UberKnowledge

UberKnowledge

By UberKnowledgeTechnologyEducationTech News
Download on the App Store

UberKnowledge episodes

  • Malcolm Harkins – CSO, Cylance

    The Rise of the Cyber Industrial Complex

    Malcolm declares the security industry is not to be trusted because it profits from insecurity.

    • 00:23 Non-traditional beginnings to a CSO career.
    • 02:02 The unusual role of a CSO in a vendor.
    • 02:24 Security needs to crawl out from under IT because it touches every aspect of the business.
    • 04:04 The security industry is not to be trusted because it has no economic incentive to solve the problem.
    • 06:12 Business wants three main things: the risk managed, the cost lowered, and the friction controlled. CISOs need to be measured on that.
    • 8:59 The rise of the cyber industrial complex: defense and depth has actually turned into expensive depth
    • 11:19 The cybersecurity industry is not economically motivated to solve the problem. We need to demand attribution to the controls that failed and hold the industry accountable.
    • 13:27 The role of security in M&A processes: build the cost of remediation into the acquisition budget and this should be bidirectional.
    • 16:24 Selling on fear is like eating junk food: short-term satisfaction, long-term ruin.
    • 17:36 Please don’t ask me for my risk register.
    • 20:21 If we focus on protecting our customers to the best of our ability, the result will be the limitation of liability.
    • 23:36 We focus on the fact that technology done right can connect and enrich lives and can create social and economic benefit.

      • Malcolm Harkins Interview Transcript

      26 min
    • #20 Hema Lakkaraju – CEO, Ansa Solutions
      Be as innovative in compliance as you are in your business
      Hema argues that compliance should be strategized and integrated to help it keep pace with fast-changing industry innovation.
      02:09 What is a compliance strategy?
      03:59 Understand the business, the market, and the product then create a compliance model.
      06:03 The compliance mindset needs to change and embrace integration.
      07:22 Compliance heads should want a more meaningful role.
      14:10 Get educated. You don’t need to comply with all regulations, but you do need to comply with the regulations applicable to you.
      16:48 HiTrust has included all the right things, but if it’s not mandatory, it’s toothless.
      22:02 Build cybersecurity into products from the very beginning. Reverse reactive engineering is not the way to go anymore.
      25:24 Compliance teams need to be mandatory within the design and product development teams.
      26:08 You are answerable to the customers you design for, so build in trust and create value.
      Hema Lakkaraju Interview Transcript
      27 min
    • Hema Lakkaraju – CEO, Ansa Solutions

      Be as innovative in compliance as you are in your business

      Hema argues that compliance should be strategized and integrated to help it keep pace with fast-changing industry innovation.

      • 02:09   What is a compliance strategy?
      • 03:59   Understand the business, the market, and the product then create a compliance model.
      • 06:03   The compliance mindset needs to change and embrace integration.
      • 07:22   Compliance heads should want a more meaningful role.
      • 14:10   Get educated. You don’t need to comply with all regulations, but you do need to comply with the regulations applicable to you.
      • 16:48   HiTrust has included all the right things, but if it’s not mandatory, it’s toothless.
      • 22:02   Build cybersecurity into products from the very beginning. Reverse reactive engineering is not the way to go anymore.
      • 25:24   Compliance teams need to be mandatory within the design and product development teams.
      • 26:08   You are answerable to the customers you design for, so build in trust and create value.    

        • Hema Lakkaraju Interview Transcript

        27 min
      • #19 Diana Kelley – Cybersecurity SME
        Cybersecurity Is Akin to Cancer Research
        Diana focuses on the importance of data-centric security in the cloud and reminds security practitioners that cybersecurity is a career-long fight.
        00:27 Diana’s career trajectory and her trifold perspective as practitioner, vendor, and analyst
        2:44 Data-centric security in the cloud
        3:22 The triumvirate of security: confidentiality, integrity, availability
        6:22 To manage the data management lifecycle, legal and tech should be working as a team. And yes, you really do have to read the T&Cs.
        10:03 Set clear parameters so that your employees don’t accidentally misstep.
        13:54 Just because we can store the data doesn’t mean we necessarily should.
        15:18 GDPR, love it or loathe it, has focused everyone’s attention on the issue of privacy.
        19:47 Don’t consider a cyber career unless you are in love with it.
        20:51 Being a cybersecurity practitioner is like being a cancer researcher or doctor.
        22:00 Know that this is a fight that you’re going to fight your whole career.
        22:28 Diana’s advice for women beginning their cybersecurity career – learn your craft and believe in yourself.
        Diana Kelley Interview Transcript
        26 min
      • Diana Kelley – Cybersecurity SME

        Cybersecurity Is Akin to Cancer Research

        Diana focuses on the importance of data-centric security in the cloud and reminds security practitioners that cybersecurity is a career-long fight.

        • 00:27 Diana’s career trajectory and her trifold perspective as practitioner, vendor, and analyst
        • 2:44 Data-centric security in the cloud
        • 3:22 The triumvirate of security: confidentiality, integrity, availability
        • 6:22 To manage the data management lifecycle, legal and tech should be working as a team. And yes, you really do have to read the T&Cs.
        • 10:03 Set clear parameters so that your employees don’t accidentally misstep.
        • 13:54 Just because we can store the data doesn’t mean we necessarily should.
        • 15:18 GDPR, love it or loathe it, has focused everyone’s attention on the issue of privacy.
        • 19:47 Don’t consider a cyber career unless you are in love with it.
        • 20:51 Being a cybersecurity practitioner is like being a cancer researcher or doctor.
        • 22:00 Know that this is a fight that you’re going to fight your whole career.
        • 22:28 Diana’s advice for women beginning their cybersecurity career – learn your craft and believe in yourself.

          • Diana Kelley Interview Transcript

          26 min
        • #18 Kristina Podnar – Digital Governance Advisor
          Cultivate Innovation within a Policy Safe Zone
          Kristina discusses the evolution of GDPR and is surprised by the readiness ratio of global multinationals to small and medium enterprises. She draws a clever analogy of digital policies as a backyard boundary: a safe space to be creative in not a restrictive yoke. For women in cyber, she feels the landscape is changing and exhorts everyone, regardless of gender, nationality, or race to go for it and get things done.
          03:49 GDPR isn’t a doomsday, and the enforcement and evolution of the regulations are likely to be slow and steady.
          05:40 Global multinationals haven’t got their GDPR act together, despite a huge spend, but small to medium enterprises have.
          10:32 Digital policies offer so many more opportunities than risks or compliance issues.
          12:16 Digital policies as a backyard boundary. Boundaries create a safe space to be creative within. And in that creativity lies the competitive advantage and value to organizations.
          13:30 Policy implementation should the responsibility of just one person. Clear and delegated authority is essential, and there is value in an outsider’s approach.
          16:40 Policies protect against pain. They can shape best practice and keep enterprises within the law, but really it’s about strategy.
          19:03 Addressing the multigenerational aspect within enterprises
          20:22 Younger generations are demanding more authenticity in their digital interactions. Bot or not.
          24:31 On gender diversity in cyber, it’s a changing landscape. Don’t be afraid to own your space and learn because you can be the best.
          26:01 Go for it and get things done
          Kristina Podnar Interview Transcript
          28 min
        • Kristina Podnar – Digital Governance Advisor

          Cultivate Innovation within a Policy Safe Zone

          Kristina discusses the evolution of GDPR and is surprised by the readiness ratio of global multinationals to small and medium enterprises. She draws a clever analogy of digital policies as a backyard boundary: a safe space to be creative in not a restrictive yoke. For women in cyber, she feels the landscape is changing and exhorts everyone, regardless of gender, nationality, or race to go for it and get things done.

          • 03:49 GDPR isn’t a doomsday, and the enforcement and evolution of the regulations are likely to be slow and steady.
          • 05:40 Global multinationals haven’t got their GDPR act together, despite a huge spend, but small to medium enterprises have.
          • 10:32 Digital policies offer so many more opportunities than risks or compliance issues.
          • 12:16 Digital policies as a backyard boundary. Boundaries create a safe space to be creative within. And in that creativity lies the competitive advantage and value to organizations.
          • 13:30 Policy implementation should the responsibility of just one person. Clear and delegated authority is essential, and there is value in an outsider’s approach.
          • 16:40 Policies protect against pain. They can shape best practice and keep enterprises within the law, but really it’s about strategy.
          • 19:03 Addressing the multigenerational aspect within enterprises
          • 20:22 Younger generations are demanding more authenticity in their digital interactions. Bot or not.
          • 24:31 On gender diversity in cyber, it’s a changing landscape. Don’t be afraid to own your space and learn because you can be the best.
          • 26:01 Go for it and get things done

            • Kristina Podnar Interview Transcript

            28 min
          • Dr. Andrea Little Limbago – Chief Social Scientist, Virtru

            The Human Element at the Overlap of Privacy and Security

            Andrea stresses the importance of quality over quantity when collecting data and says companies need to be able to explain what data is going into their AI models and why. She says it’s time the security industry look at how humans interact with technology and tailor their products accordingly. Andrea firmly believes the best way to increase gender diversity in this male-dominated field is to emphasize women and their achievements.

            • 00:47 Andrea’s unique role and responsibilities where social science meets cybersecurity
            • 03:45 Hacks are not just security issues but privacy issues too.
            • 06:04 The big data revolution came so quickly that people threw everything in to achieve results. Now we are seeing the repercussions of biases.
            • 08:20 GDPR the disruptor is still evolving.
            • 11:14 Move away from the focus on the user as the weakest link and actually making the technology work better for the user.
            • 14:32 Passwords are not something that works well with the way that the human mind works.
            • 16:57 The security community is a really creative group of people.
            • 20:01 Displaying the diverse aspects of a career in cybersecurity will help increase diversity among the practitioners.
            • 20:54 Security is bigger than your current sphere: This is an area where we can help protect our democracy and democracy around the globe.
            • 21:22 The lack of diversity in cyber cannot be ignored, but the best way to combat is to highlight and elevate and amplify the voices of women as it pertains to their expertise.
            • 24:21 Increasing diversity is not just the responsibility of the underrepresented, it is everyone’s responsibility.

              • Andrea Little Limbago Interview Transcript

              26 min
            • #17 Dr. Andrea Little Limbago – Chief Social Scientist, Virtru
              The Human Element at the Overlap of Privacy and Security
              Andrea stresses the importance of quality over quantity when collecting data and says companies need to be able to explain what data is going into their AI models and why. She says it’s time the security industry look at how humans interact with technology and tailor their products accordingly. Andrea firmly believes the best way to increase gender diversity in this male-dominated field is to emphasize women and their achievements.
              00:47 Andrea’s unique role and responsibilities where social science meets cybersecurity
              03:45 Hacks are not just security issues but privacy issues too.
              06:04 The big data revolution came so quickly that people threw everything in to achieve results. Now we are seeing the repercussions of biases.
              08:20 GDPR the disruptor is still evolving.
              11:14 Move away from the focus on the user as the weakest link and actually making the technology work better for the user.
              14:32 Passwords are not something that works well with the way that the human mind works.
              16:57 The security community is a really creative group of people.
              20:01 Displaying the diverse aspects of a career in cybersecurity will help increase diversity among the practitioners.
              20:54 Security is bigger than your current sphere: This is an area where we can help protect our democracy and democracy around the globe.
              21:22 The lack of diversity in cyber cannot be ignored, but the best way to combat is to highlight and elevate and amplify the voices of women as it pertains to their expertise.
              24:21 Increasing diversity is not just the responsibility of the underrepresented, it is everyone’s responsibility.
              Andrea Little Limbago Interview Transcript
              26 min
            • Dr. Andrea Little Limbago – Chief Social Scientist, Virtru

              The Human Element at the Overlap of Privacy and Security

              Andrea stresses the importance of quality over quantity when collecting data and says companies need to be able to explain what data is going into their AI models and why. She says it’s time the security industry look at how humans interact with technology and tailor their products accordingly. Andrea firmly believes the best way to increase gender diversity in this male-dominated field is to emphasize women and their achievements.

              • 00:47 Andrea’s unique role and responsibilities where social science meets cybersecurity
              • 03:45 Hacks are not just security issues but privacy issues too.
              • 06:04 The big data revolution came so quickly that people threw everything in to achieve results. Now we are seeing the repercussions of biases.
              • 08:20 GDPR the disruptor is still evolving.
              • 11:14 Move away from the focus on the user as the weakest link and actually making the technology work better for the user.
              • 14:32 Passwords are not something that works well with the way that the human mind works.
              • 16:57 The security community is a really creative group of people.
              • 20:01 Displaying the diverse aspects of a career in cybersecurity will help increase diversity among the practitioners.
              • 20:54 Security is bigger than your current sphere: This is an area where we can help protect our democracy and democracy around the globe.
              • 21:22 The lack of diversity in cyber cannot be ignored, but the best way to combat is to highlight and elevate and amplify the voices of women as it pertains to their expertise.
              • 24:21 Increasing diversity is not just the responsibility of the underrepresented, it is everyone’s responsibility.

                • Andrea Little Limbago Interview Transcript

                26 min

              About UberKnowledge

              From the publisher's feed

              Hear from top security practitioners and leading vendors on the latest cybersecurity challenges, best practices and innovations.