mnemonic security podcast

Your phone is spying on you | Privacy miniseries Do you know what your favourite apps are doing with your data? And who exactly are these entities that are capitalising on selling this kind of information? We’re kicking off our new miniseries about privacy with investigative journalist Martin Gundersen. Martin works at NRK, the Norwegian public broadcaster, where he writes about IT security, priva...

What are you doing to make the internet a safer and more private place? This episode, Robby welcomes John Todd, Executive Director of the non-profit organisation Quad9. Quad9 is a free, recursive DNS solution that partners with threat intelligence providers from all over the world to block websites that try to harm our computers (through things like malware, spyware, botnets, phishing sites, etc.)...

Nuclear cyber security | OT miniseries We’re continuing our Operational Technology (OT) miniseries where we look into the security challenges in the OT space. This time, Robby is joined by Nicholas Burnet and Guido Villacis from EDF Energy, Europe’s largest nuclear provider. EDF owns and operates eight (soon nine) nuclear power stations in the UK, and Nicholas and Guido work at EDF’s unit for New...

We're kicking off 2021 with a timely conversation about software security, this time with two individuals that are more than qualified for the job - Dr. Daniela S. Cruzes and Espen Johansen. Dr. Cruzes  is a Professor at the Norwegian University of Science and Technology (NTNU) and Senior Research Scientist at SINTEF, and has been working with Espen Johansen (Product Security Director at Vism...

Technology isn't the problem | OT miniseries For our last episode in 2020, we’re continuing our Operational Technology (OT) miniseries where we look into the security challenges in the OT space.  This episode, Robby is joined by Mitchell Impey, ICS Security Analyst at the Danish Energy and Telecommunications company Norlys. Mitchell explains how he does threat hunting in their OT environment,...

SIEM is DEAD? Ready to time travel through the last 20 years of security monitoring? To guide us we have Dr. Anton Chuvakin, recognized security expert and the man behind the term EDR! Anton shares from his long experience in the field, among other as VP of Research and Distinguished Analyst at Gartner and working with security solution strategy at Google Cloud. Anton chats with Robby about the ev...

Are we secure enough? Are we exposed? What are our key cyber risks? Our podcast guest this week is a veteran in the IT space in the financial sector, and has extensive experience communicating security posture to stakeholders. Erik Blomberg, CISO in the Swedish Handelsbanken, chats with Robby about what management really is wondering about, and how to communicate the value your security team is de...

Morten and Robby recorded this session as part of their virtual presentation at the CERT-IS conference in Iceland last month. The episode is also available in video: https://youtu.be/Izfb7-wA_0I   For this episode, Robby welcomes Morten Weea from mnemonic’s Threat Intelligence team. Morten is a PhD candidate researching decision-making in incident response and an experienced Incident Handler that...

For this episode, we’re happy to have Sebastian Takle from the DNB Financial Cyber Crime Center (FC3) with us to share how one of the largest banks in the Nordics works with Threat Intelligence. Sebastian is Subject Lead for Threat Intelligence at FC3, and in his conversation with Robby he explains their threat actor centric approach to TI. We also get to hear what threat actors they are observing...

Why is it so difficult for security people to speak to developers? And the other way around… For this episode, Robby has invited a veteran to the software security game, Nick Murison, Security Practice Lead at Miles. Nick started off as a penetration tester, and has been passionate about software security and training developers to think about security upfront for close to two decades. They speak...

Forensic Readiness | OT miniseries We’re continuing our Operational Technology (OT) miniseries where we look into the security challenges in the OT space.  This time around, Robby’s invited a fellow security podcaster and former head of forensics at Volvo, Rikard Bodforss. Rikard has been working with security in the Industrial Control Systems (ICS) and OT space for a long time, both from the priv...

How do we go from data to information, and from information to intelligence in the cyber world? Who better to try to explain this than the former Director of the national communications and security agency in the Netherlands, Job Kuijpers, and his colleague and trusted advisor for Threat Intelligence, Piet Kerkhofs. After more than 15 years in the Dutch government's cyber program the two of t...

This time, Robby has invited his most recent online friendship and the uncrowned king of open source, Simon Simonsen, to the podcast. Simon also happens to have a lot of experience developing and utilising security architecture defense strategies, or as he calls it; utilising your home court advantage. Simon has over a decade of experience in security and is working as a Senior Information Securit...

How can we prove cybersecurity effectiveness? With USD 124 billion being spent worldwide on IT security last year alone, it's no wonder this is a question many would like the answer to. However, finding a quantitative metric to evaluate security investments, outside of positive effects like diminishing risks and reducing the amount of bad things happening, is not straight forward.   To help u...

For this Norwegian episode of the mnemonic security podcast, Robby and co-host for the day Manager of Governance, Risk & Compliance at mnemonic, Gjermund Vidhammer, are joined by two major actors in the Norwegian cyber landscape: Robin Bakke, Specialist Director for Cyber Security at the Ministry of Justice & Public Security, and Bente Hoff, Director National Cyber Security Center (NCSC) a...

How can we best apply data science techniques to gain security visibility?  What data you collect obviously affects your detection capabilities, but as many have painfully experienced; there can be too much of a good thing! In this episode, Robby is joined by Jeff Barto. He is the Chief Security Officer at a large hedge fund in the US, has worked in security for over 20 years and has a lot of expe...

How effective is the use of Key Performance Indicators (KPIs) in security? Are they even relevant, and if so, do KPIs work differently for security teams than others? In this episode, Robby chats with someone that’s had a lot to do with KPIs, both in his position as the former Head of the government CERT in Denmark (GovCERT), as well as a SOC Analyst for more than 10 years. Marc Andersen shares hi...

Who better to continue our Operational Technology (OT) miniseries with than KraftCERT, the Norwegian Energy and Control System CERT! KraftCERT helps industrial control system (ICS) related industries establish incident response teams, build digital security processes, and get a better understanding of the threat landscape. With us for this episode, we've invited someone that has been with Kra...

For this episode, Robby has invited two experts that see privileged access management (PAM) from two different viewpoints. From the customer side he has Thor Milde, SVP and Head of IT Security Services in Norway's largest bank DNB, share his PAM journey - and from the consultant side Michele Paci, IAM Executive Architect in IBM, explains what he's learned after working with identity and...

In this episode, we continue our Operational Technology (OT) miniseries where we look into the security challenges in the OT space.  This time, Robby chats with PhD Andrea Carcano on the importance of visibility in OT environments. Andrea is passionate about the security of industrial control systems (ICS), and the Co-Founder of Nozomi Networks, a US based industrial cyber security company helping...

In this episode, Robby chats with Erlend Gjære, Co-founder and CEO of Secure Practice, on how to turn an organisation’s users into its last line of defense against email threats.  Erlend has spent most of his career studying people and their email habits. At Secure Practice he combines scientific research and employee behavior to find out how to best reach through with security awareness messaging...

The CISO role in Operational Technology (OT) means securing environments where digital and physical worlds meet, and where a service disruption in the digital space can have a direct and immediate impact on our physical world. In this episode, Robby wants to know how a CISO handles the challenge of securing both IT and OT environments. To kick off our miniseries on OT, Robby welcomes Karsten Duus...

In this episode, Robby chats with two experts from mnemonic that are highly passionate about microservices; security researcher Andreas Claesson and Head of Development of our Argus security platform, Joakim von Brandis. Andreas explains how he works with microservices with customers, and what the dark side of microservices are regarding security. Joakim returns to the podcast to show how mnemonic...

How to best avoid being stuck in Groundhog Day? In the second part of our mini series about SOAR, Robby chats with a gentleman that was referred to as The Godfather of SOAR in the first episode of the series. Rob Gresham, SANS Instructor specialising in automation for Security Operation Centers and a Security Solutions Architect at Splunk, takes us through how to be successful with automation, the...

Do it smart, so you won't have to do it again. In this episode, we chat with Tibor Földesi, Security Automation Analyst in Norlys, one of the largest Telco & Energy companies in Denmark. At Norlys, his main motivation is to get more time to enjoy his coffee, which directly correlates with his ability to automate what can be automated. Tibor and Robby discuss what we can and cannot automat...