KBKAST

In this episode, we are joined by Mary Carmichael (Vice President – ISACA Vancouver) as we dive deep into the Generative AI 2023: An ISACA Pulse Poll. Mary discusses addressing vulnerabilities and biases in AI, the societal impact on jobs and the need for upskilling, and the importance of responsible AI deployment and ethical considerations.

Mary Carmichael, CISA, CFE, CPA, is Director, Risk Advisory, at Momentum Technology (Vancouver Canada), and member of ISACA’s Emerging Trends Working Group and Risk Advisory Committee.

Read more about it:

In this episode, we are joined by Cricket Liu (EVP Engineering, Chief DNS Architect – Infoblox) as we dive deep into the critical role of Domain Name System (DNS) security in closing the gap in today’s interconnected world. Cricket sheds light on the importance of protecting critical infrastructure and the significant role DNS plays in enhancing visibility and blocking threats. Brought about by his unexpected entry into the field of DNS, his extensive experience in the evolution of the internet from its nascent stages brings historical context to the dialogue, uncovering parallels between the apprehension surrounding generative AI technology and early sentiments toward the internet’s unknown prospects.

Cricket Liu is one of the world’s leading experts on the Domain Name System (DNS), and serves as the liaison between Infoblox and the DNS community. Before joining Infoblox, he founded an Internet consulting and training company, Acme Byte & Wire, after running the hp.com domain at Hewlett-Packard. Cricket is a prolific speaker and author, having written a number of books including “DNS and BIND,” one of the most widely used references in the field, now in its fifth edition.

In this episode, we are joined by James Campbell (CEO and Co-Founder of Cado Security) as we explore modern digital forensics and the complexity of the cloud. They discuss the transition from on-premise to cloud operations, the unique risks associated with ephemeral cloud infrastructure, and the growing need for automation in digital forensics to streamline routine tasks and enable security professionals to focus on advanced problem-solving. Join us as we unravel the intricacies of cloud security, automation in digital forensics, and the continuous learning and adaptation necessary to stay ahead in the rapidly evolving industry.

With over 15 years experience helping global organisations tackle sophisticated cyber espionage and criminal campaigns, James has a deep passion for cyber incident response, forensics and cyber crisis. Prior to founding Cado Security, Campbell served as a Director at PwC building the Cyber Incident Response service. Campbell’s background also includes a career in intelligence previously leading Australia’s National Incident Response capability as the Assistant Director of Operations at the Australian Signals Directorate. James is an active thought leader having spoken at various conferences including Blackhat, Cloudsec, Crestcon, and the Forensics Europe Expo.

In this episode, we are joined by Alex Tilley (Head of Threat Intelligence, Asia Pacific and Japan – Secureworks) as we dive deep into the challenges that come with fostering a strong security culture within organizations. We explore the importance of cross-departmental collaboration, the need for clear and engaging cybersecurity training, and the emotional hurdles of dealing with security incidents.

Alex shares valuable insights in handling crises, addressing ego-driven conflicts, and the crucial role of the board in cyber. Join us as we unravel the intricate layers of today’s security culture and learn from his experiences and expertise.

With over 20 years of experience in computer security and cybercrime, Alex Tilley is a highly awarded cybercrime researcher. Beginning his career in the online casino industry on Australia’s Gold Coast, Alex went on to implement and administer many varieties of network security technologies within Australia’s banking industry. Alex was on the forefront of research and countermeasures when phishing and malware first began to attack banking platforms and customers. When he later became the Australian Federal Police’s senior cybercrime technical analyst, he combined his technical background with an analytical approach to discover “who” the cybercriminals were, why they were attacking specific targets, and what they were looking for. This included identifying exposing online child predators as well as cybercriminals.  During this time Alex become a key member of the operations team responsible for many high profile cases.

In this episode, we are joined by Rachael Greaves (CEO and Co-Founder at Castlepoint Systems) as she sheds light on the far-reaching consequences of records mismanagement and the integration of artificial intelligence (AI) in decision-making processes. The discussion delves into the ramifications of mishandling information, the advent of new privacy regulations, and the imperative need for efficient records governance in the age of evolving technology.

Rachael highlights the need for a new approach to managing information, acknowledging the challenges of audits and their impact on users and systems. She emphasised the potential of AI technology in managing information and its effects on regulators and businesses, particularly as noncompliance in audits and increased pressure from regulators due to cybersecurity and privacy concerns become prevalent.

Rachael Greaves is CEO and Co-Founder at Castlepoint Systems, and has consulted on large-scale records, security and audit projects in government and regulated industries with complex integrated environments. Rachael’s credentials include: Certified Information Systems Auditor (CISA), PRINCE2 (Practitioner), Certified Data Privacy Systems Engineer (CDPSE) ITIL v3 (Foundation), AIIM Certified Information Professional (CIP), and AIIM SharePoint Information Management Specialist. She is also an IIBA member.

In this episode, we are joined by Jenai Marinkovic (Executive Director & Chairman of the Board – GRC for Intelligent ecosystems or GRCIE) as we discuss ISACA’s White Paper – The Promise and Peril of the AI Revolution: Managing Risk. We discuss the risks, challenges, and societal impact of generative AI, while also touching on the urgent need for policies, frameworks, and control structures to address these evolving concerns. Jenai also talks about the crucial role of ethical standards in the deployment of AI, the implications of job displacement and skills adaptation, and the future of AI through the lens of governance, cybersecurity, and training.

Jenai Marinkovic is a multidisciplinary technologist and strategist with 20 years of experience in architecting, building and securing systems at scale. She has designed and operated in real-time over the top streaming ecosystems that power live sports, gaming, and entertainment. She’s also worked in biomedical manufacturing and laboratory diagnostics, healthcare tech and robotics in agriculture.

Jenai’s worked with artificial intelligence, its impact on diversity and inclusion as well as improving human empathy towards machines. She has expertise in designing the next generation security experiences necessary to support digital transformation She has built and run design, architecture, innovation, engineering, security and operations teams. Her security expertise spans security architecture, engineering, defense, and forensics and invented a cyber defense framework for large scale breaches based on American football. Jenai has worked for large enterprise brands including DIRECTV, Electronic Arts, Beckman Coulter and international investigations firms such as Kroll.

Now she serves as the Executive Director & Chairman of the Board at GRC for Intelligent ecosystems or GRCIE (Pronounced Gracie).

In this episode, we are joined by Dan Elliott (Principal for Cyber Security Risk Consulting – Zurich Resilience Solutions) as we delve into the critical topic of aligning cyber leaders with business objectives. We explore the challenges of communicating cyber risks effectively, dissect the need for a common language in cybersecurity, and discuss the evolving role of CISOs as business enablers. Join us as we tackle the intricacies of cyber risk management, the importance of understanding business goals, and the quest for a universal language in the cyber world.

Dan Elliott is the Principal for Cyber Security Risk Consulting at Zurich Resilience Solutions (ZRS) Canada and is responsible for supporting ZRS’s clients in making risk-based cybersecurity decisions to improve their overall organizational resilience. Dan has over 15 years of experience in national security and risk management and brings a unique perspective to cyber risk, having spent six years as an Intelligence Officer with the Canadian Security Intelligence Service (CSIS). Prior to that, he spent nearly a decade in law enforcement and intelligence, investigating multinational criminal organisations both online and in person. He evaluates cyber risk with the knowledge of international threat actors and the potential impact they pose to businesses and critical infrastructure, helping organizations improve their overall risk posture.

Dan is also trained in multiple cyber risk management frameworks and holds specialized expertise in stakeholder management and strategic program design. He speaks internationally about the communication challenges that exist between traditional technical professionals and business leaders. He is a regional board member of the Risk and Insurance Management Society (RIMS), a Risk Fellow (RF) and is a Certified Risk Management Professional (CRMP and CRM). Dan is a contributing member of the Cybersecurity Advisors Network (CyAN), a volunteer member with ISACA and is accredited as Certified in Risk and Information Systems Controls (CRISC).

In this episode, we are joined by Tulin Sevgin (Director – National Cyber Security Practice, MinterEllison) as we unravel the complexities and potential oversights in working with vendors. Tulin sheds light on the critical need for due diligence in the procurement process to mitigate future risks, emphasising the impact of vendor changes on data access and infrastructure. Tulin navigates the labyrinth of vendor risk governance and emphasizes the significance of ongoing monitoring. Join us as we delve into the intricacies of vendor assessments, the challenges involved, and the supply chain landscape.

Tulin Sevgin is a strategic thinker and cyber risk management specialist with experience in public and private sectors. Tulin has held senior positions with Commonwealth Bank, Westpac, Optiver and Deloitte.

Amongst Tulin’s career she has successfully started up and led a cybersecurity practice at a boutique consultancy and is now leading the TPRM team at UpGuard growing the CyberRisk product and services.

Tulin specializes in cyber risk management including TPRM, cyber risk threat analysis, prevention,

In this episode, we are joined by Geoff Schomburgk (Regional Vice President, Asia Pacific & Japan – Yubico) as we explore the transition from traditional username and password systems to passwordless experiences. Together, we discuss the frustrations with current security methods, the need for consumer awareness, and the importance of businesses and government setting the standard for security measures. From practicality and usability to the business value of security technologies, Geoff delves into the evolving conversation around cybersecurity and the potential for multifaceted benefits. Tune in for a deep dive into the future of digital identity protection and the impact of modern authentication methods.

At Yubico, Geoff is responsible for driving the Yubico business across Australia and New Zealand, working with partners and enterprise customers to implement secure modern authentication, helping make the internet safer for all.

Geoff brings a strong customer focus and a proven ability to implement complex technology solutions across a range of industries, including telecommunications, utility and transport sectors across Australia, Asia and Europe.  Critical to the success of these projects is the definition and realisation of tangible business value, where the combination of Geoff’s business consulting approach and project delivery experience consistently deliver business value.

Geoff is an experienced senior executive with a background in engineering and strategy consulting and over 30 years’ experience in the global information and communications technology (ICT) industry.  Geoff has a Bachelor of Engineering and MBA and is also a Non-Executive Director and business mentor to several Not For Profit (NFP) organisations. He is a Fellow of the Australian Institute of Company Directors (GAICD), with B.E. (Hons) and M.B.A.

In this episode, we are joined by Pierre Liddle (Co-Founder, Plerion) dive deep into the ever-evolving landscape of cloud security, tackling misconceptions, and examining the potential of cloud native application protection platforms (CNAPP) as a line of defense against attacks. We shed light on the dynamic nature of security threats, the benefits of cloud technology, and the strategic importance of finding the right partners.

Pierre Liddle is a distinguished expert with over 20 years of dedicated experience in the dynamic field of security. As the Co-founder and CTO of Plerion, he serves as the guiding force behind the company’s strategic vision. Pierre’s extensive career includes an impressive seven-year tenure at AWS, where he played a crucial role in driving global internal security programs and collaborating with customers to design, build, and manage secure cloud workloads. This direct and hands-on engagement has equipped him with an unparalleled understanding of the precise challenges and pain points that organisations encounter in the realm of cloud security.

With a profound commitment to enhancing cloud security practices, and a vision to make the world a safer place by empowering customers to conquer the future, Pierre brings his wealth of knowledge to the forefront at Plerion. His leadership and domain expertise empower the company to provide cutting-edge solutions that address the evolving needs of businesses in an increasingly digital world. Pierre’s invaluable insights and dedication to innovation underscore his role as a driving force behind Plerion’s mission to revolutionise cloud security.