vish is also a prolific public speaker and has earned numerous industry accolades, solidifying his position as a trusted leader and influential voice in the cybersecurity and risk management sectors.

In this episode, we sit down with Shannon Murphy, Senior Manager, Global Security and Risk Strategy from Trend Micro, as she explores the C-suite security challenges facing organizations today. Shannon emphasizes the importance of proactivity in cybersecurity, highlighting the shift from a reactive to a predictive approach to anticipate and counteract adversary strategies. We delve into the pressures from infrastructure shifts and adversary ingenuity, discuss global cybersecurity trends, and examine the increasing customization in social engineering attacks.

Shannon also shares insights on the evolving role of AI in cybersecurity and the need for greater integration and proactive practices within organizations to reduce the risk of breaches.

Shannon brings a decade in enterprise, consumer, and cybersecurity technology experience across high-growth industries focusing on the role of security in business and the workforce of the future. A subject matter expert in emerging security operations technologies including XDR, generative AI, exposure management and Zero Trust implementations, she is at the forefront of innovations that help organisations stay ahead of evolving threats.

Shannon is a security champion for business leaders, helping organisations translate and validate the business value of a resilient risk posture and culture that puts security first. As a strategist, she works with cybersecurity leaders and partners to develop scalable solutions that address unique and emerging threat models.

Further reading:

In this episode, we sit down with Fred Thiele, Chief Information Security Officer from Interactive, as he discusses the importance of cybersecurity for business resilience. Fred delves into the concept of business resilience, emphasizing the need to prepare for worst-case scenarios to ensure continuity during crises. He explains that understanding critical systems and establishing a clear decision-making framework are essential for effective business continuity management. We also discuss the increasing reliance on technology systems, the importance of scenario training to build muscle memory for real-life incidents, and the challenges companies face in adapting to dynamic cyber threats.

As Interactive’s Chief Information Security Officer, Fred is responsible for Interactive’s organisational cyber security and supporting Interactive’s customers to build resilient cyber security solutions.

Fred has always been interested in systems: whether it’s the mechanics of a car or the application layers of network architecture, he enjoys understanding the end-to-end process and enhancing their capabilities.

Whether defending a small business or a national grid, Fred focuses on proactively building the ‘castle walls’ of cyber defence to prevent incursions, rather than relying on ad-hoc threat responses.

Over three decades in the industry, Fred has found that cyber security isn’t just about protocols; he sees it as a holistic mindset that empowers us to thwart threats at every level, safeguarding our digital landscape.

In this episode, we sit down with David Trossell, CEO and CTO of Bridgeworks, as he discusses the advancement of WAN acceleration technology and its impact on data transfer speeds. David explores the historical evolution from broadband connectivity to modern-day WAN acceleration, highlighting the limitations of traditional WAN optimization methods. He explains how AI-driven parallelization can address latency issues and significantly enhance data throughput across networks.

Additionally, David provides insights into misconceptions about WAN acceleration and optimization, emphasizing the importance of secure backups, air-gapped systems, and the resurgence of tape technology for robust data protection against cyber threats.

David Trossell is a recognised leader in the storage technology industry. He is CEO and CTO of award-winning WAN Acceleration company Bridgeworks, where he holds 18 technology patents. David is also committed to supporting British STEM initiatives and developing technology leaders through UK university and college apprenticeship programmes.

We’re thrilled to announce the launch of KBI.FM, our dedicated podcast network and channel aimed at creating a specialized precinct for cybersecurity podcasts.

Here’s what you need to know:

As we continue this journey, we’re here to deliver top-notch cybersecurity content that keeps you informed and engaged.

In this episode, we sit down with Mark “Squiz” Squirrell, keynote speaker from Global Frontline, as he shares insights from his journey from Arafat to Everest. Mark emphasizes the importance of making early decisions and being flexible when dealing with unforeseen variables. He discusses the critical role of soft skills in building effective relationships, both within and outside organizations, to mitigate crises. Mark also highlights how training and preparation under simulated pressures can enhance decision-making abilities and resilience. He delves into managing stress in high-pressure situations, advocating for recognizing stress levels and ensuring time for recovery.

From car bombings, the Ebola Outbreak to meeting Yasser Arafat and making it to the summit of Mount Everest, Mark ‘Squiz’ Squirrell OAM has experienced more than many can dream about.

Squiz was awarded the coveted “Green Beret” whilst serving with the Australian Commando’s.  His tenure with the military provided him with the skills and courage to succeed amongst adversity and turmoil. It was the perfect grounding for a career as an International Aid Worker.

Squiz escorted food convoys through the Gaza Strip, negotiated with the Liberation Tigers of Tamel Eelam (Tamil Tigers) and brokered deals with Somali Clansmen to ensure the safe delivery of United Nations food aid.  In doing so, he has mastered the challenges of performing under pressure, communicating effectively and building relationships.

In addition to this, Squiz has taken the concept of being motivated at work to an all new high.  He was inspired by his organisation, the United Nations World Food Programme (WFP), and the impoverished people that it feeds, to climb to the top of the world to help raise awareness of the global hunger crisis. After a gruelling six week ordeal, Squiz raised the WFP flag on the summit of Mount Everest. The inspiring and thrilling recount across glaciers and up exposed cliffs reveal the motivation, habits and adversity skills that facilitated his success.

Squiz has a Bachelor of Business (HRM) and has published a memoire titled From Arafat to Everest. In 2019 Squiz was recognised in the Australia Day Honours List with an Order of Australia Medal (OAM) for “service to the international community through humanitarian aid”. He continues to deploy on short term assignments to emergency zones, such as the Ebola Outbreak in West Africa and Nepal Earthquake.

Now based out of Melbourne, Squiz provides keynotes, workshops and team building activities to develop workplace performance.

In this episode, we sit down with Kobi Leins and Kate Carruthers, directors from Info Sphere Education, as they delve into the intertwining issues of artificial intelligence and cybersecurity. Kobi discusses how AI can expedite security breaches and the need for cybersecurity professionals to understand and mitigate AI-induced vulnerabilities. Kate expands on this by highlighting the utilization of generative AI by attackers and the importance of data and AI governance within organizations. They both explore the challenges companies face in managing these technologies, emphasizing the necessity of upskilling and proper communication between AI and cybersecurity professionals.

Kate Carruthers is an experienced data and technology leader who has expertise in analytics, AI, data management, Data Governance and AI governance. She is a passionate educator who loves sharing her knowledge and helping people to develop their own AI and data expertise.

Kobi Leins is a reformed lawyer, academic in tech and law, and is a technical expert for Standards Australia. She loves to teach, learn and be challenged at the edges of tech and governance.

The Essential Eight

The mitigation strategies that constitute the Essential Eight are:

patch applications

patch operating systems

multi-factor authentication

restrict administrative privileges

application control

restrict Microsoft Office macros

user application hardening

regular backups.

In this episode, we sit down with Dr. Ivano Bongiovanni, General Manager at AUSCERT, as he discusses how to get the most from maturity-based and risk-based approaches in the cybersecurity arena. Ivano delves into the importance of balancing both approaches to enhance cyber resilience, the role of organizational size and industry mandates, and the need for critical assessment of cyber risks. We also explore the challenges of decision-making in risk management, the impact of subjective judgment, and the significance of quality data sources. Ivano emphasizes a collaborative approach involving various organizational constituencies and the crucial role of effective communication and storytelling in cybersecurity leadership.

Ivano is the General Manager of AUSCERT. He is also a researcher, consultant, author, and speaker whose work focuses on the managerial and business implications of Cybersecurity.

A Lecturer in Information Security, Governance and Leadership with the UQ Business School and a member of UQ Cyber, Ivano helps business leaders and executives make evidence-based decisions in cybersecurity. With a professional background in risk and security management, Ivano’s work bridges the gap between technical cybersecurity and its repercussions across organisations. He has advised ministers, policy-makers, board members, and senior executives on strategies, governance structures, policies, and training programs for effective cybersecurity management. Ivano is also an experienced facilitator in the fields of Design Thinking and Design-Led innovation, having run since 2015 more than 50 design-led workshops and longer projects for public and private sector organisations.

Prior to UQ, Ivano worked as a Research Fellow with the Adam Smith Business School (University of Glasgow) and a Postdoctoral Fellow with the PwC Chair in Digital Economy (QUT). In this role, he worked with public and private sector organisations in projects aimed at facilitate their transition into the Digital Age. Ivano obtained his PhD from QUT in 2016, with a thesis on safety and security management in Australian airports. His academic career includes stints with Bocconi University and SDA Bocconi School of Management (Milan), where he worked as a faculty member and consultant for three years.

He also worked as a Deputy Venue Security Manager at the XX Winter Olympic Games – Turin 2006 and as a Police Officer for the Italian Ministry of Interior.

He has a double MSc in Management of Public Administrations and International Institutions (Bocconi University, Milan) and International Security (Sciences Po, Paris).

In this episode, we sit down with Jarrod Lucia, Evangelist Architect, AI and SP Infrastructure, APJC from F5, as he discusses securing AI-centric infrastructures, specifically the emerging AI factories powering today’s workload. Jarrod delves into the rise of AI factories, large data centers purpose-built for AI workloads, and the advanced sustainability measures being considered in their design, such as green energy mandates and innovative water recirculation systems.

We also explore the unique security demands of AI factories, explaining the need for both traditional data center precautions and modern zero-trust models. Jarrod shares insights on the various stages of AI factory development and integration, emphasizing the importance of securing data throughout its lifecycle within these specialized environments.

As a seasoned industry professional with over 25 years of experience in Service Provider and Cloud Engineering, Jarrod has developed a unique blend of technical expertise and leadership skills. His background in Mobile and Satellite technologies has equipped him with a deep understanding of network design, implementation, and troubleshooting.

He’s passionate about staying at the forefront of emerging technologies, particularly Artificial Intelligence (AI) and its applications in Cloud, Service Providers, and IoT at scale. The convergence of Edge Networks, Cloud capabilities, and AI Factories will revolutionise industry and how applications are delivered and he’s excited to explore the potential of AI infrastructure and its impact on the future of technology and business.