mnemonic security podcast

Control Validation & Cyber Insurance How can private-sector cyber insurers accurately understand and price risk? To discuss this and the critical role insurance can play in risk mitigation strategy, we’re joined by Levi Gundert, Senior Vice President of Global Intelligence at the cybersecurity company Recorded Future. Levi shares from his vast experience from the industry, from previous roles...

For this episode, we’re welcoming Frank Fransen, Senior Scientist - Cyber Security, and Reinder Wolthuis, Senior Consultant and Program Manager - Cyber Security, from the Dutch not for profit research and consultancy organisation, TNO.  They joined Robby to talk about the SOCCRATES research project, where TNO, mnemonic and seven other European organisations are combining efforts to build a platfor...

What caused a nation like Norway to become amongst the first pioneers of satellite-based communications? To explore this, Robby is joined by Ronny Klavenes, CISO at Space Norway, a company building and investing in space related infrastructure, especially focusing on critical infrastructure. Space Norway was established on an initiative from The Norwegian Space Agency, a government agency promotin...

Deception technology Deception as an attack tactic has been used in many forms, for many years. Both on the battleground in the physical world, and in the digital sphere. For this episode on deception technology, Robby is joined by Ofer Israeli, Founder & CEO of Illusive, a cybersecurity company aiming to remove the vulnerable connections that enable attackers to move undetected, and replace t...

How does one of the world’s largest cybersecurity companies collect and share their Threat Intelligence?  For this episode, Ryan Olson, Vice President of Threat Intelligence (Unit 42) at Palo Alto Networks, joins Robby for a chat about Palo Alto Networks’ telemetry pool and how Threat Intelligence has evolved over the last decade. His team, Unit 42, are responsible for collecting, analysing and pr...

Insider threats | In Norwegian only Where should organisations start to protect themselves from insider threats? For this episode on insider risks, Robby is joined by Frode Skaarnes, COO at Lørn, a startup creating digital learning programs, with long experience from The Norwegian National Security Authority (NSM), as well as Kristian Haga from mnemonic’s Governance Risk and Compliance department....

Does your managed SOC suck? Are you fighting today’s war with yesterday’s weaponry? Morten Munck, Engagement Manager at the cybersecurity advisory company Improsec, joins Robby to discuss his much-shared article “Does your managed SOC suck?” with the top ten red flags suggesting that your managed SOC provider should step up their game. Morten has a background from finance and telecommunication and...

Project 2030: Future trends in security To share the findings from his new report and webseries called Project 2030, Rik Ferguson, the Vice President of Security Research at Trend Micro, chats with Robby about what role cybersecurity will play in year 2030. Rik has used his over twenty-five years of experience in information security looking forward, sharing what he’s found when trying to anticipa...

CMMC: Cybersecurity Maturity Model Certification Your security reflects your maturity. For this episode, Robby is joined by two of mnemonic’s security experts from our Governance, Risk and Compliance department to talk about CMMC and the alphabet soup that comes with it. Both of them have experience preparing organisations for what CMMC actually means for them. Anders Hval Olsen as an Information...

The business of cyber security: Mergers & Acquisitions What separates the acquisitions that go well from those that don’t? To discuss the business side of security, Robby is joined by Brian Contos; returning guest, fellow podcast host, serial security entrepreneur and CISO & Vice President of Mandiant Security Validation.  Mandiant Security Validation, previously known as Verodin, was acqu...

Initial Access Brokers (IABs) The growth and professionalisation of the Initial Access Market has fascinated many in recent years. Few know as much about who the threat actors operating in these markets are, and how the market of providing others with remote access to corporate networks work as   Dmitry Shestakov, Head of Cybercrime Research at the cyber intelligence company Group-IB.  In his conv...

Communicating threat intelligence to management For this episode, Robby has invited someone with a unique expertise of the threat landscape in the finance industry. Freddy works as a Senior Threat Intelligence Analyst at the Nordic Financial CERT, a nonprofit organisation owned by the financial institutions in Norway, Sweden, Demark, Finland and Iceland. By receiving data from and supporting their...

Buying security products Purchasing cybersecurity solutions and services can be challenging. Not only is the industry rapidly evolving, but there is rarely a case where solutions can be compared "apples to apples."   In this episode, we explore the procurement of cybersecurity solutions. Robby is joined by Thor Milde, SVP - Head of IT Access Management at DNB, sharing his experiences fro...

How is it possible for the insurance industry to adapt to a cyber threat landscape that is continuously changing? To try to answer that, and explain the evolution the cyber insurance field has gone through the last few years, Robby is joined by Jens Zakarias and Paul Jæger from Riskpoint, a global insurance underwriter agency. They dive into how cyber insurance differs from more traditional insura...

Can threat intelligence be automated? If so, what can be automated, and what should still be left in the hands of human analysts? With us today, we have PhD. Martin Eian, Head of R&D in mnemonic. He sits down with Robby to speak about his team’s part in building a security platform to prevent cyber-threats together with nine other European organisations. The research project bringing these org...

Luck favours the prepared. For this non-technical episode, Robby welcomes someone with a lot of experience working with a particular consequence of security incidents: crisis communication expert Lasse Sandaker-Nielsen. Lasse is a Senior Advisor at First House, one of Norway's largest communications and public affairs agencies, and joins Robby for a discussion on crisis communication best pra...

Try to prevent what you can, detect what you can’t prevent and hunt for what you can’t detect. For this episode about threat hunting, Robby is joined by Andreas Bråthen, Team Lead for threat hunting at mnemonic. Andreas has worked on mnemonic’s threat hunting program for the past three years and shares some of his insights into why the threat hunting domain is so difficult to navigate, and how he...

Why should a CFO care about security? Is the Chief Financial Officer (CFO) role inherently occupied with saving money, or is it clear for someone in that role that there’s value in spending the extra dime on something like security? Or is the answer somewhere in between? To help him find the answer to this, Robby welcomes Øyvind Sten Bjerkseth, the new CFO at mnemonic, both to the company and the...

Stress and security How do you manage your stress level when the very nature of your work is to be on high alert? In this episode we step away from the technology to focus on the stress of working in security, how it impacts our health and personal lives, and methods for keeping stress in check. Stress is something we’re all familiar with, especially in our field of work. Diving into this topic, R...

Internet of Things | Privacy miniseries Previously in this miniseries, we’ve discussed the challenges of online privacy with experts in that field. In many ways, what can be known about us through our online behaviour pales in comparison to what someone can find out about us by monitoring measurements of the real world, through ours and others’ Internet of Things (IoT) devices.  This is what we’ll...

In this episode, you’ll learn about the digital canaries; honeypots. Honeypots are passive monitoring systems that appear to be legitimate parts of an organisation’s core infrastructure, designed to alert you about someone trying to illegitimately enter your infrastructure, and help you get insight on the attacker’s tactics, techniques, and procedures.  Someone with a lot of experience using honey...

The World of Open Source How do you know that the open source you are using is secure? This episode, Robby is joined by Daniel Wisenhoff to talk about open source management. Daniel is the CEO & Co-Founder of Debricked, a Swedish company aiming to help organisations use open source securely in their own software development. During their conversation, they discuss how most organisations work w...

The future of privacy | Privacy miniseries Is privacy a myth for anyone with a smart phone? Can we actually control what our devices are sharing about us? We’re continuing our miniseries about privacy with Edwin Doyle, Delegate & Constituent for the World Economic Forum Taskforce on Data Intermediaries, and Global Security Strategist at Check Point. Eddie chats with Robby about what the Taskfo...

What's the worst that can happen with your email? For this episode, Robby has invited Korstiaan Stam, Digital Forensics & Incident Response Manager in PwC Netherlands, to pick his brain about Business Email Compromise (BEC). Korstiaan has a lot of experience working with email fraud, and throughout their conversation he shares many of his war stories. He explains the many different ways a...

We’re continuing our new miniseries about privacy with cyber security researcher Hanna Linderstål.  Hanna is the Founder and CEO of Earhart Business Protection Agency, a company providing research for governments and organisations on disinformation and online threats. Robby has invited Hanna to discuss modern cyber espionage and lawful intercept; the practice of enabling agencies with legal author...