This week’s guest is Mark O’Hare – Mimecast’s CISO. Originally from South Africa, Mark has worked in IT and security in the UK, the US, the Cayman Islands and has been in Australia for nearly a decade. As Mimecast’s CISO he is at the forefront of the challenges facing CISOs in public companies.

Mark walks us through his long and winding career and provides us with some great insights in this episode. He talks about the cybersecurity issues that keep him awake at night, where and how he consumes the avalanche of information he needs to each day, regulatory influence, finding and keeping the right people, and leaves us with his ‘one important thing to do per day’ recommendation.

Gar O’Hara is joined this by Jessica Lee – founder and owner of Jessica Lee Consulting. Jess has a deep background in organisational psychology. She’s worked in nearly every vertical and before going out on her own worked for big names like Diageo, Jurlique and Universal Music. Jess was the perfect person to talk about a very, very important resilience topic – mental health and wellbeing.

We all know about CISO burnout, the stats are scary. The average tenure for a CISO is 26 months, with nearly a third reporting stress impacting their health, and an increase in the use of alcohol and medication. Jess talks us through what she is seeing in organisations during COVID, with some cracking insights on the differences between stress and burnout, how much it can cost organisations, and perhaps most important of all - how to engage in self-care.

With so many people feeling stressed, the level of uncertainty that exists for many people during this time, and with how much burnout happens in the cyber industry even during normal times, this is an important conversation.

Find out more about Jessica Lee Consulting and how they are advancing business through psychology here: https://www.jessicaleeconsulting.com

Check out the links below for more resources on mental health and wellbeing in Cyber Security

CISO stress and burnout cause high churn rate (SearchSecurity) - https://bit.ly/33Ra8mK

Why burnout is such a problem for CISOs (Forbes): https://bit.ly/3djBs0l

Positive Psychology resources from PERMA (Martin Seligman): https://bit.ly/34LJ2wK

TED Talks to listen to when feeling burned out (TED Talks): https://bit.ly/2GYn954

This week Gar is joined by Jason Duerden, Managing Director of BlackBerry Spark. From beginnings in events and hospitality, Jason says he “fumbled his way into cyber”. He started out working with a hotel group running their IT ops and security, then dived into systems integration before ultimately finding his place in cyber business operations. Jason has worked with Aquion and Cylance and now leads at BlackBerry Spark after Cylance’s acquisition.

Jason and Gar talk about the perception of vendors in cyber resilience and Jason provides some insights into how the vendor side of our industry could be improved. Jason also talks about ‘fear’ as it relates to cyber security, the messy problem of IoT, the national Cyber Security Strategy and Jason gives us his thoughts on how to better protect the SMB space.

Gar O’Hara is back again with Dan McDermott and Bradley Sing for the September 2020 monthly roundup episode. 

Gar and Dan take a look back over the month that has been and the insights that our September guests brought to the show. Brad and Dan discuss the latest in cyber security news including the shutdown of the New Zealand Stock Exchange, the incredible 2,266 cyber security incidents countered by the ACSC last year, the hackers that claimed to have breached the Department of Education, the 54,000 NSW drivers licences that were potentially exposed and the world’s first recorded fatality attributed to a cyber attack. 

After the news, Dan and Gar take some time to dive into detail on the governments code of practice for the Wild West of the internet, the IoT.

Gar’s guest this week is the host of the Cyber Security Café podcast and Interim CISO for Sigma Healthcare, Beverley Roche. Like many IT professionals, Beverley started on a help-desk and did training and consulting. Looking for something new, Beverley completed a postgrad in eCrime and hasn’t looked back since. Beverley has worked in a number of roles in data privacy and security for a range of companies including The Office of the Children's eSafety Commissioner, ANZ, BHP and Australia Post.

Beverly speaks about what has changed during her career – the good and the bad, the human side of cyber security and the myths. Gar and Beverly also discuss the importance of digital literacy and how to approach that in broader society, specifically during the employee lifecycle. And we round out the episode with Beverly speaking about her involvement with the Security Influence and Trust Group, their mission and outputs.

Check out the Cyber Security Café podcast here: https://apple.co/3hPmu2s

Gar is joined this week by Andrew Bycroft, CEO of iResilience and author of ‘The Cyber Intelligent  Executive — Securing the Future of your Organisation’. Andrew has had an interesting career progression, moving from studying the ionosphere as a physicist to following his passion and becoming an IT manager.

From IT manager, Andrew then moved towards security and did managed security services, operations consulting, architecture and even went to the dark side to work in sales. Six years ago, Andrew started his own company to work with execs and boards to help them understand the difference between cyber security and cyber resilience and the role that culture plays in transforming organisations to solve cyber related issues.

In this episode Gar and Andrew spend some time discussing cyber security vs resilience, what we need to think about beyond People Process and Technology and the importance of communication and transparency. Andrew also details his 8 attributes for a healthy cyber culture, how to navigate the change of culture in complex organisations, resilience profiles and Andrew’s model for resilience maturity.

Get your copy of Andrew's book here: https://amzn.to/32s2I99

This week Gar is joined by Joseph Carson, Thycotic’s Chief Security Scientist and Advisory CISO. He’s the architect behind some of the worlds largest cloud environments, has worked to digitally transform cyber security education to online delivery, and now based in Estonia he has been working in areas such as digital identity. 

He’s won many awards and is driven by a desire to give back to the community. Joseph walks us through what cyber resilience looks like at a country level, including how Estonia has gone about building trust with their citizens. He speaks about education for cyber security, immigration policies, data resilience through data embassies, and Jospeh outlines the jaw dropping economic benefits that an advanced digital society can achieve through removing friction. 

Connect with Joseph on LinkedIn: https://www.linkedin.com/in/josephcarson/

Follow Joseph on Twitter: https://twitter.com/joe_carson 

Check out Jospehs books:

https://thycotic.com/resources/wileys-privileged-access-cloud-security-for-dummies/

Gar is joined this week by Michael McKinnon, AISA Melbourne’s Deputy Chair. Michael has done it all, he was the CTO as well as the Media Spokesperson and Security Awareness Director at AVG. He worked at HackLabs in governance, pen testing, ran security awareness training and red teaming. He worked at Pure Security providing C-level advice, incident leadership and future proofing security spend. Michael also gives back to the security community with his AISA involvement.

Thanks to Michaels wide range of security experience, there’s very little you can’t ask him about. In this episode we get his perspective on the role and value of formal education and certifications in the world of cyber security, how training has evolved and where it might go, and what hiring managers are looking for. Gar and Michael also talk about the world of SMEs and reflect on the challenge of the supply chain, c-level strategy, the disconnect between business and tech, ransomware trends, incident response and digital forensics.

This week our hosts are LIVE online to celebrate the 1st birthday of Get Cyber Resilient! Dan, Gar and Brad take a look back over the biggest cyber security news in 2020, and the insights that the past 18 incredible guests have brought to the show. Our hosts then answer questions from our live audience on a range of cyber security hot topics.

Check out This year in Security 2020

Gar is joined this week by Dr Francis Gaffney, Mimecast’s Director of Threat Intelligence and Response who leads the data science research teams for threat intelligence, risk and resilience, threat intelligence analysis and strategic intelligence. Francis has had a fascinating journey that began with an honours degree in chemistry and a career teaching. He then moved to a position in government providing advice on the threats domestic chemicals posed and provided guidance on information warfare (psyops), before moving into counter terrorism and finally transitioning into cyber security.

Francis brings his considerable knowledge and expertise to this conversation surrounding cyber threat intelligence, its function and value. Gar and Francis also discuss technical vs strategic threat intelligence, how to build a threat intel team, trends for cyber attacks and a big one… the value of attribution