teissPodcast - Cracking Cyber Security

This week the teissPodcast jumps right into the heart of cyber security innovation at LORCA (the London Office for Rapid Cybersecurity Advancement) –  a Government-backed cyber accelerator which supports the most promising cyber security innovators in scaling and growing solutions to the cyber problem.

teiss speaks with programme director, Saj Huq about the emerging trends in cyber innovation, the challenges that cyber start-ups face on both macro and micro levels and what role investors should play in this space. We also discuss safeguarding and nurturing international cyber talent as the Brexit date looms.

This week, The teissPodcast is at The National Museum of Computing on Bletchley Park in Milton Keynes.

If you’ve not already been there – GO - it’s a treasure trove of historic computers…In fact, it's home to the world’s largest collection, from the Turing-Welchman Bombe and Colossus of the 1940s through the large systems and mainframes of the 1950s, 60s and 70s, to the rise of personal computing and the rise of mobile computing and the internet.

Seeing a floppy desk, Pacman mazes and a Sega Mega Drive in a museum did make me feel quite old, but it’s incredible how these holy relics really arouse the inner child in you. It certainly did with my guest, Paul Watts CISO at Domino’s Pizza Group PLC, who bounded and buzzed with excitement at the technology that had occupied his adolescence.

I always enjoy talking with Paul and hearing his thoughts on the past, the present and the future…In this interview we talk data - ethics and its future, the double-edged sword that is technology and...Chuckie Egg!

With many thanks to The National Museum of Computing.

There’s a cyber skills shortage, but are cyber security hiring and retention processes doing more harm than good to your organisation?

This week I speak with Vicki Gavin, about recruitment, talent retention and leading teams. Vicki is an advisor on security, privacy and resilience and was previously CISO for the Economist; with years of experience under her belt I thought she was ideal to discuss these topics with.

Vicki speaks with genuine warmth, passion and clarity and admits that it wasn’t until she became a mother that she discovered how to be a good leader. "It’s the same skill set," she says, "never forcing but helping them to understand the world around them and be the best they can be.” I love that.

So let’s look at the stats, findings revealed in ISACA’s recent State of Cybersecurity 2019 research, say that 64% of respondents indicated that they have trouble retaining qualified cyber security professionals. So what's going wrong?

Can you imagine a world where our water, energy and transport systems just stop working? How about our hospitals, telecoms and financial services? It’s a picture I struggle to visualise, and yet we are told that the risks to our national security have never been greater. So, how safe actually is our National Critical Infrastructure right now and are we able to protect ourselves? Questions we’ll be exploring on this episode of the Cracking Cyber Security Podcast.

Tim Mackey, Principal Security Strategist at the Synopsys CyRC (Cybersecurity Research Centre) about the ominous potential of a cyber-attack on our National Critical Infrastructure. We discuss the threats, the problems and some possible solutions.

How can we tackle the cyber skills shortage? What’s the best way to up-skill your cyber security workforce? Does it take more than just passion to work in cyber security? These are questions we’ll be exploring on this week’s Cracking Cyber Security podcast.

This week I chat with Principal Security Consultant (CCSAS) at Trustwave SpiderLabs, Matt Lorentzen. We are told that cybersecurity skills shortage is worsening for the third year in a row and according to the annual global study of cybersecurity professionals by the Information Systems Security Association (ISSA) and Enterprise Strategy Group (ESG) has impacted nearly three quarters (74 percent) of organisations. So what can be done about it? On the podcast Matt gives some great advice to anyone looking to work in cyber security, as well as employers who want to up-skill their current workforce.

This week we are talking about leadership, imposter syndrome and humour with Thom Langford on the Cracking Cyber Security podcast. 

Founder of (TL)2 Security Ltd and former CISO at Publicis Groupe, Thom is a well-known figure in the security world, prolific public speaker and an active and engaging social media user – so to hear that he describes himself as “naturally shy” – came as a bit of a surprise. Thom speaks candidly about wrestling with imposter syndrome, using humour to his advantage and how public speaking has helped his confidence grow over the years. 

How should organisations deal with the Insider Threat? Can you stop the insider before they cause harm? What are the red flags to look out for? 

This week on the Cracking Cyber Security Podcast we speak with Lisa Forte, cybersecurity expert and founder of Red Goat Cyber Security about the “Insider Threat”.

Lisa began her career in maritime security before moving into counter-terrorism intelligence, and then later into one of the UK Police cyber-crime units where she got to know the attackers’ mindsets and methodologies well. She’s also a bit of a legend in the tech world, winning the “Top 100 Women In Tech” award last year. 

Lisa recently conducted some research on the Insider Threat and she shares some fascinating findings on the episode.  

Head of Threat Intelligence at Cybereason, Assaf Dahan, shares some fascinating research about the latest cyber security trends.

Assaf, shares some of the most notable attacks we’ve seen over the past year, which techniques were used, what were the attackers after and what you need to know about how to protect yourself from such attacks. We also discuss how the criminals are collaborating and what makes Israel a leader in cyber innovation.

Assaf has over 15 years in the InfoSec industry. He started his career in the Israeli Military 8200 Cyber Security unit where he developed extensive experience in offensive security. Later in his career he led Red Teams, developed penetration testing methodologies, and specialized in malware analysis and reverse engineering.

Can defenders trick their attackers? Can organisations use deception successfully to level the playing field and dupe cybercriminals? This week on the Cracking Cyber Security podcast we’ll be discussing the “art of tricking the trickster”.

This week Carolyn Crandall – who has the coolest title in cyber - Chief Deception Officer and CMO at Attivo Networks, joins us on the podcast and explains how organisations can turn the attackers' techniques against them. We also talk about evolving threats in 2019 and Carolyn’s quest to get more females into tech.

On this episode of the Cracking Cyber Security Podcast, Stephen Moore, Chief Security Strategist at Exabeam says that organisations need a new breed of CISO – one who is groomed for the challenging audiences of the Executive Leadership Team (ELT), the CEO, subcommittees, and the Board.

Furthermore, he shares advice on how to speak to the board in a language they understand, how to avoid sugar-coating bad news, and how to focus on co-operation not just budget. Stephen also talks passionately about how CISOs can be better security leaders.