THE S.COM PODCAST

SummaryIn this conversation, Kelly Allen interviews Andy Schneider about the illusion of security preparedness. They discuss Andy's background in cybersecurity, the NASA cyber attack in 1999, the importance of cloud security posture, and best practices for enhancing security in the cloud. They also touch on the talent shortage in the cybersecurity industry and the need for continuous detection capabilities. Andy shares the story of the NotPetya cyber attack as an example of the impact of cybersecurity on geopolitical events. The conversation covers various topics related to cybersecurity, including the impact of cyber attacks, the evolving nature of cybersecurity, the importance of human connection, and the role of technology in defense. The guest, Andy Schneider, emphasizes the need for continuous learning in the cybersecurity field and highlights the different career opportunities available. He also provides recommendations for building a comprehensive cybersecurity tool stack and selecting the right technology partner.Chapters00:00: The Evolution of Cyber Warfare: From 1999 to the Present03:56: Unveiling the Illusion of Security Preparedness: A Cybersecurity Journey09:41: The Role of Cloud Security Posture Management in Cyber Defense36:08: Human Connection and Trust in Cybersecurity50:02: Continuous Learning and Adaptation in the Cybersecurity IndustryTakeawaysThe evolution of cyber warfare has led to a shift in the nature of cyber attacks and the actors involved.The NASA cyber attack of 1999 serves as a relevant case study highlighting the impact of cyber attacks and the vulnerabilities of digital infrastructure.Cloud security posture management (CSPM) is a crucial aspect of cybersecurity, but it is not the only defense mechanism needed to protect against cyber threats.The cybersecurity industry faces a talent shortage, and there is a need for upskilling and adapting to the evolving landscape.Human connection and trust play a significant role in cybersecurity, and the industry requires continuous learning and adaptation to stay ahead of cyber threats. Keywordssecurity preparedness, cybersecurity, illusion, NASA cyber attack, cloud security posture, talent shortage, detection capabilities, NotPetya cyber attack, cybersecurity, cyber attacks, evolving nature, human connection, technology, defense, continuous learning, career opportunities, tool stack, technology partner

SummaryJoin Kelly as she sits down for an illuminating conversation with none other than James Moncrieff, the Global Cyber Risk Lead at GFK, who shares his journey from being a police officer to transitioning into the information security field. The two discuss James' childhood dream of becoming a firefighter and how he accidentally ended up in the police force. James also highlights his challenges in entering the cybersecurity industry and the importance of persistence and self-belief.In this conversation, James discusses the importance of understanding the risk of shadow IT and the need to shift from a culture of exception to accountability in cybersecurity. He highlights the complexity of insider threats and the different types of insiders that businesses must be aware of. James also stresses the limitations of security controls and the importance of preventing small attacks from escalating. He explains the role of human intelligence in cybersecurity and the process of sanitising intelligence for protection.Finally, we explore the importance of creating a culture of trust and protection and the opportunities available in cybersecurity.Chapters00:00 The Journey from Law Enforcement to Cybersecurity16:36 The Power of Persistence and Self-Belief in Career Transition27:07 Stepping Outside Your Lane: Understanding Security Principles33:55 The Strategic Role of GRC in Cybersecurity34:25 The Foundation of InfoSec: GRC Work and Risk Management36:21 Navigating Insider Threats and Human Intelligence in Cybersecurity01:04:09 Embracing Diversity and Unique Backgrounds in InfoSecTakeawaysTransitioning from law enforcement to information security can be challenging, requiring persistence and self-belief.Diversity in problem-solving and different perspectives can lead to innovative solutions in the cybersecurity field.Understanding security principles and stepping outside one's lane can enhance the effectiveness of security professionals.The role of GRC (Governance, Risk, and Compliance) in cybersecurity goes beyond checklists and policies, requiring a broader understanding and strategic approach. GRC work is the foundation of InfoSec, encompassing risk management, governance, policies, and coordination of security development.Understanding the impact of systemic issues on the business is crucial for effective risk management and security posture.Insider threats are complex and can range from accidental to malicious, requiring a nuanced approach to detection and prevention.Human intelligence plays a vital role in cybersecurity, and a process to protect and utilize intelligence from individuals on the ground is needed.Diversity in InfoSec is essential, and individuals with unique backgrounds and skills bring valuable perspectives and problem-solving abilities to the industry.Keywordscybersecurity, career transition, police officer, persistence, self-belief, diversity, problem-solving, security principles, GRC, challenges, GRC work, risk management, governance, policies, vulnerability management, security development, SOC, insider threats, human intelligence, cybersecurity, diversity, unique backgrounds, InfoSec  

SummaryIn this episode, Kelly meets with Jamie McAnsh, who shares his inspiring journey from a challenging childhood to becoming a successful entrepreneur and speaker. Jamie discusses the importance of overcoming obstacles and finding purpose in life. We also explore AI's potential for promoting inclusion and levelling the playing field for individuals with neurodiversity. In this conversation, Jamie discusses the use of AI in communication and writing, highlighting its benefits in improving efficiency and inclusivity. He emphasises the importance of embracing diversity in problem-solving, particularly in industries like cybersecurity. Jamie also explores the role of AI in idea generation and the potential for AI to create more opportunities for diverse talent. He addresses the challenges of ensuring ethical and unbiased AI and emphasises the need for diverse people to monitor and input non-biased information. The episode concludes with Jamie's advocacy for a work environment that values and invests in its employees, promoting equity over equality.TakeawaysAI can be a valuable tool in communication and writing, improving efficiency and inclusivity.Diversity is crucial in problem-solving, particularly in industries like cybersecurity.AI can enhance idea generation and provide opportunities for diverse talent.Ensuring ethical and unbiased AI requires a diverse group of people to monitor and input non-biased information.A work environment that values and invests in its employees promotes equity and creates a better future.Chapters00:00 Introduction and Background06:41 Overcoming Challenges and Finding Purpose28:16 The Use of AI in Communication and Writing31:12 The Role of Diversity and Inclusion in Problem Solving36:11 The Benefits of AI in Problem Solving and Idea Generation37:57 Ensuring Ethical and Unbiased AI47:02 Creating a Better Work Environment through Diversity and Equity52:51 The Importance of Equity over Equality55:31 The Future Outlook for Diversity and Tech

SummaryJoin Lisa Ventura, founder of Cybersecurity Unity, as she takes us on a journey through the dynamic world of cybersecurity. In this episode, Lisa delves into:Her personal journey into cybersecurity and the vital role of collaboration and information sharing.The impact of generative AI on cybersecurity, focusing on the challenges of identifying phishing emails and addressing biases in AI-generated content.The importance of early education and awareness in safeguarding individuals from cyber threats.Addressing the gender gap in cybersecurity and advocating for inclusivity and diversity.Lisa's insights on neurodiversity and how it can be a superpower in the cybersecurity field.This enlightening conversation covers a wide array of topics, including workplace challenges, managing stress, overcoming imposter syndrome, and identifying narcissistic personality traits. Tune in to gain valuable insights into creating inclusive work environments and enhancing communication in interviews.

Chris Hodson shares his journey into cybersecurity, driven by curiosity and a passion for understanding how things work. He emphasises the importance of gaining visibility and control in today's interconnected landscape. Chris also discusses the integration of AI in cybersecurity and the need for security products to solve real problems. He highlights the significance of effective communication and the need to bridge the gap between technical jargon and business understanding. The conversation covers various topics related to cybersecurity, including crisis simulation, the importance of understanding the business impact of cybersecurity, cloud security, effective communication to leadership, and the future of cybercrime. The key takeaway is the need for cybersecurity professionals to focus on the 'why' of cybersecurity solutions and to effectively communicate the business risks and impact to leadership. Additionally, there is a need for scenario-oriented and frequent security education and a focus on foundational strategies for managing and monitoring the cloud.

Gonxhe and Ilvana from Sense Cyber Research Centre share their inspiring journeys into the cybersecurity industry. They talk about the importance of having more women in cybersecurity and provide practical tips to bridge the gender gap. They also discuss the challenges women face in the industry and offer strategies to overcome barriers to entry. The conversation encourages critical thinking and inspires women to join the field.