Dear Infosec

​​​​​​Scenarios are an essential component needed to explore the many plausible futures - everything from cyber risks to long-running regional conflicts. Dr. Matt Finch , from Oxford's Said School joins Max Brook and Mark Ward to explain the power scenarios have in helping security practitioners  see beyond present problems and plot a path to a future that benefits everyone in the organisation.​​​...

Age is not the only divider of generations, social networks contribute to the generational gap in their own right. Instagram, SnapChat and TikTok for the younger populace, Facebook for the older cohort.  ISF researchers and analysts Arunoshi Singh , Scott Binning and Ayesha Sayyad educate Mark Ward on living with social media. Detailing the digital detox and the connections they maintain via those...

AI causes issues for organisations, but what about artists and creators? Musician, performer and broadcaster LJ Rich explores the promise and peril of these tech tools with ISF analysts Paul Watts and Mark Ward . If you would like to find out more about the topics covered in this episode, get in touch with Mark Ward , Senior Research Analyst at the ISF. Subscribe to the ISF Analyst Podcast whereve...

Climate change, AI, politics – all pressing topics that have continued to garner attention both within and beyond the cybersecurity industry. Key topics that could feature in the next edition of Threat Horizon. Listen as ISF Analysts Max Brook , Richard Absalom and Mark Ward debate how the uncertainties and changes born from these trends will shape the near future.  If you would like to find out m...

Infosec practitioners and business folks often seem like a community divided by a common language. In this week’s episode, former historian Jemina Lakka-Kolari together with ISF analysts Paul Watts and Mark Ward , explores the importance of understanding what words mean to different groups, and how to use those meanings to make lessons about security stick. If you would like to find out more about...

 Penetration and security testers - what do they do all day? Listen as experienced security tester Glenn Wilkinson and relative newcomers Alex Miller and Barney Muller talk about what the job entails at beginner, intermediate and expert levels. ISF Principal Bharat Thakrar and Analyst Mark Ward put the questions to the trio in this second of a series exploring infosec careers. If you would like to...

How will information security be changed by AI-driven tools such as ChatGPT? Listen as cloud security engineer Patricia Rodrigues talk about how she uses it and debate what its ultimate impact will be with ISF analysts Paul Watts and Mark Ward. If you would like to find out more about the topics covered in this episode, get in touch with Mark Ward , Senior Research Analyst at the ISF. Subscribe to...

There's only so much that a CISO can get from books, some of it has to be learned on the job. Hear experienced CISO Ralph Benton from Nordic media group -Schibsted, talk to ISF analysts Paul Watts and Mark Ward about the expectations and evolution of the role, including lessons he's learned and how he applies them. If you would like to find out more about the topics covered in this episode, get in...

The global cyber security profession is facing a universal challenge in attracting talented individuals. Lisa Hartmann-Jensen from the City of Copenhagen's administrative office explores how leveraging local colleges is winning over those interested in InfoSec. Lisa goes into detail on her passion for cyber security, how her work ensures the Danish city operates smoothly and securely, and how thei...

ISF Principals Bharat Thakrar and Mark Chaplin join Mark Ward to begin a series dedicated to shedding light on a career in information security. The conversation covers their personal paths into the profession, how they have seen the trade evolve, the emerging skill-set demanded by the threat landscape, and the opportunity facing current and aspiring security professionals to make a difference in...

ISF analysts Benoit Heynderickx and Paul Watts are joined by Ross Johnston from Bupa to provide an ISF Member perspective on cloud services: how they are used and the risks they pose. The panel focus largely on how the mapping of the SOGP against the CSA's Cloud Controls Matrix helps organisations to manage their cloud deployments more effectively. If you would like to find out more about the topi...

AI technologies are full of promise – but will that potential be used for good or ill? Listen as threat hunting expert Rob MacGregor from PwC debates with ISF analysts Lee Munson , Richard Absalom and Mark Ward about how these systems could be used to harm or hinder organisations. If you would like to find out more about the topics covered in this episode, get in touch with Mark Ward , Senior Rese...

With AI systems such as ChatGPT dominating technology headlines every day, many are left wondering what it takes to keep pace and truly harness this potent technology. Listen as ISF analysts Max Brook and Mark Ward are joined by AI expert David Sully from Advai to explore the present and possible future potential of the space. If you would like to find out more about the topics covered in this epi...

Patric Versteeg , CISO at ISF Member organisation Viterra, and Paul Watts, former CISO now ISF Distinguished Analyst, share insights into the softer skills that have become imperative to the role of the security lead. Patric debates methods to avoid burnout, and explains how a more inclusive way of working has made his working and personal life more productive and happier. If you would like to fin...

Director of Cyber Security Governance at Danone, Lies Alderlieste , joins ISF Analysts Mark Ward and Paul Watts to offer advice to security leaders embarking on a governance journey. Lies and Paul draw from their experience as security leaders to hone in on what it takes for governance to be a guiding hand, emphasising the importance of aligning security strategy with the overarching strategy of t...

Iwona Muchin from ISF Member Ageas joins the analysts behind the recent ISF Measuring Security and Nuturing Security Governance reports, to provide her unique perspective into what it takes to make governance effective. The conversation highlights the work, data and metrics needed to ensure governance serves an organisation as well as it can, emphasising the real-world application of ISF Research....

When the world is unpredictable and chaotic, old approaches won’t help organisations prepare and react.  Threat Horizon is changing to help organisations cope with the future – no matter what form it takes. Listen as ISF Analysts expand upon what has changed and how organisations can make the most out of the report to prosper in such uncertain times. Subscribe to the ISF Analyst Podcast wherever y...

 In 2023, the ISF research team will focus on: exploring the future via scenarios, leadership, securing industrial control systems, and building a tool to help Members measure key information security indicators. Listen as the team explain why these topics were selected and outline how the rhythm of research releases is changing this year. Subscribe to the ISF Analyst Podcast wherever you listen t...

ISF Analysts Paul Watts, Max Brook, Lee Munson and Mark Ward further expand upon the latest ISF Threat Intelligence: React and prepare report to talk everything 'threats'. The panel break down how to recognise them, where your intelligence should be coming from, and what criminal and state-sponsored hackers might be tormenting us with next.  Subscribe to the ISF Analyst Podcast wherever you listen...

Paul Holland , Principal Research Analyst at the ISF, joins Lou Senko , Chief Availability Officer at ISF Member organisation Q2, to discuss Q2's unique approach to securing their data.  Exploring the limitations of adopting zero trust security strategies, Lou highlights how converging zero trust and blockchain has created an almost impenetrable defence.  Subscribe to the ISF Analyst Podcast where...

Rocio de la Cruz from BPE Solicitors provides a legal perspective on cybercrime and policy as ISF Analysts explore the ISF's involvement in CC-Driver .  The panel delve into the European Commission project, and expand upon the new methods detailed in the report aimed at preventing, investigating and mitigating cybercrime in Europe. Subscribe to the ISF Analyst Podcast wherever you listen to podcas...

Expanding upon many of the themes addressed in his book ‘Rethinking InfoSec’, Greg van der Gaast, CISO at Scoutbee , joins ISF Senior Research Analyst, Mark Ward, for another instalment of the ISF Analyst Insight Podcast. They exchange thoughts on what the future may hold for CISOs, solving problems with unconventional approaches, and critique established ways of filling a senior role. Subscribe t...

In this ISF Analyst Insight podcast, Paul Holland , ISF Principal Research Analyst and author of the ongoing ICS Insights series, is joined by Thomas Wegner , ICS Cyber Security Lead at Yara. Thomas and Paul hone in on the pertinent questions surrounding the ongoing protection of industrial control systems, and go into detail on dimensions such as the role of trust in IT/OT convergence. Subscribe...

ISF Analysts Paul Watts and Mark Ward expand upon the fallout of the pandemic on cyber with Monica Verma, CISO at the Norwegian Directorate of Health . Monica and the panel explore how accelerated digital transformation is likely to impact organisations in years to come, and delve in to how her role has had to adapt along with the widening threat landscape. Subscribe to the ISF Analyst Podcast whe...

This Analyst Insight Podcast sees ISF analysts sit down with Espen Johansen and Arbnora Tahiri from ISF Member organisation, Visma. They use the session to explore how to handle governance across hundreds of companies, and how regularly acquiring businesses requires ongoing adaptation of their information security strategy. Subscribe to the ISF Analyst Podcast wherever you listen to podcasts Conne...