The Security Collective Podcast

Dan Giesen-White is the Chief Information Officer at McMillan Shakespeare Limited, a trusted, market-leading provider of salary packaging, novated leasing, asset management, and related financial products and services. He has over 20 years' experience in IT and 15 years' strategic analysis and program management experience with a strong track record of leading change in IT and across the business.

During this episode, Dan will share how you can source the proper staff with the level of maturity your company needs to succeed. Find out what it means to build a security capability rather than just another team. Learn how ASIAL has helped lead his security team including the best advice for new security leaders.

Link:

• LinkedIn

Time Stamps:

• 00:30 - Dan Giesen-White's background and introduction
• 02:31 - How security is different from other tech areas of business
• 03:39 - Build a security capability rather than a just team
• 05:13 - Sourcing the proper staff for your company
• 06:45 - Managing capability vs capacity
• 07:41 - "Get the fundamentals right. That's where people seem to struggle." - Dan Giesen-White
• 08:40 - Common challenges to overcome when building a security team
• 09:50 - Addressing customer driving forces and concerns
• 12:22 - How ASIAL has helped lead a security team
• 13:25 - "ASIAL helps me stay in front of mind and informed on how the landscape is changing." - Dan Giesen-White
• 15:31 - Best advice for new security leaders
• 15:42 - "Be clear on what the role of security in your organisation is." - Dan Giesen-White

Dan Maslin is the Head of Cyber Security for RACV, a key strategic role with accountability across several functions including strategy, architecture, operations, audit, compliance, risk, advisory and awareness & outreach, in a diverse and rapidly changing business. He has two decades of enterprise IT experience across various roles and industries in Australia and the UK, and holds the Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC) and Certified Information Security Manager (CISM) security certifications.

During this episode, Dan will share the team management skills you need to lead and build your security team. Learn why your approach to hiring may be improved including a strategic diversity plan for new team hires. Find out how to strike a balance between your insource and outsource talent.

Links:

• LinkedIn

Time Stamps:

• 00:33 - Dan's introduction and background
• 03:26 - Should an architect be your first hire when building a security team?
• 06:06 - Qualities and principles to look for when hiring for new roles
• 06:21 - "We don't want any 'brilliant jerks'. We don't need talented people that are going to come at a high cost of the team and organisation." - Dan Maslin
• 08:05 - How to Address the 'skills gap' or 'skills crises'
• 09:11 - Insource and outsource - The balanced solution
• 10:44 - How diversity plays a role in new team hires
• 13:03 - "Different skill sets, backgrounds, they all come together and play a part. It's important to have a good mix." - Dan Maslin
• 13:13 - Overcoming challenges when sourcing for teams
• 14:34 - "Poor people leadership can lead to poor retention and poor reputation in the industry." - Dan Maslin
• 16:40 - Long term advice for new CIO leadership

Cameron McLean is the Chief Information Officer at Yarra Valley Water, Melbourne's largest retail water utility, providing essential water and sanitation services to more than 1.8 million people. He developed his knowledge of and passion for Cyber Security during his time as CTO and General Manager of a credit card payments organisation, and this has stood him in good stead for the challenges facing his current industry.

During this episode, Cameron will share how to implement new strategies without disrupting your organisation. Learn from his hands-on experiences with security breaches and bring your security team together while fitting the needs of the leader and organisation. Find out ways to accept ongoing challenges for long term success and apply practical yet powerful advice as a new Cyber Security leader.

Links:

• LinkedIn

Time Stamps:

• 00:39 - Cameron's background and introduction
• 03:33 - Learning from hands-on experiences with security breaches
• 04:30 - "Security is the number one issue for an organisation that relies on trust." - Cameron McLean
• 06:36 - Bringing your security team together while fitting the needs of the leader and organisation
• 07:50 - Hiring your team internally vs external employments
• 10:18 - Outsourcing working to a third party hire
• 12:11 - Overcoming challenges when building a new security team
• 12:32 - "The real challenge was gently but pointedly helping people understand that perhaps they didn't know as much as they thought they did." - Cameron McLean
• 15:13 - Accepting ongoing challenges for long term success
• 17:06 - Practical and powerful advice for new Cyber Security leaders
• 17:35 - "Invest in yourself. Invest in your own learning." - Cameron McLean

Cameron McLean is the Chief Information Officer at Yarra Valley Water, Melbourne's largest retail water utility, providing essential water and sanitation services to more than 1.8 million people. He developed his knowledge of and passion for Cyber Security during his time as CTO and General Manager of a credit card payments organisation, and this has stood him in good stead for the challenges facing his current industry.

During this episode, Cameron will share how to implement new strategies without disrupting your organisation. Learn from his hands-on experiences with security breaches and bring your security team together while fitting the needs of the leader and organisation. Find out ways to accept ongoing challenges for long term success and apply practical yet powerful advice as a new Cyber Security leader.

Links:

• LinkedIn

Time Stamps:

• 00:39 - Cameron’s background and introduction
• 03:33 - Learning from hands-on experiences with security breaches
• 04:30 - “Security is the number one issue for an organisation that relies on trust.” - Cameron McLean
• 06:36 - Bringing your security team together while fitting the needs of the leader and organisation
• 07:50 - Hiring your team internally vs external employments
• 10:18 - Outsourcing working to a third party hire
• 12:11 - Overcoming challenges when building a new security team
• 12:32 - “The real challenge was gently but pointedly helping people understand that perhaps they didn’t know as much as they thought they did.” - Cameron McLean
• 15:13 - Accepting ongoing challenges for long term success
• 17:06 - Practical and powerful advice for new Cyber Security leaders
• 17:35 - “Invest in yourself. Invest in your own learning.” - Cameron McLean

On the back of the success of season 1 of The Secure CIO Podcast, host Claire Pales presents a quick taste of season 2, and shares information on the upcoming LIVE recording of The Secure CIO Podcast! Hitting the road in Melbourne on 23rd October 2019.

Secure your tickets at thesecurecio.com.

On the back of the success of season 1 of The Secure CIO Podcast, host Claire Pales presents a quick taste of season 2, and shares information on the upcoming LIVE recording of The Secure CIO Podcast! Hitting the road in Melbourne on 23rd October 2019.

Secure your tickets at thesecurecio.com.

Nick Ellsmore is Co-Founder of Hivint, now a part of Trustwave, an Optus company, and creator of cyber-security collaboration portal Security Colony. He was previously co-founder of SIFT and Stratsec, and has served on boards and forums including the Internet Industry Association, the NATA AAC for Software Testing, UNSW Advisory Boards, and the APEC TEL Security & Prosperity Steering Group.

During this episode, Nick will share the component to selecting employees who will fit well in your organization. Find out how great leaders create and share a positive vision and successful team atmosphere. Learn the benefits of focusing on diversity in the workplace and what it takes to become a great Security Leader.

Links:

• LinkedIn
• Securitycolony.com

Discussed:

• 3. Security Sourcing: Cracking The Code with Craig Searle

Time Stamps:

• 00:30 - Nick's introduction and background
• 04:19 - Principles to follow to bring the right people together
• 06:26 - Hiring those who have a proper attitude yet lack the proper skills
• 07:35 - "We don't have a skills crisis so much as we have a roles crisis." - Nick Ellsmore
• 10:06 - Focusing on diversity in the workplace
• 13:13 - What roles are clients looking for?
• 17:15 - Building a function within the organization
• 18:54 - "Your first security manager in an organization is going to shift the way that function is perceived by the organization." - Nick Ellsmore
• 20:00 - The ultimate path for security leaders
• 25:29 - "If I am recruiting, the person that I want is the person who is clearly going to be passionate, do the right thing, and someone that's a nice person." - Nick Ellsmore
• 27:33 - Giving the best advice to your younger self

Nick Ellsmore is Co-Founder of Hivint, now a part of Trustwave, an Optus company, and creator of cyber-security collaboration portal Security Colony. He was previously co-founder of SIFT and Stratsec, and has served on boards and forums including the Internet Industry Association, the NATA AAC for Software Testing, UNSW Advisory Boards, and the APEC TEL Security & Prosperity Steering Group. 

During this episode, Nick will share the component to selecting employees who will fit well in your organization. Find out how great leaders create and share a positive vision and successful team atmosphere. Learn the benefits of focusing on diversity in the workplace and what it takes to become a great Security Leader.

Links:

• LinkedIn
• Securitycolony.com

Discussed:

• 3. Security Sourcing: Cracking The Code with Craig Searle

Time Stamps:

• 00:30 - Nick’s introduction and background
• 04:19 - Principles to follow to bring the right people together
• 06:26 - Hiring those who have a proper attitude yet lack the proper skills
• 07:35 - “We don’t have a skills crisis so much as we have a roles crisis.” - Nick Ellsmore
• 10:06 - Focusing on diversity in the workplace
• 13:13 - What roles are clients looking for?
• 17:15 - Building a function within the organization
• 18:54 - “Your first security manager in an organization is going to shift the way that function is perceived by the organization.” - Nick Ellsmore
• 20:00 - The ultimate path for security leaders 
• 25:29 - “If I am recruiting, the person that I want is the person who is clearly going to be passionate, do the right thing, and someone that’s  a nice person.” - Nick Ellsmore
• 27:33 - Giving the best advice to your younger self

Louise Smith is the Australian computer society director for workforce development and education. She is a business capabilities specialist with over 15 years of experience consulting to individual businesses and governments on the skill needs within their organization.

During this episode, Louise will discuss the SFIA Framework and its application to organizations. Find out how individuals can define their current skill set in the cybersecurity workforce. Learn if your organization can benefit from a variety of skills and experience amongst your team.

Links:

• LinkedIn
• Twitter

Time Stamps:

• 00:32 - Louise introduction and background
• 01:52 - The SFIA framework & how CIO's can use it
• 08:24 - SFIA's capability framework and assessment
• 12:27 - What makes SFIA stand out from other frameworks?
• 17:08 - Adjusting hiring practices to accommodate what's needed
• 18:48 - "Truly understand the roles and define them effectively and consistently." - Louise Smith
• 22:12 - Successfully identifying skills of potential cyber security role
• 27:27 - Do most teams have a specific set of diverse skills?
• 31:34 - "There variation both in the depth and breath of the way in which skills are applied, adapted, and driven back into the business." - Louise Smith
• 33:04 - "If you can refine and define your benchmarking it will ensure that you're prepared for and supporting the depth and breath that you need across your workforce." - Louise Smith
• 34:00 - Skills you might need in the future - A self reflection

Louise Smith is the Australian computer society director for workforce development and education. She is a business capabilities specialist with over 15 years of experience consulting to individual businesses and governments on the skill needs within their organization. 

During this episode, Louise will discuss the SFIA Framework and its application to organizations. Find out how individuals can define their current skill set in the cybersecurity workforce. Learn if your organization can benefit from a variety of skills and experience amongst your team.

Links:

• LinkedIn
• Twitter

Time Stamps:

• 00:32 - Louise introduction and background
• 01:52 - The SFIA framework & how CIO’s can use it
• 08:24 - SFIA's capability framework and assessment
• 12:27 - What makes SFIA stand out from other frameworks?
• 17:08 - Adjusting hiring practices to accommodate what's needed
• 18:48 - “Truly understand the roles and define them effectively and consistently.” - Louise Smith
• 22:12 - Successfully identifying skills of potential cyber security role
• 27:27 - Do most teams have a specific set of diverse skills?
• 31:34 - “There variation both in the depth and breath of the way in which skills are applied, adapted, and driven back into the business.“ - Louise Smith
• 33:04 - “If you can refine and define your benchmarking it will ensure that you’re prepared for and supporting the depth and breath that you need across your workforce.” - Louise Smith
• 34:00 - Skills you might need in the future - A self reflection