In a digital age, the internet is viewed by businesses and individuals alike as a basic utility. Businesses are dependent upon it and this, in itself, is a threat that cyber criminals can take advantage of. We saw earlier in May 2017 how the NHS attack on its critical infrastructure led to a shutdown of the NHS Windows systems, causing medical professionals to have to resort to pens and paper when noting patient data. Moreover, a few years ago Russian hackers cut the internet off in Estonia in a national attack on their critical infrastructure, resulting in business grinding to a halt. The internet is a part of every businesses infrastructure, so what is the impact if this is compromised and what should a business response plan look like?

Steve Durbin, Managing Director ISF, offers solutions for C-suite leaders, should their critical infrastructure come under attack and advises how a reliance on older technology can assist an organisation through an internet attack. Fundamentally, whilst the future is becoming more and more digitised, organisations need to be planning for the day when their technology is not working.

For more information visit www.securityforum.org

Threats to Critical Infrastructure: Internet as a utility

Increasingly, organisations are waking up to the negative business impact of poor cybersecurity programmes and are taking cyber incidents more seriously in their mergers and acquisitions deals (e.g YAHOO! and Verizon). However, trying to get a grasp of the cyber profile of an organisation is extremely difficult – as integrity of information is often difficult to monitor. For companies to grow and become desirable for acquisition deals, they need to be able to demonstrate their cyber resilience strategies. Businesses must be able to prove to their stakeholders, clients, potential buyers and shareholders that they have taken every reasonable step to ensure that their mission critical information is protected.

Steve Durbin, Managing Director ISF, discusses the nature of the mergers and acquisitions process in a digital age and offers insights into how organisations can build a strong cyber resilience programme to move with confidence as they pursue new acquisitions.

Find out more at www.securityforum.org

Building Cybersecurity into the mergers and acquisitions process

The smartphone has become an extension of our work and our personal life – everyone expects to be able to access something with a click of the button. But what are some of the serious consequences that a culture of convenience has given rise to? With 21 billion connected devices estimated to be around the world by 2020 this is surely a question all technology users should be asking.

In this podcast, Steve Durbin, Managing Director, ISF, discusses the business and personal security consequences of IoT and how technology providers need to ensure security is built in rather than tapped on to IoT devices.

For more information visit www.securityforum.org

IoT: All I did was press the button on my smartphone

When we talk about the board and cyber security, we have moved away from the board doesn’t get it, to the board gets it, to the board doesn’t feel they are sufficiently briefed when a breach takes place. But is all of this evasive talk to avoid responsibility, or is there still a lack of communication between cybersecurity professionals and the board? 

In this podcast, Steve Durbin, Managing Director ISF, offers insights into the specific actions the board needs to take to embed cybersecurity into business strategy. With the May 2018 deadline for the EU GDPR fast approaching, the board should be viewing upcoming legislation as an opportunity for cultural change, rather than a compliance burden. 

Find out more at www.securityforum.org

Cyber and the Board

Cyber and the Board: Stop making excuses and start making the decisions that matter

With the main industries in India comprising IT Services providers, banks and conglomerates such as Tata Group, Birla Group, Mahindra, and Reliance who all manage EU personal data – Indian organisations are determining how they can comply with the EU GDPR by May 2018. India aims to achieve 25 billion digital transactions in 2017 to 2018, so complying with the GDPR is going to have to be top of the business agenda. 

In this podcast, Steve Durbin addresses some of the challenges that India will face and offers insights into best practice solutions to address the requirements of the EU GDPR. Steve also discusses how Indian organisations should not view the EU GDPR as a compliance burden, but as an opportunity for culture change across the business that will lead to tangible business benefits.

Find out more at www.securityforum.org

EU GDPR for India: Are you ready to protect your European customers' data?

The role of a CISO has evolved over the years’ and now requires someone who combines InfoSec capabilities with business requirements. They must be able to align cyber to business strategy, speaking both languages while developing reporting metrics that satisfies the board and promotes good cyber resilience across the business. All these attributes support the belief that the CISO of the future doesn’t have to come from an IT background.
In this podcast, Steve Durbin, Managing Director ISF, addresses the objectives a CISO should aim to achieve in the first 100 days in the role, and offers insights into how a CISO should work with the board and security teams to achieve these.

The CISO Reset: Redefining your value to the business

Insider threats account for 54% off all breaches, and are found at all levels of an organisation, from top to bottom. Numerous factors are increasing organisations’ exposure to the threats posed by insiders, and technical controls are limited. To combat these threats, organisations must invest in a deeper understanding of trust, and work to improve the trustworthiness of all insiders.

The insider threat has only intensified as people have become increasingly mobile and hyper-connected, and with technology continuously advancing, the risks posed by insiders are only set to increase.

In this podcast, Steve Durbin, Managing Director, ISF discusses the most common types of insider threats, as well as how organisations need to take a holistic approach to tackle insider threats that include both technology and people when embedding security into their organisation’s DNA.

ISF Podcast: Who is the real insider threat to you business?

Artificial intelligence and machine learning are redefining cyber security, re-engineering threat detection tools and exposing sophisticated attacks – but there is a dark side. With increased use, we are seeing outcomes that go beyond the capabilities of IT and security professionals, which if not managed correctly could lead to major security issues and widen the already long-term skills gap.

In this podcast, Steve Durbin, Managing Director at ISF distinguishes the difference between machine learning and AI and discusses the pros and cons of the advancing technologies on cyber security, and particularly on the cyber workforce.

ISF Podcast: Is AI & Machine Learning Contributing to the Skills Shortage?

Nation-state cyber-attacks have increasingly occupied news headlines in the past few years from alleged Russian electoral interference to accusations of Iranian backed cyber-terrorist groups and Chinese theft of high-value intellectual property.

In the final episode of this two-part series, Steve Durbin, Managing Director, ISF, speaks with journalist Mike Eckel about the threats posed by nation-state-led cybercrime. Is it the government’s responsibility to protect you? Is your organisation a target? How do security teams convey the appropriate level of risk to their board? Should companies be allowed to hack back? In this podcast we delve into both preparation and measures business leaders can implement to defend against nation-state cyber-attacks.

ISF Podcast: The Enemy is the State: Cybersecurity and Nation-State Attacks

Today, digital connectivity is essential in everyday life, and this is only set to increase over the next two years as we see technology such as the Internet of things (IoT) playing a vital role in business success. By 2021, vast webs of intelligent devices, combined with increased speeds, automation and digitisation will bring new possibilities within reach of businesses and consumers. However, increasingly complex digital connectivity will increase the number of attack surfaces, amplifying existing dangers and creating new ones.

In the second episode of our Threat Horizon podcast series, Steve Durbin, Managing Director, ISF will discuss digital connectivity and the potential vulnerabilities that this will expose.

ISF Podcast: Threat Horizon 2021: Digital Connectivity exposes hidden dangers

In today's podcast, Steve Durbin, MD, ISF talks with Dr. Ann Cavoukian, the Distinguished Expert-in-Residence of Ryerson University's Privacy by Design Centre of Excellence.

Ann Cavoukian is recognised as one of the world's leading privacy experts. Since 2017, Cavoukian has been the distinguished expert in residence of Ryerson University's Privacy by Design Centre of Excellence. In fact, Ann developed the concept of Privacy by Design and its later evolution, Security by Design. 

In today's conversation, Dr. Cavoukian will discuss the necessity that businesses "bake in" security and privacy into their business plan.

Dr Ann Cavoukian

Die Umsetzung der Allgemeinen Datenschutzverordnung in Deutschland stieß auf große Kritik. Gibt es zu viel Verwirrung um unterschiedliche Rechtsvorschriften und wie effizient ist die DSGVO in Europa heute? In der letzten Folge dieser dreiteiligen Reihe gibt Axel Voss, Vertreter der deutschen CDU im Europäischen Parlament, Einblicke in die Datenschutzlandschaft und was sich Unternehmen in den nächsten Jahren vorbereiten sollten.

Axel Voss - Mit Veränderungen der Datenschutzlandschaft Schritt halten

Breaches have become the third certainty in life and cyberwar has replaced the cold war. The truth is we are under attack every minute of every day. So how can we defend against everyday cyber threats?

In the first episode of this three-part series, Adam Levin, chairman and founder of CyberScout, co-founder of Credit.com, and author of Swiped: How to Protect Yourself in a World Full of Scammers, Phishers, and Identity Thieves will be speaking to Steve Durbin, Managing Director, ISF on the hard truth about the insecurity of the modern technology era. Adam and Steve discuss how consumers can better protect their information, the three Ms (minimising risk exposure, monitoring systems and managing damage) and the risks that social media poses.

Adam Levin: Consumers - Protecting yourself against everyday scams

In the second episode of this three-part series, Adam Levin, author of Swiped: How to Protect Yourself in a World Full of Scammers, Phishers, and Identity Thieves, goes into detail about the importance of creating a thorough, integrated, cyber-resilient corporate culture.

Adam Levin: Integrating Cyber Into The DNA Of Your Business

In the final episode of this three-part series, Adam Levin, CEO and founder of Cyber Scout and author of Swiped: How to Protect yourself in a World Full of Scammers, Phishers and Identity Thieves, offers insights into the maturity, collaborative culture, preparation, and responsiveness required for true cyber-resilience.

Adam Levin: Is Scaring Caring When It Comes To Cyber Security?

"I think we've really seen the concept of a SOC grow and evolve over the past 10 years or so," says Emma Bickerstaffe, Senior Research Analyst at the Information Security Forum. As your business and the threat landscape change, how do you keep pace with your security operations centre (SOC)? 
 
Emma Bickerstaffe, Senior Research Analyst, ISF and Jamie Cowper, Product Marketing Manager at IBM Security, join the podcast for a discussion about building and enhancing a SOC, or "the eyes and ears of an organisation." They cover business drivers for improving a SOC; perspectives on internal, external, and hybrid models; and the five core capabilities of a SOC.

Security Intelligence Podcast

The Evolving Security Operations Centre

“Depending on your industry, you may be targeted by a different set of actors with different tactics, and I think as the CISO or as a security practitioner, you need to know what is targeting you and you need to stay apprised of the threats that are out there and how you can help defend against them.”

In the first of this two-part series, Jon Fisher, Managing Director at Life Ars and a former FBI agent discusses current and future cyber threats and cooperating with law enforcement with Steve Durbin, Managing Director, ISF.

Jon Fisher - Law Enforcement And Business Collaboration

“You can have the best security implementations in the world, but if your users are not trained, and they click on the link, you're going to be in trouble”

In this episode of the ISF Podcast with Jon Fisher, former FBI agent and current Managing Director for Lifars, and ISF MD Steve Durbin, we will be discussing how to improve employee education in cybersecurity awareness and the best way to run a tabletop exercise.

Jon Fisher - Think Before You Click

“But over the last, I would say 15 years, what's become increasingly clear is that AI, artificial intelligence, is going to play a huge role both on the defensive side and on the offensive side. So, over the next few years, we're going to see people increasingly use AI to attack systems”
In the first of this two-part series, VS Subrahmanian, Professor of Computer Science at Dartmouth College, discusses both the threats and benefits of AI on cybersecurity with Steve Durbin, Managing Director, ISF.

VS Subrahmanian - AI: Security Benefit or Threat?

“Nobody is immune from attack, especially as these attacks are getting increasingly sophisticated. You have the spearphishing attacks, which are very, very highly targeted at very specific individuals. Those emails look like they're coming from friends, from professional colleagues, and emails are not the only vector. So the attacker can throw things at us from many different directions. And we've got to be cognizant of all of those.”

In the second Podcast of this two-part series, VS Subrahmanian, Professor of Computer Science at Dartmouth College, discusses the risks posed by the Internet of Things, cybersecurity awareness for the general public, and more.

VS Subrahmanian: Cyber Security and the Individual

"Why is it not enough for an organization to hire a CISO and have that person report to the board periodically? Why is that not enough due diligence?"

In the latest ISF Podcast, we present the first of two episodes focusing on the role of the Board in cybersecurity. ISF Managing Director Steve Durbin will be discussing how often CISOs should be meeting with the Board and how CISOs can be more effective in communicating and in meeting the security needs of the business

ISF Podcast: Bridging the gap Between the CISO and the Board

"It isn't just about technology. The human piece has a key role to play in securing our environment, and so yes, for me, the Board has to be setting an example, has to be really at the top of it's game in demonstrating leadership."

In the latest ISF Podcast, we present the second of two episodes focusing on the role of the Board in cybersecurity. ISF Managing Director Steve Durbin will be discussing how the Board can address the skills shortage, as well as the evolution of the Board's role as cybersecurity further integrates into all levels of the business.

ISF Podcast: Embedding Cyber Hygiene into the Board

"I think that when we look at cybersecurity today, it isn't just a technology issue. It is much bigger than that. Cyber is pretty much integrated across all of an enterprise. There isn't anything that most departments in a business won't get up to that doesn't touch cyber in some way. 

In this week's ISF Podcast, Steve Durbin, Managaing Director, ISF, discusses not only the risks involved of leaving cybersecurity squarely on the shoulders of the CIO, but also how cybersecurity can enable growth and innovation.

ISF Podcast: Leaving the Weight of the World on the CIO's Shoulder

"Steve, given the speed of change in cyber, do you believe that a CEO should be encouraging innovative, out-of-the-box thinking from their CIO or CISO?"

In today's ISF Podcast, Steve Durbin, Managing Director, ISF, will be discussing the importance of emotional intelligence for CISOs, accepting the inevitability of security breaches and learning from those breaches.

ISF Podcast: Innovating Your Cybersecurity

The latest ISF Podcast will bring the first in a series of episodes focusing on human-centred security. In this episode, Steve Durbin, Managing Director of the ISF, will discuss what the insider threat looks like and how to manage it.

“Employees and negligence are the leading causes of security incidents but remain the least reported issue. The explosion of digital devices creates real challenges for organisations of all sizes. The majority consider themselves vulnerable to insider threats and most include insider threats in their top three security concerns”

Human-Centred Security - The Insider Threat

“Not long ago it was generally seen as a bad thing. Now we’re having clients say, ‘we want somebody who’s been through a breach’.”

In this ISF Podcast, Managing Director Steve Durbin is joined by Egon Zehnder consultant Will Houston to discuss the skills shortage, the effect of a breach on a CISO’s value and employability, and more.

Will Houston: The Effect of a Breach on a CISO's Value

“By identifying the fundamental vulnerabilities in humans and understanding how psychology works and what triggers risky behaviour, organisations can begin to understand why their employees might make errors and then begin managing that risk more effectively”

In the second part of our human-centred security series of podcasts, Steve Durbin, Managing Director of the ISF, discusses how to identify a variety of human vulnerabilities that arise in day-to-day life and in the information security sector.

Human-Centred Security - The Human Vulnerabilities

“So much of our critical data is now held in the cloud. Whether we put it there as individuals or organisations have put it there on our behalf. And that opens even more opportunity for cybercriminals.”

In this week’s podcast, we will be bringing the second episode in a series focusing on Forecast 2020: The Global Security Threat Outlook. In the previous episode, Steve Durbin, Managing Director of the ISF spoke about China, the USA, and the race for technology dominance.

In today’s episode, Steve sat down with Tavia Gilbert to explore the cyber threats around third-party supply chains, IoT, and the Cloud.

#Cyber2020 - Third Party IoT and the Cloud

“The geopolitical area is set to remain fairly complex. I would also say sort of turbulent and fragile as the US and China battle it out for global dominance”

In this week’s podcast, we bring you the fourth episode in a series focusing on Forecast 2020: the global security threat outlook. Throughout the series, Steve Durbin, Managing Director of the ISF, has discussed the race for technology dominance, third-party supply chains, IoT and the Cloud as well as the growing risk of cybercrime as a business.

In this episode, Steve once again sat down with Tavia Gilbert to explore the complexity of the geopolitical arena and just how far the technological confrontation between the US and China can go.

#Cyber2020 - China, USA and the Geopolitical Arena

"I think it's about understanding how you combat the remote element, how you provide advice and guidance to people about what they should be doing, how they should be working."

The COVID-19 outbreak has turned many regular office goers and commuters into home workers. They have been thrust into an environment that can pose novel risks for both staff and their employers. 

In today's Podcast, ISF Managing Director Steve Durbin will be discussing the best practices for working from home, a topic with global relevance as workforces are suddenly adjusting to working with greater independence in greater isolation and hopefully with greater interconnectedness than ever before.

COVID-19: Top Security Tips for Working From Home

"Then there's what I call the day after tomorrow. New ideas, new technologies, new innovations, new challenges, new players, new business models that can really change the nature of the game that you're in. And how much time do you as companies or leaders think about today, tomorrow and the day after tomorrow."

In this week's ISF Podcast, Peter Hinssen, serial entrepreneur, best selling author, keynote speaker and Founder of Nexxworks, sits down with ISF Managing Director Steve Durbin to discuss "the day after tomorrow". 

Peter and Steve explore how security professionals can look past today’s tasks to prepare for the future, facilitating an innovate culture, the pace of technological transformation, how cognitive diversity could improve the workplace and more.

Peter Hinssen - The Day After Tomorrow: Surviving Radical Innovation

"Everything is connected, from the protocols that we use to advise and educate parents in terms of how their children interact with technology, all the way through to hard-core cyber criminal activity. It's connected."

In this ISF Podcast, Cyberpsychologist Dr Mary Aiken sits down with ISF Managing Director Steve Durbin to discuss the difference between cyberspace and real life, whether or not humans are prepared for the cyber challenges we face, the impact of technology on young children, and a fascinating potential solution to the skills shortage that could also curb cybercrime rates.

Mary specialises in the impact of technology on human behaviour, and has written extensively on issues relating to the intersection between humankind and technology – or as she describes it “where humans and technology collide.”

Dr Mary Aiken - Cyberpsychology and the Impact of Technology on Human Behaviour

"The reason why it was so hard to get a settlement of this size wasn't because Facebook was worried that if they lost $550 million, it would hurt them. They can pay the 550. What they were worried about was setting some sort of precedent where now this is the price for privacy violations, and that's what we're fighting so hard for"

In this episode, ISF Managing Director Steve Durbin speaks with Jay Edelson, a Chicago attorney with Edelson PC whose work has earned him the title of “Cybersecurity Trailblazer” from the National Law Journal. His firm recently settled a $550 million privacy suit against Facebook on behalf of the people of Illinois. 

Jay and Steve discuss that suit, the current privacy and cybersecurity legislation landscape, the influence of tech companies, facial recognition and privacy concerns with new and emerging technologies.

Jay Edelson - Data Privacy: The People of Illinois Vs Facebook

"I do think actually that one of the positive outcomes from COVID-19 will be that people will perhaps realise that the human element, the natural element, has a probably more significant role to play in society than technology. Technology should only ever be a tool. And I do wonder what the world will be like post-COVID-19."

In this week's podcast, ISF Managing Director Steve Durbin and ISF Podcast host Tavia Gilbert have an open, wide-ranging conversation about the current global crisis, from the alarming to the hopeful. They discuss the increased threat of cyber attackers, privacy concerns with telemedicine and other home-working apps, whether technology is moving closer to a brave new world, and what we can learn from this moment in history.

Technology in a Brave New World

“I think there are two different concerns here, right? There's an infrastructure issue, period, regardless of the pandemic. And then, of course, there's the additional pressure and increased precautions needed to address this current crisis that we're in.”

In today’s ISF Podcast, Steve Durbin, Managing Director of the ISF is joined by Sherina Edwards, Partner at Quarles and Brady LLP. Sherina is an energy-professional with extensive regulatory and public policy experience. 

In this thought-provoking conversation, Steve and Sherina will be discussing the pressure on critical infrastructures due to the massive shift in working from home, the resulting cybersecurity concerns, and how regulatory challenges are evolving, even by the hour.

Sherina Edwards - The Growing Pressure on Critical Infrastructures

“So the real challenge I think that we have to face up to here is that organisations are simply not going to be able to disentangle the digital from the physical. And they will be forced to respond to this growing blend of threats from new technologies, people, and indeed nature.”

We are heading into an era, unlike anything we've ever seen before. Digital and physical worlds are on an irreversible collision course. By 2022 organisations are not just going to be newly challenged, but in fact, plunged into crisis as ruthless attackers exploit weaknesses in immature technologies and take advantage of what is really an unprepared workforce. At the same time, natural forces will ravage infrastructure and all of this creates a perfect storm of trouble inside and outside the enterprise.

In today’s ISF podcast, we are bringing you the first in a series of episodes focusing on Threat Horizon 2022: When Digital and Physical Worlds Collide. ISF Managing Director, Steve Durbin and ISF podcast host Tavia Gilbert will be discussing the broad threat overview before diving more deeply into a couple of areas that demand more attention.

Threat Horizon 2022: Digital and physical worlds collide

“Highly connected ecosystems of digital devices will enable organisations to harvest, repurpose, and indeed sell sensitive behavioural data about consumers without their consent, with attackers having the potential to then target and compromise poorly secured systems and databases at will.”

In today’s ISF Podcast, we bring you the second episode in a series focusing on Threat Horizon 2022: Digital and Physical World’s collide. In the previous episode, Steve Durbin, Managing Director of the ISF, and Tavia Gilbert, ISF Podcast Host, gave a broad overview of the threats that business enterprises will face between now and 2022, as well as advice for proactive leaders.

In today’s episode, Steve dives in deeper into two previously mentioned topics, starting with the consumer backlash against behavioural analytics, before moving onto the fascinating yet terrifying practice of deepfakes.

Threat Horizon 2022: Behavioural Analytics and Deepfakes

We’ve been encouraged to embrace IoT for its convenience and its integration into our daily lives. But what happens when the Internet of Things bites back? 

In today’s ISF podcast, ISF Managing Director Steve Durbin and podcast host Tavia Gilbert brings you the third episode in a series focusing on Threat Horizon 2022: When digital and physical worlds collide. In the series so far, Steve has explored threats that business enterprises will face between now and 2022, the consumer backlash to data harvesting and behavioural analytics, and the enormous threat of deepfakes. 

In today’s episode, Steve and Tavia look more in-depth at the threat posed by the Internet of Forgotten Things. How the cheap, easy-to-produce IoT devices of today, many of which were never intended to be patched or updated, might become the security risks of tomorrow as well as the complicated legal regulations regarding the production and use of these devices.

Threat Horizon 2022: Internet of forgotten things

Cyber Resiliency in a defining moment in history
Episode 1: Cyber Resilience - Reaping the Benefits
Steve Durbin, Managing Director, ISF
William Beer, Member of the ISF USA planning team
Recorded 14th July 2020 
30 mins

In this first episode of our CISO series, William and Steve explore how despite the unexpected, complex and far-reaching implications of COVID-19, the verdict is clear – planning pays off.  They discuss and provide examples of how those who had invested in resilience planning and testing have reaped the benefits.

Information Security Forum

Popular tracks