ISF Podcast

Recognising the need to build a sustainable security workforce is of real concern to organisations across all sectors, as any shortfalls in skills and capabilities could leave an organisation vulnerable to an attack on its most critical assets, impacting an organisations performance and brand reputation. But as demand outstrips supply, a sustainable security workforce is becoming more and more dif...

When your most critical information assets represent 80% of your organisations total value, it’s important to know exactly what they are, where they are, and how to protect them? Until regulations such as GDPR came into focus, most organisations, while familiar with the term had no real understanding of how to define their ‘critical information assets’ and why they should be protecting them. Organ...

Insider threats account for 54% off all breaches, and are found at all levels of an organisation, from top to bottom. Numerous factors are increasing organisations’ exposure to the threats posed by insiders, and technical controls are limited. To combat these threats, organisations must invest in a deeper understanding of trust, and work to improve the trustworthiness of all insiders.  The insider...

The frequency of ransomware attacks on businesses has significantly grown over the past two years, with the number of detections increasing by nearly 2000%. As the space becomes more attractive and lucrative to cyber criminals, the threat of ransomware is only set to rise in 2018 as attackers get more creative, sophisticated and persistent, and attacks from named ransomware such as WannaCry and Ba...

The role of a CISO has evolved over the years’ and now requires someone who combines InfoSec capabilities with business requirements. They must be able to align cyber to business strategy, speaking both languages while developing reporting metrics that satisfies the board and promotes good cyber resilience across the business. All these attributes support the belief that the CISO of the future doe...

With the main industries in India comprising IT Services providers, banks and conglomerates such as Tata Group, Birla Group, Mahindra, and Reliance who all manage EU personal data – Indian organisations are determining how they can comply with the EU GDPR by May 2018. India aims to achieve 25 billion digital transactions in 2017 to 2018, so complying with the GDPR is going to have to be top of the...

When we talk about the board and cyber security, we have moved away from the board doesn’t get it, to the board gets it, to the board doesn’t feel they are sufficiently briefed when a breach takes place. But is all of this evasive talk to avoid responsibility, or is there still a lack of communication between cybersecurity professionals and the board?  In this podcast, Steve Durbin, Managing Direc...

The smartphone has become an extension of our work and our personal life – everyone expects to be able to access something with a click of the button. But what are some of the serious consequences that a culture of convenience has given rise to? With 21 billion connected devices estimated to be around the world by 2020 this is surely a question all technology users should be asking.  In this podca...

As organisations of all sizes try to be more agile in responding to emerging threats, finding people with the right skill set is something of a challenge. With cyber now integrated into the DNA of business, the big question remains: how do we attract, train and retain the cyber specialists of the future?  In this podcast, Steve Durbin, Managing Director ISF, offers insights into how educational bo...

As organisations become increasingly dependent on data, unscrupulous competitors and cyber criminals are using falsified information as a form of attack. Falsification has been used to inflict both product and brand damage on organisations that have been too slow to protect their information. So, what steps can organisations take to protect the integrity of their data and minimise the impact upon...

Many organisations with a footprint in Europe are still unclear if the GDPR applies to them, or if they have the right team and resources to address it. The GDPR will require a collaborative effort between businesses and third parties to ensure that all areas of the information life cycle are protected – a daunting project for security teams. In this podcast, Steve Durbin, Managing Director ISF, o...

Artificial Intelligence is a growing trend across industry sectors from medical and legal to automotive and manufacturing. However, the new capabilities of AI technologies, can lead to unexpected outcomes and new risks on the threat horizon, such as: AI machines misunderstanding information, new means for criminals to extract an organisation’s mission critical information and AI technologies learn...

Increasingly, organisations are waking up to the negative business impact of poor cybersecurity programmes and are taking cyber incidents more seriously in their mergers and acquisitions deals (e.g YAHOO! and Verizon). However, trying to get a grasp of the cyber profile of an organisation is extremely difficult – as integrity of information is often difficult to monitor. For companies to grow and...

In a digital age, the internet is viewed by businesses and individuals alike as a basic utility. Businesses are dependent upon it and this, in itself, is a threat that cyber criminals can take advantage of. We saw earlier in May 2017 how the NHS attack on its critical infrastructure led to a shutdown of the NHS Windows systems, causing medical professionals to have to resort to pens and paper when...

In March 2017, the New York Department for Financial Services (DFS) implemented a Cyber Security regulation, requiring financial institutions to establish a cyber security programme to protect consumer data. But how will this affect New York businesses and what measures should they put in place to meet these requirements?  In this podcast, Steve Durbin, Managing Director of the ISF, addresses thes...

People remain a ‘wild card’ to the cyber security of an organisation. Many businesses recognise people as their biggest asset, yet still fail to recognise the need to secure ‘the human element’ of information security. Steve Durbin, Managing Director at the ISF, tackles the question: how can organisations make people their strongest line of defence against cyber-attack? https://www.securityforum.o...

The GDPR will require extreme preparation in order for organisations to meet new compliance rules. Businesses cannot rely on the government and regulatory bodies to do the work for them. In this podcast, Steve Durbin, Managing Director at the ISF, talks through the checklist of regulations, financial and operational challenges and data management that organisations must take responsibility for and...

Cyber-crime syndicates have rapidly matured and have now become businesses. With rogue states taking advantage of these services, the resulting cyber incidents this year will be more damaging than ever before. Steve Durbin, Managing Director at the ISF, offers insights into how organisations can stay one step ahead of the increasing sophistication of cyber-criminal organisations. https://www.secur...

It is expected that 28.4 billion devices will be connected in 2017. IoT devices offer a way in for cyber-attacks. So what are the risks and how will this impact privacy? In this podcast, Steve Durbin, Managing Director at the ISF, addresses how the healthcare, financial and many other industries can manage the threat of the IoT. https://www.securityforum.org/videos-podcasts/the-internet-of-unmanag...

Organisations that suffer an incident face challenging and damaging circumstances:  • data stolen  • financial penalties  • legislative and regulatory scrutiny  • reputation damage Steve Durbin, Managing Director at the ISF, offers guidance and practical steps, to manage through a breach in a confident and intelligent manner and plan for the day you hope never arrives. https://www.securityforum.or...

ISF research shows that some of the largest organisations have misaligned cyber security practices. This podcast, in conversation with Steve Durbin, Managing Director at the ISF, addresses why it is so important for businesses to align cyber security across their enterprise and what steps they can take to make this happen. https://www.securityforum.org/videos-podcasts/isf-podcast-aligith-steve-dur...

It is not a matter of if – but when you will experience a cyber-attack. Steve Durbin, Managing Director at the ISF, offers insights into how ISF Members have used the ISF cyber resilience framework to prepare for inevitable cyber-attack. https://www.securityforum.org/videos-podcasts/2-cyber-resilienreat-environment/

With CISO’s busy preparing for an inevitable cyber-attack, triggers of engagement to communicate with the board have never been more important. In this podcast Steve Durbin, Managing Director at the ISF, confronts the challenges between the CISO and the board and explains how CISO’s can exhibit C-suite leadership and engage with the board and stakeholders effectively. Search for more guidance on e...