Shows / Security Insights
Security Insights
A podcast that takes a deeper look at today’s most important issues in cyber security, and beyond.
Episodes
- Security Insights
A CISO's Journey: Mani Nagothu, SentinelOne
The CISO’s role is changing; that is clear enough. Indeed, constant change and the need to adapt is always a feature of cybersecurity. And that’s why our guest…
- Security Insights
Cyber on demand: filling the skills gap?
The cybersecurity skills gap is a problem that won't go away. Worldwide, there are close to 3.5 million vacancies in the industry. The problem seems to be…
- Security Insights
Chief Business Security Officers: a CISO's new ally?
What is a chief business security officer, and what do they do? IT and data security are increasingly important. But so too are physical security and…
- Security Insights
Ransomware: should payments be banned?
Ransomware now accounts for the vast majority of cyber attacks. But regulators and law makers are increasingly concerned about the money being paid out to…
- Security Insights
Cloud security: an identity problem
In this episode, we look at why a lack of robust identity controls are one of the biggest causes of cloud security failures. Cloud operators, at least the…
- Security Insights
The end of passwords?
Are passwords now a security risk? And if they no longer work, what should replace them? In this episode, we speak to https://www.linkedin.com/in/johncapps/ at…
- Security Insights
Critical National Infrastructure: changing threats
How are the threats to critical national infrastructure evolving, and how do we counter them? And are we seeing a shift from attacks based on data and…
- Security Insights
DORA: one year to go
The EU’s Digital Operational Resilience Act, or DORA, comes into force in January 2025. So there is not much time for affected organisations to prepare. DORA…
- Security Insights
Cyber governance: a new UK code of practice?
The UK Government's Department of Science, Innovation and Technology (DSIT) is consulting on a new code of practice for business leaders, which aims to…
- Security Insights
Web apps and security weaknesses
As many as a third of serious vulnerabilities could be in web applications. But securing web apps, APIs and web-based interfaces is a challenge. In this…
- Security Insights
Security in 2024: AI, skills, and a seat on the board
What are the key security challenges for 2024? And how will CISOs address them? In our first episode for Series 5, Security Insights is joined again by Chris…
- Security Insights
Security Insights: 2023 year in review
In our final episode of this season, and indeed for this year, we look at some of the key trends in cybersecurity during 2023. And we discuss some of the steps…
- Security Insights
Cyber: crime’s digital economy
Nothing seems able to stop the growth of cybercrime. And ransomware, above all, has woken up boards to the threat. But there is more to cybercrime than…
- Security Insights
Quantum computing: a security risk?
Could quantum computing threaten our day to day security, and even the fabric of the internet? Researchers are increasingly concerned about the risks quantum…
- Security Insights
The Cyber Resilience Act: a law with unintended consequences?
The upcoming European Cyber Resilience Act sets out to boost security for anything with “digital elements”. The Act will apply to hardware and software. The…
- Security Insights
Open source: a security risk?
As many as 96 per cent of vulnerabilities in open source software are because developers use an outdated, or unpatched version of the code. And this matters…
- Security Insights
Automation and the cybersecurity skills gap
The cybersecurity industry faces an ongoing -- and some say worsening -- skills gap. Both the private and public sectors need more skilled security…
- Security Insights
Cyber resilience: are we prepared?
Most boards -- and certainly all CISOs -- now understand that it is not if a cyber attack happens, but when. None the less, organisations are not doing enough…
- Security Insights
Defending healthcare in cyberspace
Healthcare is coming under an increasing volume of cyber attacks, especially since the pandemic. And attacks are spreading to smaller health care outfits, such…
- Security Insights
Cyber war: is it everyone’s business?
Is cyber war a risk that only governments can deal with? Or should enterprises be prepared to mount their own defences? In this episode we speak to Prof…
- Security Insights
Cloud insecurity: leaving the keys in the door?
The cloud is now a mainstream technology across both the public and private sectors. Its flexibility and scaleability are attractive to organisations of all…
- Security Insights
Deep fakes, AI and digital trust
Without trust, we can’t have security. But the growth of the digital economy, and the wider online world, is changing our idea of trust. A lot of the ways we…
- Security Insights
Biometrics: Eyes in the sky?
Biometric technology promises both security and convenience: there's a reason the leading smartphone makers have adopted face ID, or fingerprint scanners. But…
- Security Insights
Building security capability at Thrive Homes
This week's episode is an insider's account of exactly what it takes to review, and build up, an business' cyber defences. When John Stenton took over as head…
- Security Insights
People and cyber resilience: the human factor
Cybersecurity is about technology, processes and above all, people. And with CISOs' growing emphasis on resilience in the face of cyber attacks, perhaps it is…
- Security Insights
CRA and DORA: New laws, new defences?
The next few years will see the European Union introduce new laws governing cybersecurity. These include the Cyber Resilience Act, and DORA. DORA -- or the…
- Security Insights
CRESTCon 2023: CREST President, Rowland Johnson
In our second podcast from CRESTCon Europe 2023, we catch up with Rowland Johnson, CREST President. CREST is a non profit organisation focused on building…
- Security Insights
Nation state cyber attacks: part 2: evolving threats, adapting defence
In this second part of our analysis of nation state cyber attacks, we look at how threats are evolving, and how increasingly private businesses are their…
- Security Insights
CRESTCon 2023: Security and integrity with Jon Geater, RKVST and IETF
Over the last few years, security professionals have become increasingly concerned about where software, and software components, come from. A growing number…
- Security Insights
CNI, healthcare and cyber threats
Any system that is connected to the public internet is at risk of cyber attack. And any system that connects to a network or other system connected to the…
- Security Insights
Insight Interview: Chris Dimitriadis, ISACA
ISACA today is one of the principal organisations providing accreditation and skills training for infosecurity professionals. But that's not all it does. The…
- Security Insights
Nation state cyber attacks: an unstoppable force?
Nation state attacks are now an unavoidable part of the cybersecurity landscape. And increasingly, these attacks are either targeting commercial organisations…
- Security Insights
Cyber skills: are we our own worst enemy?
The cybersecurity industry has long complained of a skills shortage. But is the industry itself at least partially to blame? From recruitment processes to…
- Security Insights
Data privacy, AI and the board
Is data privacy still something businesses need to worry about? With financial pressures, rising inflation, the continuing aftermath of the pandemic and the…
- Security Insights
GPT-3, Generative AI, and cyberthreats
Over the last few months, AI has attracted even more attention than usual. Much of this is driven by OpenAI's ChatGPT tool, which allows anyone to create…
- Security Insights
Security, diversity and resilience
IT security and business resilience are often viewed as separate disciplines. But both are now squarely board-level issues. The challenge for IT directors and…
- Security Insights
Benchmarking, checkboxes and cyber hygiene
It’s often said that the cybersecurity and data privacy worlds rely too much on checkbox compliance exercises – and fail to get to grips with the real issues…
- Security Insights
Critical infrastructure, cyber threats, and lessons from Ukraine
In this episode we look at the continuing threats to critical national infrastructure, or CNI. National infrastructure is under attack from both nation state…
- Security Insights
Cybersecurity in 2023
In this extended episode, we review the key cybersecurity events of 2022, and analyse likely developments, and priorities, for 2023. We look at Log4J…
- Security Insights
Ukraine, geopolitics and cyber risk
Russia's invasion of Ukraine has brought war to the European continent once again. And the conflict has, inevitably, brought an increase in cyber attacks…
- Security Insights
Fake apps and novel phishing attacks
According to cybersecurity researchers, attackers are turning to new and dangerous methods to carry out phishing attacks. As security teams have improved their…
- Security Insights
5G: Revolution or security risk?
Over the last few years 5G networks have expanded quickly, offering faster speeds and greater capacity than previous wireless networks. And although take up…
- Security Insights
Neurodiversity, neurodivergence, and cyber
With the skills crisis in cyber now well established, organisations are having to look beyond the conventional methods to fill vacancies. Expanding the pool of…
- Security Insights
Cyber’s $150bn black hole: operationalising cybersecurity
Cybersecurity spending seems to be on a never-ending upward curve. But this spending, spending, which analysts put at US$150bn annually, doesn't seem to reduce…
- Security Insights
DDoS’ shifting focus: war, religion and politics
Over the last six to twelve months security researchers have seen a shift in the pattern of cyber attacks, as the impact of the pandemic has largely been…
- Security Insights
Why do we love weak passwords?
Passwords are still a cornerstone of web security, especially for consumer-facing sites. But convincing consumers, and firms, to use stronger passwords remains…
- Security Insights
Risk or reward: can we control cyber risks?
How can we control cyber risks? And how do cyber risks stack up, against the other challenges facing business? Cyber threats have risen steadily over the last…
- Security Insights
Closing the skills gap – part 4: Michael Smith, Neustar
Is there a "hiring gap" in cybersecurity? Over the last few episodes on Security Insights, we’ve looked more deeply at the skills skills shortage. But is the…