Holding the Board Accountable for Security (Jeff Engle, Part 3)
Even after many devastating examples of the impact of cyber-attacks on business, cyber is still drastically underestimated. Organisations must implement a successful security programme, with the board who are held accountable and have a thorough understanding of the risks to prepare for and the risks they are willing to accept.  In the final episode of this three-part series, Jeff Engle, Veter...
11m Mar 13, 2019
11m
How Security Leaders can Communicate with the Board (Jeff Engle, Part 2)
In the second episode of this three-part series, Jeff Engle, Veteran of US Army Special Operations Commands and Vice President of Federal for United Data technologies talks with Steve Durbin, Managing Director, ISF about the importance of effective communication and knowing your audience when collaborating with enterprises successfully to combat cyber threats.  Jeff and Steve discuss the need ...
14m Mar 12, 2019
14m
What can Businesses Learn from Military Security Strategies? (Jeff Engle, Part 1)
People can either be your first line of defence, or your weakest link – it is up to organisational leadership and how they approach risk management to determine which one they are.  In the first episode of this three-part series, Steve Durbin, Managing Director, ISF talks with Jeff Engle, Veteran of US Army Special Operations Commands and Vice President of Federal for United Data technologies,...
14m Mar 05, 2019
14m
The Life of a Cybercriminal (Brett Johnson, Part 2)
In the second episode of this series, former US most-wanted cybercriminal Brett Johnson, the ‘Original Internet Godfather’, speaks with Steve Durbin, Managing Director, ISF about his career as a cybercriminal. Brett offers an insider account, from his first scam he committed on eBay, to becoming a part of a worldwide cyber-criminal organisation.  Together, Steve and Brett discuss how the colla...
18m Feb 26, 2019
18m
The Myth of Supply Chain Assurance
The global supply chain is increasingly complex, diverse and hyper-connected so that gaining assurance of its security, safety and reliability is becoming more myth than reality. The recent rise in data breaches highlights these supply chain vulnerabilities and third parties are being heavily criticised for both inadequate preparation and protection.  In the final episode in this four-part ser...
15m Feb 19, 2019
15m
Inside the Mind of Today's Cybercriminals (Brett Johnson, Part 1)
In 2017, Cybercrime was an estimated $600 billion industry affecting approximately 2.8 million victims a day. The rise in ransomware attacks (an estimated 350%) and trend in spearfishing aimed at senior executives, is a further testament to the increasing sophistication, diligence and patience of today’s cybercriminals.  In this first of two episodes, Former US most-wanted cybercriminal Brett ...
18m Jan 25, 2019
18m
The Impact of Legislation in 2019
Legislation by its nature is government and regulator driven, resulting in a move towards national regulation at a time when cross border collaboration is needed. Organizations will struggle to keep abreast of such developments which may also impact business models which many have taken for granted. This will be a particular challenge to cloud implementations where understanding the location of...
17m Jan 22, 2019
17m
Governments and the Challenge of Rapid Digitalisation (Dr. Reinhard Brandl, Part 1)
As the threat landscape evolves, digitalisation is an ongoing challenge for governments and politicians, making it increasingly difficult to secure networks, personal information and critical infrastructure. Governments must keep abreast of developments in cyber security and ensure that best practices are communicated to businesses, and awareness is raised amongst the public. In the first of t...
12m Jan 10, 2019
12m
ISF Podcast: The Increasing Sophistication of Cybercrime & Ransomware
Cybercrime is now a market that is growing and increasing in sophistication, worth $600 billion in 2018 and affecting 2.7 million of us globally on a daily basis. With cybercriminals becoming increasingly strategic and patient in their approach, organisations cannot afford to ignore the increasing threats posed by such operations.  In the first episode of this four-part series which explores t...
16m Jan 08, 2019
16m
Emerging Cyber Threats for 2019
Will 2019 see cyber attacks come in isolation, or in combinations? A question organisations should think about as we see cyber space becoming increasingly connected and technology developments increasing in pace and scale.  In this podcast, Steve Durbin, Managing Director, ISF shares his predictions for the top 4 emerging cyber threats for 2019 – increased sophistication of cybercrime and rans...
11m Dec 19, 2018
11m
CISOs: The Need for a Clear Vision (Ondrej Krehel, Part 2)
Attacks from nation-states, where organisations are at risk are increasingly appearing on the threat horizon. As extortion is predicted to become one of the most common forms of cybercrime, it is imperative for the board to create a solid eco system between executives and individuals to conduct technical operations. Without a clear vision in place, CISOs will lack the transparency needed to ove...
12m Dec 06, 2018
12m
A Digital Forensics Specialist on Data Breaches (Ondrej Krehel, Part 1)
It is an unavoidable fact that businesses and organisations’ sensitive information will be breached at some stage in the future. When a network has been compromised, proper investigation and remediation to the incident is vital, as the impact can be significant in the digital world. There are various steps that need to be taken to respond and recover from a data breach, much like the processes ...
14m Nov 29, 2018
14m
Virtual Reality and a New Code of Ethics (Emory Craig, Part 2)
Virtual reality has a great deal of potential for the betterment of society - but as with all new technologies, we should be aware of ethical concerns that could emerge as social problems further down the line. With this in mind, there is a need for increased legislation and guidelines to ensure both businesses and consumers don’t get caught up in the novelty of virtual reality.  In the second...
16m Nov 22, 2018
16m
A Futurist's Insights on Virtual & Augmented Reality (Emory Craig, Part 1)
Virtual, augmented and mixed reality has made tremendous progress over the last 4 years. Since then the landscape has dramatically shifted - consumers now experience these new technologies through devices such as smartphones and smart headsets, taking them into a whole new era. Organisations within industries such as film and medical have started implementing virtual reality to transform the wa...
8m Nov 15, 2018
8m
Doing Business the Cyber Way
The traditional way of doing business is transforming, with businesses now required to adopt and embed cyber technology into their organisation. The shift in the way we do business isn’t just down to technology, but also cultural change – such cultural shifts include increasing business agility, shared information rather than centralised data, collaboration rather than a traditional triangle ty...
26m Oct 23, 2018
26m
ISF Podcast: Cybersecurity Exercises: Enhanced Breach Response
Cyber-attacks are steadily increasing year on year. Organisations are constantly under threat with over two-thirds experiencing data breaches in 2017. Consequently, cyber security preparedness and resiliency are becoming increasingly important to the protection of an organisation’s information. One way of improving the ability to handle cyber-attacks is by running cyber security exercises.  In...
25m Oct 09, 2018
25m
Healthy Social Media and Technology Habits (Scott Amyx, Part 3)
Social media has transformed the way users behave online and offline. It has prevailed over the last decade and billions of people around the world engage with each other on these platforms on a daily, if not hourly basis. Whilst social media encourages individuality, the sharing of ideas and opinions online has created stereotypes and unrealistic benchmarks that people must attain to be accept...
11m Oct 03, 2018
11m
The Global Economic Impact of Artificial Intelligence and Machine Learning (Scott Amyx, Part 2)
‘Artificial Intelligence’ has materialised much faster than leading researchers and security professionals in the field expected and the future of it remains unknown. Thus far, consumers have engaged with virtual assistants, namely Amazon’s ‘Alexa’ or Apple’s ‘Siri’. Additionally, it is proposed that businesses can reap the benefits of increased efficiency through automating the value chain but...
16m Sep 26, 2018
16m
A Futurist's View on IoT and its Implications for Businesses and Consumers (Scott Amyx, Part 1)
The ‘Internet of Things’ is a name given to exponential technologies encompassing our physical devices, vehicles, home appliances and increasingly normal everyday objects such as water bottles, that can store and exchange data. For consumers, they are often fearful of these advances and question how secure their personal data is. To overcome this issue, consumers must self-educate about persona...
14m Sep 18, 2018
14m
Marketing Teams - Adopt New Tactics to Increase Business
Following the introduction of GDPR and new e-privacy laws, sales and marketing teams are under pressure to think of new tactics and methods in which to collect information about existing and potential clients. Marketing relies heavily on digital engagement and therefore necessitates a strong brand image online to convert visitors on a web page to engage with the business.  In this podcast, Ste...
23m Sep 11, 2018
23m
Data Breach Response
The probability of a data breach for most organisations is highly likely, with it being a matter of ‘when’ not ‘if’. IT and security leaders are increasingly under pressure to not just protect the company’s reputation, stock and critical assets, but also ensure plans and systems are set up so that an organisation can properly respond to a data breach.  In this podcast, Steve Durbin, Managing D...
19m Aug 01, 2018
19m
M&A Best Practices for Cybersecurity
Today, acquirer companies in M&A’s are intensifying their cyber security due diligence during the negotiation period. Why? Because the cyber-risks to businesses are ever intensifying and any data vulnerabilities exposed can seriously threaten the value of a business and the overall success of the venture.  In this podcast, Steve Durbin, Managing Director at ISF, discusses the importance of the...
10m Jul 24, 2018
10m
The Challenges of Integrating Security into the Product Development Process (Richard Guida, Part 3)
In the final part of this 3-part business leaders podcast series, Richard Guida, former CISO at Johnson & Johnson, and Steve Durbin, Managing Director at ISF, discuss what keeps CISO’s awake at night, the challenges integrating security into the product development process, and the importance of security for lay people. https://www.securityforum.org/videos-podcasts/isf-podcast-security-product...
20m Jul 19, 2018
20m
Is AI & Machine Learning Contributing to the Skills Shortage?
Artificial intelligence and machine learning are redefining cyber security, re-engineering threat detection tools and exposing sophisticated attacks – but there is a dark side. With increased use, we are seeing outcomes that go beyond the capabilities of IT and security professionals, which if not managed correctly could lead to major security issues and widen the already long-term skills gap. ...
16m Jul 17, 2018
16m
Third Party Suppliers - Where is my data?
A survey with ISF Members revealed that only 50% of organisations have a sufficient framework in place to manage third parties suppliers, and they don’t regularly review or update it! With third party suppliers playing a critical role in supporting business activities, and often having access to critical business information and customer data, management and engagement with third parties as pa...
16m Jul 12, 2018
16m
Connected Devices and Data Security: The Challenges to Business and the Consumer (Richard Guida, Part 2)
In the second part of this 3-part business leaders podcast, Steve Durbin, Managing Director at ISF and Richard Guida, Managing Director at Guida Technologies discuss the negative impact new technology and in particular  connected devices has on data security, and what this means for both businesses and consumers in the future.  https://www.securityforum.org/videos-podcasts/isf-podcast-data-sec...
13m Jul 10, 2018
13m
Steve Durbin in Conversation with Richard Guida - Part 1
In the first of this 3 part Business Leaders podcast, Steve Durbin, Managing Director at the ISF talks with Richard Guida, Managing Director at Guida Technology Associates about his experience as a former CISO implementing data security within a large organisation, the role technology plays and the implications this has on security and the people who work within it. https://www.securityforum.o...
22m Jun 24, 2018
22m
Mobile Apps: My kingdom for an app!
Increasingly organisations are incorporating mobile apps into their customer service offerings, however struggle to overcome the challenge of adequately securing apps, while ensuring ease of access is not compromised. With the added consideration of data privacy, businesses need to start focusing on security rather than just performance, but whose responsibility is it? In this podcast Steve Du...
18m Jun 24, 2018
18m
GDPR SOS: Are we too late to meet compliance?
In this podcast, Steve Durbin, Managing Director at the Information Security Forum, shares the 5 key actions organisations can take today to demonstrate compliance, and how they can continue to build compliance into the organisations DNA beyond the deadline date. Steve also discusses the key issue of third party suppliers and their access to personal information, sharing an approach to help rat...
24m May 17, 2018
24m
Building a Workforce for the Future: All roads lead to the CISO
Recognising the need to build a sustainable security workforce is of real concern to organisations across all sectors, as any shortfalls in skills and capabilities could leave an organisation vulnerable to an attack on its most critical assets, impacting an organisations performance and brand reputation. But as demand outstrips supply, a sustainable security workforce is becoming more and more ...
12m Apr 24, 2018
12m
Protect your critical information assets before it's too late
When your most critical information assets represent 80% of your organisations total value, it’s important to know exactly what they are, where they are, and how to protect them? Until regulations such as GDPR came into focus, most organisations, while familiar with the term had no real understanding of how to define their ‘critical information assets’ and why they should be protecting them. Or...
13m Feb 06, 2018
13m
Who is the real insider threat to you business?
Insider threats account for 54% off all breaches, and are found at all levels of an organisation, from top to bottom. Numerous factors are increasing organisations’ exposure to the threats posed by insiders, and technical controls are limited. To combat these threats, organisations must invest in a deeper understanding of trust, and work to improve the trustworthiness of all insiders.  The ins...
14m Jan 23, 2018
14m
Ransomware? The currency of cyber criminals...
The frequency of ransomware attacks on businesses has significantly grown over the past two years, with the number of detections increasing by nearly 2000%. As the space becomes more attractive and lucrative to cyber criminals, the threat of ransomware is only set to rise in 2018 as attackers get more creative, sophisticated and persistent, and attacks from named ransomware such as WannaCry and...
8m Jan 10, 2018
8m
The CISO Reset: Redefining your value to the business
The role of a CISO has evolved over the years’ and now requires someone who combines InfoSec capabilities with business requirements. They must be able to align cyber to business strategy, speaking both languages while developing reporting metrics that satisfies the board and promotes good cyber resilience across the business. All these attributes support the belief that the CISO of the future ...
13m Dec 19, 2017
13m
EU GDPR for India: Are you ready to protect your European customers' data?
With the main industries in India comprising IT Services providers, banks and conglomerates such as Tata Group, Birla Group, Mahindra, and Reliance who all manage EU personal data – Indian organisations are determining how they can comply with the EU GDPR by May 2018. India aims to achieve 25 billion digital transactions in 2017 to 2018, so complying with the GDPR is going to have to be top of ...
11m Dec 06, 2017
11m
Cyber and the Board: Stop making excuses and start making the decisions that matter
When we talk about the board and cyber security, we have moved away from the board doesn’t get it, to the board gets it, to the board doesn’t feel they are sufficiently briefed when a breach takes place. But is all of this evasive talk to avoid responsibility, or is there still a lack of communication between cybersecurity professionals and the board?  In this podcast, Steve Durbin, Managing D...
13m Nov 29, 2017
13m
IoT: All I did was press the button on my smartphone
The smartphone has become an extension of our work and our personal life – everyone expects to be able to access something with a click of the button. But what are some of the serious consequences that a culture of convenience has given rise to? With 21 billion connected devices estimated to be around the world by 2020 this is surely a question all technology users should be asking.  In this p...
11m Nov 21, 2017
11m
Tackling the Cyber Skills Shortage: Innovation is Key
As organisations of all sizes try to be more agile in responding to emerging threats, finding people with the right skill set is something of a challenge. With cyber now integrated into the DNA of business, the big question remains: how do we attract, train and retain the cyber specialists of the future?  In this podcast, Steve Durbin, Managing Director ISF, offers insights into how educationa...
10m Sep 06, 2017
10m
Falsification: How to protect the integrity of data
As organisations become increasingly dependent on data, unscrupulous competitors and cyber criminals are using falsified information as a form of attack. Falsification has been used to inflict both product and brand damage on organisations that have been too slow to protect their information. So, what steps can organisations take to protect the integrity of their data and minimise the impact up...
9m Aug 15, 2017
9m
GDPR Compliance: Full disclosure becomes a reality
Many organisations with a footprint in Europe are still unclear if the GDPR applies to them, or if they have the right team and resources to address it. The GDPR will require a collaborative effort between businesses and third parties to ensure that all areas of the information life cycle are protected – a daunting project for security teams. In this podcast, Steve Durbin, Managing Director ISF...
11m Jul 26, 2017
11m
Emerging Technology: AI's role in business
Artificial Intelligence is a growing trend across industry sectors from medical and legal to automotive and manufacturing. However, the new capabilities of AI technologies, can lead to unexpected outcomes and new risks on the threat horizon, such as: AI machines misunderstanding information, new means for criminals to extract an organisation’s mission critical information and AI technologies le...
13m Jun 27, 2017
13m
Building Cybersecurity into the mergers and acquisitions process
Increasingly, organisations are waking up to the negative business impact of poor cybersecurity programmes and are taking cyber incidents more seriously in their mergers and acquisitions deals (e.g YAHOO! and Verizon). However, trying to get a grasp of the cyber profile of an organisation is extremely difficult – as integrity of information is often difficult to monitor. For companies to grow a...
10m Jun 12, 2017
10m
Threats to Critical Infrastructure: Internet as a utility
In a digital age, the internet is viewed by businesses and individuals alike as a basic utility. Businesses are dependent upon it and this, in itself, is a threat that cyber criminals can take advantage of. We saw earlier in May 2017 how the NHS attack on its critical infrastructure led to a shutdown of the NHS Windows systems, causing medical professionals to have to resort to pens and paper w...
13m May 22, 2017
13m
The NY DFS: How the ISF can help
In March 2017, the New York Department for Financial Services (DFS) implemented a Cyber Security regulation, requiring financial institutions to establish a cyber security programme to protect consumer data. But how will this affect New York businesses and what measures should they put in place to meet these requirements?  In this podcast, Steve Durbin, Managing Director of the ISF, addresses ...
8m May 04, 2017
8m
The Role of the End User - the Weakest or Strongest Link
People remain a ‘wild card’ to the cyber security of an organisation. Many businesses recognise people as their biggest asset, yet still fail to recognise the need to secure ‘the human element’ of information security. Steve Durbin, Managing Director at the ISF, tackles the question: how can organisations make people their strongest line of defence against cyber-attack? https://www.securityfor...
10m Feb 22, 2017
10m
Government & Regulators Won't Do it for You
The GDPR will require extreme preparation in order for organisations to meet new compliance rules. Businesses cannot rely on the government and regulatory bodies to do the work for them. In this podcast, Steve Durbin, Managing Director at the ISF, talks through the checklist of regulations, financial and operational challenges and data management that organisations must take responsibility for ...
11m Feb 01, 2017
11m
Cyber Crime Syndicates Take a Quantum Leap
Cyber-crime syndicates have rapidly matured and have now become businesses. With rogue states taking advantage of these services, the resulting cyber incidents this year will be more damaging than ever before. Steve Durbin, Managing Director at the ISF, offers insights into how organisations can stay one step ahead of the increasing sophistication of cyber-criminal organisations. https://www.s...
10m Jan 11, 2017
10m
The Internet of Things Adds Unmanaged Risks
It is expected that 28.4 billion devices will be connected in 2017. IoT devices offer a way in for cyber-attacks. So what are the risks and how will this impact privacy? In this podcast, Steve Durbin, Managing Director at the ISF, addresses how the healthcare, financial and many other industries can manage the threat of the IoT. https://www.securityforum.org/videos-podcasts/the-internet-of-unm...
9m Jan 11, 2017
9m
Managing Through a Breach, with Steve Durbin
Organisations that suffer an incident face challenging and damaging circumstances:  • data stolen  • financial penalties  • legislative and regulatory scrutiny  • reputation damage Steve Durbin, Managing Director at the ISF, offers guidance and practical steps, to manage through a breach in a confident and intelligent manner and plan for the day you hope never arrives. https://www.securityfo...
11m Nov 28, 2016
11m
Aligning Cyber Security to Business Strategy, with Steve Durbin
ISF research shows that some of the largest organisations have misaligned cyber security practices. This podcast, in conversation with Steve Durbin, Managing Director at the ISF, addresses why it is so important for businesses to align cyber security across their enterprise and what steps they can take to make this happen. https://www.securityforum.org/videos-podcasts/isf-podcast-aligith-steve...
11m Nov 28, 2016
11m