ISF Podcast

The global supply chain is increasingly complex, diverse and hyper-connected so that gaining assurance of its security, safety and reliability is becoming more myth than reality. The recent rise in data breaches highlights these supply chain vulnerabilities and third parties are being heavily criticised for both inadequate preparation and protection.  In the final episode in this four-part series...

In 2017, Cybercrime was an estimated $600 billion industry affecting approximately 2.8 million victims a day. The rise in ransomware attacks (an estimated 350%) and trend in spearfishing aimed at senior executives, is a further testament to the increasing sophistication, diligence and patience of today’s cybercriminals.  In this first of two episodes, Former US most-wanted cybercriminal Brett John...

Legislation by its nature is government and regulator driven, resulting in a move towards national regulation at a time when cross border collaboration is needed. Organizations will struggle to keep abreast of such developments which may also impact business models which many have taken for granted. This will be a particular challenge to cloud implementations where understanding the location of cl...

As the threat landscape evolves, digitalisation is an ongoing challenge for governments and politicians, making it increasingly difficult to secure networks, personal information and critical infrastructure. Governments must keep abreast of developments in cyber security and ensure that best practices are communicated to businesses, and awareness is raised amongst the public. In the first of two e...

Cybercrime is now a market that is growing and increasing in sophistication, worth $600 billion in 2018 and affecting 2.7 million of us globally on a daily basis. With cybercriminals becoming increasingly strategic and patient in their approach, organisations cannot afford to ignore the increasing threats posed by such operations.  In the first episode of this four-part series which explores the e...

Will 2019 see cyber attacks come in isolation, or in combinations? A question organisations should think about as we see cyber space becoming increasingly connected and technology developments increasing in pace and scale.  In this podcast, Steve Durbin, Managing Director, ISF shares his predictions for the top 4 emerging cyber threats for 2019 – increased sophistication of cybercrime and ransomwa...

Attacks from nation-states, where organisations are at risk are increasingly appearing on the threat horizon. As extortion is predicted to become one of the most common forms of cybercrime, it is imperative for the board to create a solid eco system between executives and individuals to conduct technical operations. Without a clear vision in place, CISOs will lack the transparency needed to overco...

It is an unavoidable fact that businesses and organisations’ sensitive information will be breached at some stage in the future. When a network has been compromised, proper investigation and remediation to the incident is vital, as the impact can be significant in the digital world. There are various steps that need to be taken to respond and recover from a data breach, much like the processes tha...

Virtual reality has a great deal of potential for the betterment of society - but as with all new technologies, we should be aware of ethical concerns that could emerge as social problems further down the line. With this in mind, there is a need for increased legislation and guidelines to ensure both businesses and consumers don’t get caught up in the novelty of virtual reality.  In the second par...

Virtual, augmented and mixed reality has made tremendous progress over the last 4 years. Since then the landscape has dramatically shifted - consumers now experience these new technologies through devices such as smartphones and smart headsets, taking them into a whole new era. Organisations within industries such as film and medical have started implementing virtual reality to transform the way t...

The traditional way of doing business is transforming, with businesses now required to adopt and embed cyber technology into their organisation. The shift in the way we do business isn’t just down to technology, but also cultural change – such cultural shifts include increasing business agility, shared information rather than centralised data, collaboration rather than a traditional triangle type...

Cyber-attacks are steadily increasing year on year. Organisations are constantly under threat with over two-thirds experiencing data breaches in 2017. Consequently, cyber security preparedness and resiliency are becoming increasingly important to the protection of an organisation’s information. One way of improving the ability to handle cyber-attacks is by running cyber security exercises.  In thi...

Social media has transformed the way users behave online and offline. It has prevailed over the last decade and billions of people around the world engage with each other on these platforms on a daily, if not hourly basis. Whilst social media encourages individuality, the sharing of ideas and opinions online has created stereotypes and unrealistic benchmarks that people must attain to be accepted....

‘Artificial Intelligence’ has materialised much faster than leading researchers and security professionals in the field expected and the future of it remains unknown. Thus far, consumers have engaged with virtual assistants, namely Amazon’s ‘Alexa’ or Apple’s ‘Siri’. Additionally, it is proposed that businesses can reap the benefits of increased efficiency through automating the value chain but al...

The ‘Internet of Things’ is a name given to exponential technologies encompassing our physical devices, vehicles, home appliances and increasingly normal everyday objects such as water bottles, that can store and exchange data. For consumers, they are often fearful of these advances and question how secure their personal data is. To overcome this issue, consumers must self-educate about personal s...

Following the introduction of GDPR and new e-privacy laws, sales and marketing teams are under pressure to think of new tactics and methods in which to collect information about existing and potential clients. Marketing relies heavily on digital engagement and therefore necessitates a strong brand image online to convert visitors on a web page to engage with the business.  In this podcast, Steve D...

The probability of a data breach for most organisations is highly likely, with it being a matter of ‘when’ not ‘if’. IT and security leaders are increasingly under pressure to not just protect the company’s reputation, stock and critical assets, but also ensure plans and systems are set up so that an organisation can properly respond to a data breach.  In this podcast, Steve Durbin, Managing Direc...

Today, acquirer companies in M&A’s are intensifying their cyber security due diligence during the negotiation period. Why? Because the cyber-risks to businesses are ever intensifying and any data vulnerabilities exposed can seriously threaten the value of a business and the overall success of the venture.  In this podcast, Steve Durbin, Managing Director at ISF, discusses the importance of the...

In the final part of this 3-part business leaders podcast series, Richard Guida, former CISO at Johnson & Johnson, and Steve Durbin, Managing Director at ISF, discuss what keeps CISO’s awake at night, the challenges integrating security into the product development process, and the importance of security for lay people. https://www.securityforum.org/videos-podcasts/isf-podcast-security-product...

Artificial intelligence and machine learning are redefining cyber security, re-engineering threat detection tools and exposing sophisticated attacks – but there is a dark side. With increased use, we are seeing outcomes that go beyond the capabilities of IT and security professionals, which if not managed correctly could lead to major security issues and widen the already long-term skills gap.  In...

A survey with ISF Members revealed that only 50% of organisations have a sufficient framework in place to manage third parties suppliers, and they don’t regularly review or update it! With third party suppliers playing a critical role in supporting business activities, and often having access to critical business information and customer data, management and engagement with third parties as part o...

In the second part of this 3-part business leaders podcast, Steve Durbin, Managing Director at ISF and Richard Guida, Managing Director at Guida Technologies discuss the negative impact new technology and in particular  connected devices has on data security, and what this means for both businesses and consumers in the future.  https://www.securityforum.org/videos-podcasts/isf-podcast-data-securit...

In the first of this 3 part Business Leaders podcast, Steve Durbin, Managing Director at the ISF talks with Richard Guida, Managing Director at Guida Technology Associates about his experience as a former CISO implementing data security within a large organisation, the role technology plays and the implications this has on security and the people who work within it. https://www.securityforum.org/v...

Increasingly organisations are incorporating mobile apps into their customer service offerings, however struggle to overcome the challenge of adequately securing apps, while ensuring ease of access is not compromised. With the added consideration of data privacy, businesses need to start focusing on security rather than just performance, but whose responsibility is it? In this podcast Steve Durbin...

In this podcast, Steve Durbin, Managing Director at the Information Security Forum, shares the 5 key actions organisations can take today to demonstrate compliance, and how they can continue to build compliance into the organisations DNA beyond the deadline date. Steve also discusses the key issue of third party suppliers and their access to personal information, sharing an approach to help ration...