mnemonic security podcast

In this episode we pick the brain of a Senior Vice President and CISO for a multinational insurance enterprise – Bjørn Watne of Storebrand. 

In our discussions with Mr. Watne, we touch upon the topics of:

-          3rd party risk management,

-          “Selling” IT-security to the business, and

-          Security awareness training & programs

Technical level: 1/5

Host: Robby Peralta
Producer: Paul Jæger

Send us Fan Mail

In this episode we chat with two of the main contributors to the #OutofControl report, Finn Myrstad, Digital Policy Director for the Norwegian Consumer Council and Tor Bjørstad, Application Security Lead in mnemonic.

The report uncovers how every time we use apps, hundreds of shadowy entities are receiving personal data about our interests, habits, and behaviour. This information is used to profile consumers, which can be used for targeted advertising, but may also lead to discrimination, manipulation and exploitation.

Want to read the report? Click here: https://www.forbrukerradet.no/out-of-control/

Technical level: 1/5

Host: Robby Peralta
Producer: Paul Jæger

Send us Fan Mail

In this episode we chat with a cyber insurance underwriter for one of the largest insurance enterprises in the Nordics - Erlend Hjelle from Gjensidige.

We discuss the development of the market, and which types of organizations have been early adapters. Erlend also shares some insight into the types of discussions he has with his clients, and the important considerations which should be taken into account for a company that is interested in such an insurance.

Technical level: 1/5

Host: Robby Peralta
Producer: Paul Jæger

Send us Fan Mail

In this episode we chat with a hacker for hire aka pentester for mnemonic - Harrison Sand.

We start out with an update on how it is to work as a pentester these days, where Mr. Sand explains how he works with his customers and what his typical engagements entail. We then move into the concept of crowdsourcing security testing, and Harrison shares his opinions on when an organization should consider using such services, and the differences they should expect when crowdsourcing as opposed to using a "traditional" security consultant. 

Technical level: 3/5

Host: Robby Peralta
Producer: Paul Jæger

Send us Fan Mail

In this episode we interview one of the founding fathers of the Argus platform - Joakim von Brandis.
 
He tells us about the background of the platform, why it was created, what it does, and how it is used by security analysts working within mnemonic and its customers. He also touches on the differences between Argus and other security solutions, such as SIEM, IDS and SOAR systems, and how they all work together to detect and respond to security incidents.

Technical level: 4/5

Host: Robby Peralta
Producer: Paul Jæger

Send us Fan Mail

In this episode we chat with Angel Alonso, a CISO for hire and team lead for the Governance, Risk and Compliance department in mnemonic.

He shares his experience and opinions around the topic of "cloud security," and provides insight into what organizations should be doing to avoid the front pages due to a misconfiguration.

Technical level: 1/5

Host: Robby Peralta
Producer: Paul Jæger

Send us Fan Mail

In this interview we interview the boss of the SOC - Stig Nordby in mnemonic.
 
Stig has worked with dozens of large organizations to build out their cyber defense strategies, and is today a 3rd line security analyst and senior consultant for companies working to build a detection and response capabilities. In this episode, we pick his brain on the following:
 
 - Which types of companies should consider having a SOC?
 - Where should companies start with their security operations journey?
 - What do companies need in terms of resources to make it all work?

Technical level: 3/5

Host: Robby Peralta
Producer: Paul Jæger

Send us Fan Mail

In this episode we chat with PhD candidate, and former CISO for mnemonic - Siri Bromander. 

She’s been dedicating her time the past years on improving threat intelligence, specifically the way we can use automation to enrich security incidents and share analysis without losing context. In our discussion we take a closer look at the ACT (Semi Automated Threat Intelligence) platform, which is an open-source platform that Siri has been helping to develop together with the team at mnemonic and several research partners in Norway. If you work in a SOC, or with threat intelligence, this podcast is for you!

Technical level: 3/5

Interested in ACT? Check out the links below!

https://act-eu1.mnemonic.no/

https://github.com/mnemonic-no/act-platform

Host: Robby Peralta
Producer: Paul Jæger

Send us Fan Mail