The Security Strategist

When it comes to decision-making, courage is paramount. Cybersecurity professionals must navigate high-stakes environments where swift, bold decisions can mean the difference between safeguarding critical assets and exposing vulnerabilities. This requires a willingness to act decisively, even under uncertainty, and to take calculated risks for the greater good of organizational security. Courage in this field isn’t just about individual bravery—it’s about fostering a culture where team members feel empowered to make tough calls, share unconventional insights, and drive proactive security measures.

Equally important in cybersecurity is the value of followership and resilience. Effective followership involves supporting leadership and strategic decisions, embracing a shared sense of responsibility, and prioritising team goals over individual recognition. With a combination of courageous leadership, strong followership, and resilience, organizations can build a cybersecurity posture that not only withstands attacks but continuously improves in the face of emerging threats.

In this episode, Paulina Rios Maya, Head of Industry Relations, speaks with Miguel Clark, a retired FBI special agent, about the nuances of leadership, particularly in high-pressure environments like law enforcement and the tech industry.

Key Takeaways: 

• Leadership is about placing others' needs above your own.
• Followership is crucial for effective leadership.
• Courage is developed by confronting fears.
• Mistakes are opportunities for learning and growth.
• Long-term organizational health requires valuing team contributions.
• Effective communication is essential for leadership success.
• Preparation for crises is key to resilience.
• Building a culture of trust encourages open communication.
• Perfectionism can hinder decision-making and progress.

Chapters: 

00:00 - Introduction to Leadership and Followership

02:45 - The Transition from FBI to Tech Industry Leadership

06:36 - Understanding Followership in Leadership

09:59 - Courage and Fear in Decision Making

13:34 - Learning from Mistakes and Accountability

17:52 - Long-term Health of Organizations

21:39 - Communication and Understanding in Leadership

25:56 - Preparing for Cybersecurity Breaches

30:07 - Building a Culture of Trust

33:51 - Conclusion: Resilience in Cybersecurity

Ransomware attacks increasingly force organisations to pay ransom due to the significant impact on operations, data loss, and the fear of reputational damage. Semperis’s Ransomware Risk Report explores the reasons behind the high percentage of businesses making payments, which inadvertently encourages attackers to strike again. By giving in to demands, many companies fall into a dangerous cycle of repeated attacks, becoming easy targets for cybercriminals.

To mitigate this risk, it is critical to adopt an "assume breach" mindset. Organisations must be prepared for potential breaches by investing in robust recovery plans and strengthening cybersecurity measures, ensuring they can respond effectively without succumbing to ransom demands.

In this episode, Paulina Rios Maya, Head of Industry Relations, speaks to Simon Hodgkinson about the reasons behind the high percentage of organisations paying ransoms, the cycle of repeated attacks, and the critical importance of having robust recovery plans.

Key Takeaways:

• Paying ransom does not guarantee recovery.
• Business resilience is crucial during recovery.
• Recovery plans must be robust and well-tested.
• Identity management is a critical vulnerability.
• Dedicated tools are necessary for identity recovery.
• Recovery time objectives (RTO) need improvement.

Purple Knight is highlighted in the report as a key tool in detecting vulnerabilities before attackers can strike. With Purple Knight, organisations can proactively assess their defences, identify weak points, and strengthen recovery plans—helping to break the costly cycle of ransomware payments.

Chapters: 

00:00 - Introduction to Ransomware and Its Impact

02:50 - Understanding the Ransom Payment Dilemma

06:03 - The Cycle of Repeated Attacks

08:55 - The Importance of Recovery Plans

12:05 - Identity Recovery and Its Challenges

14:51 - Best Practices for Ransomware Resilience

17:50 - Tools for Active Directory Recovery

21:03 - Conclusion and Key Takeaways

Companies are constantly pushing for innovation to stay competitive. Whether adopting new technologies or streamlining processes, innovation is key to growth. However, as businesses embrace digital transformation, they open themselves to new security vulnerabilities. These advancements can quickly become liabilities without proper protection, exposing companies to cyberattacks, data breaches, and other security threats.

Striking the right balance between innovation and security is essential for long-term success. Companies must prioritise cybersecurity alongside growth initiatives, ensuring that strong defences back every new technology or system. 

In this episode, Richard Stiennon, Chief Research Analyst at IT-Harvest, speaks to Adeel Ahmad, Director of Technical Field Strategy at HashiCorp, and Grant Webb, Cloud Technologist, about the innovation paradox.

Key Takeaways: 

• The balance between innovation and security
• How digital transformation introduces new vulnerabilities
• Strategies for prioritizing cybersecurity alongside growth
• Innovation is about change, while security is about safety.
• Security should not be seen as a hindrance to innovation.
• Embedding security in design can reduce friction.
• Regulatory compliance can complicate the innovation process.
• Shared objectives can align security and innovation efforts.
• Building relationships between security and development teams is crucial.
• CISOs should be integrated into the innovation process.

Chapters: 

00:00 - The Innovation Paradox: An Introduction

02:53 - Balancing Innovation and Security

05:49 - Regulatory Challenges in Innovation

09:14 - Embedding Security in Organizational Culture

12:07 - Lessons from HashiCorp's Experience

14:58 - Building Relationships Between Security and Development

17:52 - Creative Approaches to Security and Productivity

Ransomware has become a pervasive threat, targeting organisations of all sizes and industries. The complexities of recovery after an attack are enormous, often involving extensive data restoration, system reconfiguration, and potential business disruptions. The financial toll, reputational damage, and operational downtime can be devastating. 

AI can be a powerful tool in this battle that allows organisations to spot and prevent threats more effectively, analyse vast datasets for anomalies, and automate critical security tasks.

In this episode, Paulina Rios Maya, Head of Industry Relations, speaks to Jim McGann, VP of Strategic Partnerships at Index Engine, about Ransomware and its consequences. 

Key Takeaways:

• Ransomware continues to be a significant threat to organisations.
• The complexity of IT infrastructure contributes to ransomware vulnerabilities.
• User training is crucial in preventing ransomware attacks.
• Recovery from ransomware can take months and cost billions.
• Organisations often confuse disaster recovery with cyber recovery.
• AI can help identify patterns of bad actor behaviour.
• Validating data integrity is essential for effective recovery.
• Many organisations lack a cyber resiliency strategy.
• Ransomware actors often return to organisations that have paid ransoms.
• A proactive recovery strategy is necessary for minimising impact.

Chapters:

00:00 Introduction to Ransomware Challenges

01:28 Understanding the Persistence of Ransomware

05:17 Complexities of Recovery After an Attack

10:57 The Role of AI in Cybersecurity

15:31 Real-World Applications of AI in Recovery

In this episode, Luke Dash, CEO of ISMS.online, speaks to Paulina Rios Maya, Head of Industry Relations, about the current state of information security, drawing on key findings from their latest report. The discussion emphasises the growing importance of compliance in the face of rising data breaches and supply chain vulnerabilities. 

They explore artificial intelligence's dual role in cybersecurity, highlighting its potential to enhance defences and the increasing threat posed by AI-driven attacks like deep fakes. Luke stresses the need for businesses, especially in sensitive industries, to foster a culture of compliance and continuous improvement in cybersecurity measures to stay ahead of evolving risks.

Key Takeaways:

• 99% of businesses faced fines for data breaches.
• Supply chain attacks have increased by 22%.
• Deepfakes are now a significant security threat.
• A culture of compliance is essential for organisations.
• ISO 27001 is crucial for information security management.
• Cybersecurity should be part of daily business operations.
• Continuous improvement is critical to effective security practices.

Chapters: 

00:00 Introduction to Information Security and Compliance

01:21 Key Findings from the State of Information Security Report

03:10 Addressing Supply Chain Security Risks

05:57 The Role of AI in Cybersecurity

08:19 The Rise of Deepfakes and Their Impact

10:39 Building a Culture of Compliance in Organizations

12:36 Best Practices for Compliance in Sensitive Industries

15:27 Continuous Improvement in Cybersecurity Practices

Ethical hacking, or penetration testing, plays a key role in protecting businesses from cyber threats by identifying vulnerabilities before malicious hackers can exploit them. As AI becomes more embedded in critical operations, it becomes a prime target for cybercriminals. Ethical hackers are stepping up to defend these systems, using their skills to protect sensitive data, safeguard privacy, and ensure businesses stay secure and operational.

With the rise of AI-powered security tools, ethical hackers can analyse and respond to threats faster and more accurately than ever. However, the rapid advancement of AI also raises new challenges—automated systems can sometimes behave unpredictably, and new vulnerabilities may emerge. 

In this episode, Paulina Rios Maya, Head of Industry Relations, speaks to Joseph Carson, Chief Security Scientist & Advisory CISO at Delinea, about the differences between superhero hackers, who use their skills for good, and villain hackers, who exploit vulnerabilities for malicious purposes.

Key Takeaways: 

• Hacking is a skillset and mindset, not inherently criminal.
• There are two types of hackers: superheroes and villains.
• AI is primarily used for defensive purposes in cybersecurity.
• Data minimisation is essential for protecting user privacy.
• Attackers are increasingly targeting individuals rather than systems.
• Identity protection is a top priority in cybersecurity.
• User-friendly security measures are necessary to enhance protection.

Chapters: 

00:00 - Introduction to Ethical Hacking and AI's Impact

03:14 - The Dual Nature of Hackers: Heroes vs. Villains

06:33 - AI's Role in Cybersecurity: Opportunities and Threats

11:18 - Balancing User Privacy and Security

14:35 - The Role of Ethical Hackers in Cybersecurity

17:13 - Overlooked Vulnerabilities: The Human Element in Cybersecurity

Traditional security models are no longer enough. Identity and Zero Trust have become essential pillars of modern information security strategies. By focusing on “never trust, always verify,” Zero Trust ensures that no user or device is trusted by default—whether inside or outside the network—identity management, meanwhile, safeguards access by verifying who is accessing your systems and data.

Together, these approaches offer a more robust, adaptive defence against cyber threats, helping organisations protect sensitive information and mitigate risk.

In this episode of the EM360 Podcast, Chris Steffen, EMA's vice president of research, speaks to Ran Lampert, CEO and co-founder of Infinipoint, about the importance of identity when building your Zero Trust journey. 

Key Takeaways: 

• Identity and device authentication are equally important in Zero Trust.
• Compliance requirements increasingly demand device verification.
• Quick wins in identity management can lead to immediate improvements.
• Gradual implementation of security solutions is key to success.
• Zero Trust is a continuous journey, not a one-time fix.
• Integrating user and device authentication can reduce security risks.
• The landscape of identity management is evolving rapidly.

Chapters:

00:00 - Introduction to Identity and Zero Trust

02:46 - The Evolving Landscape of Identity and Access Management

06:09 - Understanding Attack Vectors and Security Gaps

09:00 - Compliance and Regulatory Requirements

11:47 - Quick Wins in Identity and Access Management

Red teaming is a proactive cybersecurity approach where ethical hackers simulate real-world attacks to test an organisation’s defences. Unlike traditional testing, red teaming mimics sophisticated threats to expose vulnerabilities in networks, systems, and even human factors. This process helps organisations identify weaknesses, strengthen their security posture, and improve their incident response plans to stay ahead of evolving cyber threats.

An important aspect of red teaming is the interpersonal dynamics between the red team and the organisation’s internal teams. Collaboration and transparent communication are crucial to ensuring the exercise remains productive. Maintaining positive relationships during and after the tests fosters trust and encourages constructive feedback, essential for implementing security improvements without creating internal friction.

In this episode, Paulina Rios Maya, Head of Industry Relations, speaks to Gemma Moore, Co-founder and Director of Cyberis about the role of red teaming in developing detection and response capabilities.

Key Takeaways: 

• Red teaming involves testing people, processes, and technology.
• Maintaining positive relationships is crucial during red team exercises.
• Non-security stakeholders need actionable insights from red team outputs.
• Informed consent is essential for ethical red team operations.
• Respecting personal boundaries is important in red teaming.
• Building relationships with blue teams fosters a collaborative environment.

Chapters: 

00:00 - Introduction to Red Teaming and Cybersecurity

01:20 - Understanding Red Teams: Definition and Purpose

03:38 - Interpersonal Dynamics in Red Team Exercises

05:58 - Engaging Non-Security Stakeholders

08:43 - The Importance of Informed Consent

12:34 - Ethical Considerations in Red Teaming

17:44 - Developing Detection and Response Capabilities

20:53 - Conclusion and Resources for Further Learning

Protecting sensitive data requires a robust approach, with Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) at the forefront. DSPM aligns security policies with data architecture, while DLP prevents unauthorised access and leaks.

Understanding data classification and custodianship is key to this, as it ensures that sensitive data is prioritised. Integrating AI further strengthens these strategies, offering real-time threat detection and automated protection.

In this episode, Chris Steffen VP of Research at EMA speaks to Shannon Murphy, Global Security & Risk Strategist at Trend Micro, to discuss data security management. 

Key Takeaways:

• Data Security Posture Management (DSPM) is essential for visibility.
• Data classification is crucial for effective data security.
• AI can enhance data discovery and classification processes.
• Data custodianship should involve those who understand the data.
• Continuous monitoring is necessary for effective data protection.
• A layered defense approach is necessary against emerging threats.
• Data security is an ongoing process, not a one-time fix.

Chapters:

00:00 - Introduction to Data Security Management

02:55 - Understanding DSPM vs DLP

06:12 - The Role of AI in Data Security

08:57 - Data Classification and Metadata

11:48 - Data Custodianship and Responsibility

15:11 - Creating a Culture of Security

17:57 - The Future of Data Security Strategies

Fraud networks are becoming more sophisticated, posing a significant threat to the financial, iGaming and crypto sectors. As fraudsters’ tactics evolve, these industries face growing challenges in identifying, disrupting, and preventing their activities.

According to Sumsub internal research, every 100th user was involved in fraudulent networks in 2023. The need for robust fraud detection and prevention, from financial institutions to crypto exchanges and online gaming platforms, has never been greater. Understanding the inner workings of fraud networks and how they evolve, is not just crucial but empowering for protecting assets and customers.

In this episode, Alvaro Garcia, Transaction Monitoring Technical Manager at Sumsub, speaks to Paulina Rios Maya, Head of Industry Relations at EM360, about how to Outsmart the Bad Guys.

Key Takeaways:

• Fraud networks, or fraud rings, can vary in size and complexity.
• Money mules are often unaware they are part of fraudulent schemes.
• The iGaming industry is particularly vulnerable to bonus abuse.
• A multi-layered approach is essential for effective fraud prevention.
• Ongoing monitoring is crucial to catch fraud after onboarding.

00:00 - Understanding Fraud Networks

05:17 - Money Muling and Its Impact

09:58 - Proactive Measures in Financial Sector

13:43 - Navigating Risks in the Crypto Sector

17:00 - Creative Tactics of Fraudsters

19:50 - The Role of AI in Fraud Detection

23:38 - Implementing a Multi-Layered Approach