In this episode, Benyazwar, the Chief of Security Risk Consulting of Nexagate takes us on a deep dive into the world of ISO 27001. Beny and I explore the differences between ISO 27001 and ISO 27002, and the rationale behind the ISO 27001:2022 update after nearly a decade.

We discuss the transition from the 2013 to the 2022 version of the standard, weigh the differences in both versions for organizations seeking certification, and delve into the role of ISO 27001 in the era of cloud-native businesses, data breaches and cyber-attacks

Our conversation navigates the increasing importance of certifications like ISO 27001 in demonstrating security robustness. We also address the challenges of certification processes for organizations with centralized IT functions.

Finally, we wrap up with a discussion on the ISO 27000 series documents and innovative approaches to ISO 27001 implementation. Join us for this insightful conversation on the evolution and future of ISO 27001.

In this episode, Rodney and I explore the challenges and opportunities in the rapidly evolving cyber security career landscape. Rodney, an industry expert, shares his insights on the current talent shortage, hiring strategies, and the importance of aligning expectations in the field.

We delve into how to enter the cyber security domain, discussing the role of education, professional courses, certifications, and transferable skills. The conversation also touches on the CISO role, career progression, common hiring mistakes, and resources for networking and mentorship.

Finally, Rodney shares his thoughts on potential improvements in the cyber security career path and what keeps him motivated to be in this ever-changing industry.

In this episode of Kopi-O with CISO Podcast my guest Tevanraj and I dive deep into the world of DevOps and the growing importance of security integration in the software development life cycle. Tevanraj, a DevOps expert, shares his journey into the field and discusses the significance of DevSecOps in modern software development. We explore the "shift left" notion, the impact of dynamic code scans, and the need for developer security training.

Our conversation also addresses the challenge of balancing security with the speed of business, and the importance of risk tolerance levels in application

Finally, we discuss common mistakes in DevOps security, valuable advice for aspiring DevOps engineers, and Tevanraj’s vision for the future of DevSecOps.

Tune in to gain valuable insights and learn how to navigate the rapidly evolving world of DevOps and DevSecOps to ensure secure, high-quality software applications.

In this episode of Kopi-O with CISO Podcast I sit down with Prof Jazz (also known as Dato’ Husin Jazri), a seasoned cyber security expert with decades of experience in the field and also the founder of CyberSecurity Malaysia. Throughout the episode, Prof Jazz shares his insights on a range of topics related to cyber security, including his journey into the field, his role in championing cyber security at the national level, and his perspectives on the current cyber

In the episode, Prof Jazz also discusses the effectiveness of laws and legislative frameworks in deterring cybercrime, the challenges faced by government agencies in strengthening their cyber security, and his advice for authorities and regulators to fortify national and sectoral cyber security.

Finally, Prof Jazz shares his thoughts on what he would do differently in the cyber security field, and how he continues to engage with the domain outside of his current role.

Join me as I delve into the mind of a true cyber security pioneer, and gain valuable insights into how we can better protect ourselves and our organizations in the digital age.

Hi everyone! I am Sivanathan, a cyber security enthusiast who has served as the CISO for several firms, including the major credit rating agency in Malaysia and in a cyber risk supervisory capacity for the Malaysian Central Bank. Kopi-O with CISO Podcast is where I hope to create a platform for Malaysian cyber security professionals and entrepreneurs to share their insights and experiences with the rest of the world.

This podcast is intended for anyone who is interested in cyber security and how security functions on various platforms.