This week our guest is Peter Soulsby, Director for Security Practise at NTT. Peter’s background in finance lends a business lens on his experiences of working with organisations that have just endured a cyber security breach.

Looking behind the breach, Peter speaks about the stories the media miss, where IR plans can fail, the psychology and human side to dealing with a breach as emotions run high and low, the value of external IR teams and how they can best work with internal teams, and the popular topic of prevention vs response/recover and where we should be spending our time and money.

In our first episode for 2022, we dive into the biggest news from the end of last year - the Log4Shell vulnerability. Where is it at? And what impact will this vulnerability have on companies making use of open-source libraries for code in the future?

We also look at the cyber risks associated with the Beijing Winter Olympics, cyber warfare in the Ukraine and Russia tensions, discuss the implications and usefulness of the Australian Identify and Disrupt Act as the first warrants begin to be issued, and review some of the latest cyber breaches including the Red Cross hack.

Our cyber resilience experts look back over the cyber events and challenges that shaped the year, review some of the insights that our incredible guests have brought to the show in 2021, discuss how to be cyber resilient across the holiday season, and peer into the crystal ball to make some predictions on what the new year will bring us.

Our guest for this week’s show is Bruce McCully, CSO at Galactic Advisors and author of Level Up: The Ultimate MSP Roadmap for Security, Operations and Profitability; and Plagued: The CEO's Ultimate Guide to HIPAA Compliance and Cybersecurity.

Bruce grew an MSP from scratch, and after smoke-jumping into organisations and seeing the effects of ransomware, he transitioned his teams to be more heavily focused on security. This exposure to both incident response and forensics has led Bruce and his teams to a great understanding of what good security looks like. Galactic Advisors now have a focus on MSPs.

In an episode packed with insight and stories from the trenches we get Bruce's thoughts on how to work with MSPs, why they’re an appealing target for attackers, and how MSPs add value. We also get Bruce’s thoughts on the importance of culture, communication, and measurement in cyber security.

Plagued: The CEO's Ultimate Guide to HIPAA Compliance and Cybersecurity: https://amzn.to/3rBauuf

Level Up: The Ultimate MSP Roadmap for Security, Operations and Profitability: https://amzn.to/3GjTf4u

In this week’s news episode our resident cyber experts review the most recent cyberattacks, explore their impact, and discuss what can be learned from them. Over the past week we have seen 3 large-scale attacks including GoDaddy who announced an attack that exposed the email and customer number of 1.2 million active and inactive Managed WordPress customers, Tasmania casino operator Federal Group’s payroll system who suffered an attack on their payroll system that left employees without their regular paycheque, and production delays are likely for the giant wind turbine manufacturer Vestas after a data breach that required systems to be shut down.

We also take a closer look at the recently released Cybersecurity Workforce Study 2021 which revealed the very positive news that Australia’s cyber security workforce grew 23% in 2021 with flexible work arrangements making cyber staff happier than ever.

Our guest for this week’s show is Andrew Pritchett, CIO at Grant Thornton Australia. Andrew has had a unique career that has seen him traverse through a range of industries, from sheet metal production, to 10-pin bowling, and finally to IT where he quickly rose through the ranks to CIO roles.

Andrew brings his unique perspective to this conversation centred around building a positive cybersecurity culture and how to lead change using Kotter's eight step process. Andrew walks us through this process and his principles around patience, balance, coaching, and transparency.

Read Andrew’s article on this topic here: https://bit.ly/3HIyxgj

In this week’s cyber security news, we dive straight into the latest developments in this year's highest profile cyberattack, The Colonial Pipeline ransomware attack, and the announcement of a $10 million USD bounty offered by the American government for information which can lead to the "identification or location of any individuals" in a leadership position with DarkSide.

Closer to home, we review the news and impact of what some are calling a “landmark win for privacy” as the Office of the Australian Information Commissioner (OAIC) rule out the use of AI based facial recognition, and we also explore the recent announcement from NSW Electoral Commissioner John Schmidt who has said the polling body’s cyber security won’t meet the state government’s own standards in time for the council ballots.

For the latest cyber news and insights head to www.getcyberresilient.com

This week’s show is hosted by the newest member of our podcast team, Amy Holden. Amy is joined by two extremely talented women in the technology and cybersecurity space - Berys Amor the Director of Technology at Corrs Chambers Westgarth, and Alison O'Hare who is a Senior Technical Director at Mimecast.

Amy, Berys and Alison swap stories around unconscious bias toward women, the advantages of being a female in the tech and cyber space, some of the most exciting aspects of working in the industry, along with some of the challenges as well. The episode provides some great advice for anyone, especially women, considering a career in technology.

For the latest cyber news and insights head to www.getcyberresilient.com

In this week’s cyber security news we explore the confirmation that the Russian SolarWinds hackers breached 14 of Microsoft’s resellers and service providers, we discuss the Cyber Ready Program recently announced by the Australian Federal government to support the next generation of cyber security experts, we explore why there has been a decline in insurance claims for ransomware and the implications this could have for the cyber insurance space, and the 2022 big budget increase for cyber security predicted by Gartner’s annual survey.

Questacon’s Cyber Ready Program: https://bit.ly/3muu3kJ

For the latest cyber news and insights head to www.getcyberresilient.com

Our guest this week is Dr Chase Cunningham, retired Navy Chief Cryptologist and currently the Chief Strategy Officer with Ericom Software. He has experience across a range of the three-letter agencies in the US and over 20 years experience in cyber forensics and analytic operations. He also has a PhD in isolating insider threats through combining technical precursors with human behaviour modelling. His deep technical expertise has also fed into his work as an author, with his 2020 title “Cyber Warfare: Truth, Tactics and Strategies” and more recently his move into fiction with gAbrIel.

Chase and Gar dive into digital forensics in this episode along with Chase’s insights into ransomware, the misrepresentation and misunderstanding of AI, deepfakes, the machine learning and deepfakes being used for MasterPrints, and influence attacks.

For the latest cyber news and insights head to www.getcyberresilient.com