Dear Infosec

The internet underpins most of modern life, change it and the world follows or falls. This discussion draws on work by Australia's net overseer to explore just how it might change and who benefits and loses. If you would like to find out more about the topics covered in this episode, get in touch with Mark Ward , Senior Research Analyst at the ISF. Other useful episodes... The promise and peril of...

 What rules and regulations should govern AI? Would the application of Asimov's laws of robotics help? Regulators are queuing up to apply guidelines and good practices to the way organisations use AI tools. Policy experts and AI wranglers, Steve Dorward and Verona Johnstone-Hulse , join ISF analysts Lee Munson and Mark Ward to take a look at the ever-growing roster of regulations in order to find...

 A lot has changed in the Information security space in the past decade, with cyber security transforming from a niche career path into a highly sought-after field. In this episode of Dear Infosec,  ISF's Mark Ward and Paul Watts , discuss the pivotal events and formative experiences that have shaped the life and career of Petri Koivisto , a seasoned security leader and current CISO at Finnish ste...

 In part two of our CERT on Jersey, Matt Palmer   Director of the Jersey Cybersecurity Centre  continues his conversation with ISF  Distinguished Analyst Paul Watts , and ISF Senior Analyst and Dear Infosec host Mark Ward . Matt shares further insight into the set-up of a Computer Emergency Response Team and the issues associated with running the centre. He also shares his future plans for the cen...

Matt Palmer , Director of the Jersey Cybersecurity Centre has been the driving force behind the creation of a Computer Emergency Response Team (CERT) for Jersey – one of the Channel Islands. As the architect behind this initiative, Matt explains the circumstances that led to the realisation of its necessity, the efforts involved in bringing it to fruition, and the significant impact it has had sin...

We're back with a new look and content even better than before! Over time, the Analyst Insight Podcast has evolved, and so has our content. What began as a review of research has transformed into a space for in-depth discussions addressing pressing Infosec issues. As our scope has grown, so has our community. In this first episode of the re-branded podcast, host Mark Ward , along with Paul Watts ;...

 Just what does a BISO do all day, and how much does it differ to that of a CISO? ISF Distinguished Analyst Paul Watts and ISF Analyst Mark Ward try to find out by talking to Adriano Pinheiro and Sneha Ahuja , who fulfil this role for their organisation. Adriano and Sneja explain in depth, what they do, how they do it, and how the job differs from organisation to organisation. If you would like to...

Today marks the 50th episode of the Analyst Insights podcast! This milestone episode celebrates the positives of working in InfoSec. Drawing on testimonies from previous guests, Patric Versteeg and Mike Cartwright , as well as conversations among ISF regulars Paul Watts and Esther Schagen-van Luit , this episode brings to life all the ways InfoSec can reward and enhance the lives of those who work...

Research at the ISF is changing to align more closely with the evolving nature of information security and the demands of Members. In a follow-up episode to 'Research in 2024', Principal Research Analyst Richard Absalom joins Senior Analyst and podcast host Mark Ward to discuss in detail what’s changing with ISF Research. Richard and Mark outline what Members can expect from the new initiatives, a...

 In this third installment of the 'Exploring Careers' series, which puts infosec careers under the microscope, experienced security auditors - Aarti Ajay , Einat Segal , and Deepak Uniyal - join ISF Analyst and podcast host Mark Ward, along with ISF Principal Consultant Bharat Thakrar, to discuss auditing. Together, they delve into the role, its responsibilities, misconceptions about auditors, pot...

The emergence of the Business Information Security Officer (BISO) role shows how far security leadership has evolved. But how different is it really from the CISO role? Recruitment expert Ross Tanner debates the difference between the two, and when an organisation should go hunting for each one with ISF analysts Paul Watts and Mark Ward. ​ If you would like to find out more about the topics covere...

In the first of a new format for the Analyst Insight podcast, Alex Jordan , a first-time guest and Head of Tools & Methodologies at the ISF, joins ISF Principal Esther Schagen-van Luit , along with ISF analysts Paul Watts and Mark Ward . Together, they dive into a comprehensive discussion examining the report on the breach at the British Library in the UK. Listen as they aim to uncover what we...

There is no getting away from Artificial Intelligence (AI) at the moment - It’s in our phones, on the web and shaping our world. Whether this is a good thing or a troubling development for information security and the wider business, is debated by technology and security expert Yngvar Ugland with ISF research analysts Lee Munson , Mark Ward and ISF Lead Cyber Security Consultant Luka Ivezic. If yo...

Business Information Security Officers (BISOs) are a newish addition to the roster of jobs available to InfoSec practitioners, but how do you become one, and how do they relate to being a CISO? Security leader Erhan Temurkan joins ISF analysts Paul Watts and Mark Ward to dissect his journey from BISO to CISO and unpack what he saw along the way. If you would like to find out more about the topics...

Recruiting individuals to fill roles in information security is tough, compounded by the increasing complexity of managing, mentoring, and training once they're on board. Keith Price , a seasoned CISO at National Highways, and cyber security veteran, delves into the many ways to hire and oversee InfoSec professionals alongside Distinguished Analyst Paul Watts and Senior Analyst, Mark Ward from the...

In celebration of International Women’s Day, some of the leading ladies in cyber at the ISF: Esther Schagen-van Luit , Principal of Services; Hui Shan , Senior Analyst; Shreya Tiwari , Zero Trust Product Lead; and Francesca Williamson , Analyst, share why they choose to stay in cyber. Listen to their reflections on each of their careers so far, their trusted recommendations on various resources th...

Ransomware emerged in 1989 and continues to afflict organisations today, alongside various other scams, whether cyber-related or not. It's the same threat on a different day. Listen as InfoSec veteran Paul Ducklin , security podcaster Alice Violet and ISF analysts Lee Munson and Mark Ward debate if anything has changed or we are stuck in the same cycle of risks and how to break out of it.  If you...

For those recently appointed as security leaders or CISOs, the initial period can be challenging, as the consequences of missteps carry tangible risks. In this podcast, esteemed security lead Lisa Burns-Peake and experienced former CISO Paul Watts , engage in a discussion on strategies for establishing a favorable early reputation and fostering constructive relationships rather than risking aliena...

The world feels increasingly heated and volatile. Is this a temporary trend or a sign of things to come? Dire forecasts of trouble ahead and what can be done to cope are debated by Paul Watts , Richard Absalom and Mark Ward in this threat-themed podcast. Paul shares his formative experiences from the last big crisis he weathered – the 2008 financial crash which hit during his time in retail financ...

Delving into their innovative recruitment project, Florence Bertaut from Axa's French arm details the project's scope and school outreach initiatives to young students - many of whom may not be studying computer science. Providing his first-hand perspective is Benoît de Lavignère , one of the program's first successful recruits. The conversation culminates with insightful questions from Richard Ab...

Welcome to Season 2 of the Analyst Insight Podcast! Looking ahead to 2024, the ISF research team sit down to reveal what themes they will be looking into over the next 12 months. Listen as Mark Ward, Richard Absalom, Max Brook, Lee Munson and Paul Watts explain how the topics where chosen, and a few changes to the way ISF research effort is organised. This includes moving towards the production of...

What's on your Christmas reading list? Books that deal with hackers, culture, surveillance capitalism and the first principles of Infosec are debated in this special holiday season episode. Alongside cyber specialist Alice Violet , ISF analysts Mark Chaplin , Paul Watts and Mark Ward talk about their favourite books on cyber security principles, data privacy and cross-cultural management. If you w...

In many industries, the art of story-telling has the power to get across important and difficult messages. In a bid to change security culture at his organisation, Rouzbeh Barzegar explains to Mark Ward and Paul Watts , how he developed an epic tale of King Infosecios and his three daughters Peoplia, Processia and Technia, to illustrate the concept of people, processes, and technology. If you woul...

Experience an exclusive session from the ISF World Congress in Rotterdam where Mark Ward assembled an accomplished panel of experts to dissect the past, present and future role of the CISO. Gain insight from first-hand CISO experiences, learn what is keeping them up at night, and hear debate around what is needed for security leaders to tackle the challenges of a modern enterprise. If you would li...

 Vulnerability management is all about making good choices. A task that is considerably difficult when security teams are faced with tens of thousands of  vulnerability gaps in need of being plugged. Raj Samani , Chief Scientist at Rapid7 joins ISF Analysts Lee Munson and Mark Ward to debate the best way security leaders and their teams can prioritise patching. If you would like to find out more a...