Understanding Cyber

From Function to Fortification: identifying and securing critical business functions

In this episode Toby and Tom discuss why understanding business impact is key to context for any cyber security programme, and a process for working it out.

If you want any cyber security support please get in contact with the team via the website: https://clearcutcyber.com or email [email protected]

Music is Green Lights by Jahzzar from the Free Music Archive and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Cyber Essentials

In this second part of the cyber essentials scheme we examine what the scope of it is, how you define your scope, and what is not in scope.

Further reading:

NCSC website: https://www.ncsc.gov.uk/cyberessentials/overview

IASME (NCSC partner): https://iasme.co.uk/cyber-essentials/

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Cyber Essentials

The UK has a certification scheme called Cyber Essentials to help improve cyber security. In this podcast we help you understand what the cyber essentials and cyber essentials plus schemes are, and why you should follow the advice contained in the essentials. This podcast provides and overview of the scheme, and later podcasts will go into the detail of them.

Further reading:

NCSC website: https://www.ncsc.gov.uk/cyberessentials/overview

IASME (NCSC partner): https://iasme.co.uk/cyber-essentials/

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Honeypots and Deception

Ever wondered what honeypots have to do with cyber security and how to use them to give high quality alerts about an attack? Listen to understand.

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Episode 25 - OT / Operational Technology

We understand: What is OT, what is the difference between OT and IT, why this difference matters, and why you need to think differently when securing OT.

Read more about OT:

https://en.wikipedia.org/wiki/Operational_technology

Black energy OT attack that Tom described:

https://en.wikipedia.org/wiki/BlackEnergy

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Episode 25 - Cryptography 2

We continue to understand: What is cryptography, this time focussing on asymmetric crypto, how how it is a fundemental part of the internet and security - all without any maths!

Key exchange colours - in video!

https://www.youtube.com/watch?v=d_FU9tZIo10

Wikipedia on public key crypto:

https://en.wikipedia.org/wiki/Public-key_cryptography

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Episode 24 - Cryptography 1

We understand: What is cryptography, why is it important, and what are its applications - all without any maths!

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Episode 23 - Understanding Apps and Web Apps

We understand: What is an App? When did they start being called apps? How do they work? Whats a web app and why are apps much more reliant on the internet today? How might an app be compromised?

Further reading:

https://en.wikipedia.org/wiki/Mobile_app

https://edu.gcfglobal.org/en/computerbasics/understanding-applications/1/

https://www.consumer.ftc.gov/articles/0018-understanding-mobile-apps

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Episode 22 - AI

We understand: What is AI, how does it work, its history and future, use cases, and potential vulnerabilities

Further reading:

Wikipedia: https://en.wikipedia.org/wiki/Artificial_intelligence

Oxford uni paper: http://www.fhi.ox.ac.uk/Reports/2008-3.pdf

Code bullet youtube: https://www.youtube.com/c/CodeBullet/

ZDNet: https://www.zdnet.com/article/what-is-ai-everything-you-need-to-know-about-artificial-intelligence/

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/

Episode 20 - The Ransomware

We understand what ransomware is, how it works, some notable examples and what to do it you suffer it.

Further reading here:

NCSC

https://www.ncsc.gov.uk/guidance/mitigating-malware-and-ransomware-attacks

NCA

https://www.nationalcrimeagency.gov.uk/what-we-do/crime-threats/cyber-crime

Action fraud

https://www.actionfraud.police.uk/

US Cert

https://www.us-cert.gov/

FBI

https://www.fbi.gov/scams-and-safety/common-scams-and-crimes/ransomware

No more ransom

https://www.nomoreransom.org/

Music by Jahzzar and used under CC BY-SA 4.0 license: creativecommons.org/licenses/by-sa/4.0/