Mastering Cyber Safety: Fueling Security with Former Global CISO at BP
In our latest episode of the Cyber Safety Podcast Series, host and Performanta’s CEO, Guy Golan is joined by Simon Hodgkinson, former Global CISO at BP and Strategic Advisor to Performanta, to discuss the importance of cyber safety and how it can be applied effectively within organisations. Simon shares insights from his extensive career in technology and cybersecurity, highlighting the parallels between physical safety and cyber safety.
Tune in and hear our experts discuss the significance of cyber safety as a culture, continuous education, and accountability across all levels of an organisation. Understanding and securing your technology stack, while also focusing on business objectives, are crucial steps in building a robust cyber safety framework.
Safety Culture is Paramount: Safety is not just a set of numbers but culture and mindset that organisations must embrace. Simon draws from his experience in the oil and gas industry, he underscores the importance of fostering a "speak-up" culture in cybersecurity, where employees are encouraged to report near misses without fear of punishment.
Continuous Education is Key: Cybersecurity threats continually evolve, and organisations must invest in continuous education to keep their teams informed about the latest threats, such as social engineering and phishing attacks. Simon highlights the importance of tailoring education to different roles within an organisation to ensure relevance.
Understanding Your Technology Stack: To secure your organisation effectively, you must first understand your technology stack comprehensively. Simon advises organisations to have a clear understanding of their assets, both in terms of hardware and software, and regularly monitor for new infrastructure and applications.
Accountability at All Levels: Cyber risk should be owned and understood by business leadership, not just the CISO or CIO. Simon stresses the importance of accountability, with executives and the board taking responsibility for cyber risk, which ultimately helps in aligning cybersecurity efforts with business goals.
Indicators of Progress: Organisations should look for indicators of progress in their cyber safety efforts. These include increased reporting of near misses, business leaders actively engaging in cybersecurity discussions, embedding security into technology teams, and implementing principles like zero trust.
Start with Business Objectives: Simon advises starting with a deep understanding of the critical outcomes of your business. By mapping technology to these business objectives, you can determine the criticality of various components, helping you prioritize your cybersecurity efforts effectively.Simon joined Performanta as a strategic advisor because of the organisation's shared commitment to promoting safety, both in terms of the message and practical assistance. Performanta focuses on helping organisations progress in their safety journey, offering support in people, processes, and technology.
