mnemonic security podcast

Luck favours the prepared.

For this non-technical episode, Robby welcomes someone with a lot of experience working with a particular consequence of security incidents: crisis communication expert Lasse Sandaker-Nielsen. Lasse is a Senior Advisor at First House, one of Norway's largest communications and public affairs agencies, and joins Robby for a discussion on crisis communication best practices from the cybersecurity space, and the most effective ways to respond when you're in crisis mode.

Lasse also shares some of his communication war stories, and his take on whether or not honesty is in fact the best policy.

 Producer: Paul Jæger

Send us Fan Mail

Try to prevent what you can, detect what you can’t prevent and hunt for what you can’t detect.

For this episode about threat hunting, Robby is joined by Andreas Bråthen, Team Lead for threat hunting at mnemonic. Andreas has worked on mnemonic’s threat hunting program for the past three years and shares some of his insights into why the threat hunting domain is so difficult to navigate, and how he defines this somewhat abstract term.

He also goes into detail about the process behind the way mnemonic does threat hunting on a daily basis, what kind of technology you need to support this kind of program, and the difference between the structured and unstructured approach to threat hunting.

Producer: Paul Jæger 

Send us Fan Mail

Why should a CFO care about security?

Is the Chief Financial Officer (CFO) role inherently occupied with saving money, or is it clear for someone in that role that there’s value in spending the extra dime on something like security? Or is the answer somewhere in between?

To help him find the answer to this, Robby welcomes Øyvind Sten Bjerkseth, the new CFO at mnemonic, both to the company and the podcast. 

Prior to joining mnemonic, Øyvind served 5+ years in CFO roles and brings 15 years of experience from Management Consulting, Corporate Finance and Private Equity. He chats with Robby about how security people can get the attention of someone like a CFO, the importance of risk management, and how the CFO role has evolved beyond cost-savings.

Producer: Paul Jæger

Send us Fan Mail

Stress and security

How do you manage your stress level when the very nature of your work is to be on high alert?

In this episode we step away from the technology to focus on the stress of working in security, how it impacts our health and personal lives, and methods for keeping stress in check.

Stress is something we’re all familiar with, especially in our field of work. Diving into this topic, Robby is joined by Edwin Doyle, Global Cyber Security Strategist at Check Point, and Emiliya Zhivotovskaya, CEO and Founder of The Flourishing Center. Edwin has more than 20 years of first-hand experience in stress in the security industry, and Emiliya holds degrees specialising in Applied Positive Psychology and has trained more than 1,500 practitioners around the world. Together they navigate the stress landscape of the cybersecurity industry, the science of stress, and discuss various tools and methods to deal with stress.

https://www.mnemonic.no/podcast 

Send us Fan Mail

Internet of Things | Privacy miniseries

Previously in this miniseries, we’ve discussed the challenges of online privacy with experts in that field. In many ways, what can be known about us through our online behaviour pales in comparison to what someone can find out about us by monitoring measurements of the real world, through ours and others’ Internet of Things (IoT) devices. 

This is what we’ll be talking about today, as we’re joined by Tim Panagos, Co-Founder and CTO of Microshare, a company helping data owners securely store and act on high-volume IoT data using policies with what they call “ridiculous levels of auditing”.

Robby and Tim discuss what happens to privacy when there is no “opt-out button”, and Tim shares his take on how we can organise privacy rules and principles in complex IoT ecosystems.

 Producer: Paul Jæger 

Send us Fan Mail

In this episode, you’ll learn about the digital canaries; honeypots.

Honeypots are passive monitoring systems that appear to be legitimate parts of an organisation’s core infrastructure, designed to alert you about someone trying to illegitimately enter your infrastructure, and help you get insight on the attacker’s tactics, techniques, and procedures. 

Someone with a lot of experience using honeypots is IT & OT Industrial specialist Mikael Vingaard. Mikael has experience working with OT security in industrial control systems (ICS)/ SCADA environments from many of the major energy institutions in Denmark, like Energinet.dk, Danish Energy Agency and EnergiCERT, and now works to educate others about the benefits of honeypots and providing in-house honeypots to organisations. 

Mikael is joining Robby from his test lab to speak about the benefits of using honeypots, the threat landscape for OT systems, as well as what kind of organisations can use honeypots and the maturity level required for doing so.

https://www.honeypot.dk/

Producer: Paul Jæger

Send us Fan Mail

The World of Open Source

How do you know that the open source you are using is secure?

This episode, Robby is joined by Daniel Wisenhoff to talk about open source management. Daniel is the CEO & Co-Founder of Debricked, a Swedish company aiming to help organisations use open source securely in their own software development.

During their conversation, they discuss how most organisations work with open source, and how we can become better at using it. As well as what potential security risks are associated with open source, like vulnerabilities, license issues and poor community health.

https://debricked.com/

Producer: Paul Jæger

Send us Fan Mail

The future of privacy | Privacy miniseries

Is privacy a myth for anyone with a smart phone? Can we actually control what our devices are sharing about us?

We’re continuing our miniseries about privacy with Edwin Doyle, Delegate & Constituent for the World Economic Forum Taskforce on Data Intermediaries, and Global Security Strategist at Check Point.

Eddie chats with Robby about what the Taskforce on Data Intermediaries is working on, and how it might change how we share information in the future, the role of blockchain in this vision and making information about what is being shared about us more accessible.

Stay tuned for more episodes on privacy in the coming weeks.

Host: Robby Peralta 

Producer: Paul Jæger

Send us Fan Mail

What's the worst that can happen with your email?

For this episode, Robby has invited Korstiaan Stam, Digital Forensics & Incident Response Manager in PwC Netherlands, to pick his brain about Business Email Compromise (BEC).

Korstiaan has a lot of experience working with email fraud, and throughout their conversation he shares many of his war stories. He explains the many different ways adversaries are exploiting organisations through this attack vector, and what they can actually do once they gain access to your email.

They also discuss the professionalisation of BEC, what steps are essential when doing BEC investigations, and SolarWinds.

https://github.com/PwC-IR/Business-Email-Compromise-Guide

Host: Robby Peralta 
Producer: Paul Jæger

Send us Fan Mail

We’re continuing our new miniseries about privacy with cyber security researcher Hanna Linderstål. 

Hanna is the Founder and CEO of Earhart Business Protection Agency, a company providing research for governments and organisations on disinformation and online threats. Robby has invited Hanna to discuss modern cyber espionage and lawful intercept; the practice of enabling agencies with legal authorisation to do electronic surveillance of individuals.

They also chat about how cyber espionage has changed after the COVID-19 pandemic, the SolarWinds supply chain attack, and how much data we are giving up about ourselves without really thinking it through when installing and using apps.

Stay tuned for more episodes on privacy in the coming weeks.

Technical level: 1/5

Host: Robby Peralta
Producer: Paul Jæger

Send us Fan Mail