Talking Cyber Security

In this episode, Richard provides -

This episode is a must for ambitious security personnel. 
At the end of the episode he summarises both approaches.

In this episode, Richard discusses the merits of 3rd Party Questionnaires and has a "call to action" regarding a Personally Identifiable Information Data Security Standard (well...legislation really). 
Richard also gives listeners a "heads up" on a future episode regarding 2 phone calls he recently received...the analysis of which will help you realise whether you are on the 'right path'. 

In this episode, Richard tries out his new microphone and provides his viewpoint on the ongoing breaches that are occurring in Australia. He discusses the transition from ‘name and shame’ (which occurred in the past) to the present day support for organisations and security teams that have incurred a security breach. Richard also discusses a cyber meeting he attended and provides the key points discussed. A quick analysis of the first 5 episodes of The Australian CISO is discussed. Some of the countries where people listen to this podcast are quite amazing… 

Episode 5 is a continuation of Episode 4.  2 attendees are interviewed. One CISO and one aspiring CISO.

CISOs need to keep their knowledge up to date, swap views with others and to network! Attending conferences are a great way of doing this.
In this week's Podcast, Richard details a Conference he attended in Melbourne Australia; 6 Degrees Media's "Security. The future of Tech, Innovation & Work" Conference.
Part 1 covers a number of the presentations.
Part 2 of this Conference will be covered in Episode 5, and contains 2 interviews; one with a Group General Manager of Security (aka a 'CISO'), the other with a Security Architect who is an aspiring CISO.
Mentioned in this episode is this excellent video from The Guardian : https://www.theguardian.com/world/video/2023/feb/15/team-jorge-unmasked-the-secret-disinformation-team-who-distort-reality-video

If you enjoy this podcast, it would be appreciated if you could click the "Follow' button and rate it 5 stars.
Any questions or comments can be directed to [email protected] or locate Richard Heron on LinkedIn https://www.linkedin.com/in/richardheron/
Thanks for listening!

Episode 3 of The Australian CISO continues on from the previous episode that described a surprise "Red Team-Blue Team" penetration test. This episode walks through the "attack" and highlights the low cost, highly effective controls that every organisation could benefit from. This episode is a must if you want to strengthen your environment.

This episode delves into the world of the surprise penetration test. 
Is it a good approach or is it better to let everyone know that you are about to conduct a penetration test? i.e. if no-one knows about it, then the "attack" will be handled as it should. That is unexpected and using all the people, processes and technology that one would expect when an attack occurs...a good test of the organization's ability to respond and recover.

Does the surprise attack pose problems though? What can go wrong?
Listen to this episode where someone's decision to conduct a surprise penetration test had deep consequences.

The trailer episode introducing all listeners to The Australian CISO podcast.