Épisodes

  • S30 Ep4: BONUS: Brian Lord - AI, Mis- and Disinformation in Election Fraud and Education

    S30 Ep4: BONUS: Brian Lord - AI, Mis- and Disinformation in Election Fraud and Education
    Oct 29 2024
    This is the second of a two-part conversation between Steve and Brian Lord, who is currently the Chief Executive Officer of Protection Group International. Prior to joining PGI, Brian served as the Deputy Director of a UK Government Agency governing the organization's Cyber and Intelligence Operations. Today, Steve and Brian discuss the proliferation of mis- and disinformation online, the potential security threats posed by AI, and the need for educating children in cyber awareness from a young age.

    Key Takeaways:
    1. The private sector serves as a skilled and necessary support to the public sector, working to counter mis- and disinformation campaigns, including those involving AI.
    2. AI’s increasing ability to create fabricated images poses a particular threat to youth and other vulnerable users.

    Tune in to hear more about:
    1. Brian gives his assessment of cybersecurity threats during election years. (16:04)
    2. Exploitation of vulnerable users remains a major concern in the digital space, requiring awareness, innovative countermeasures, and regulation. (31:0)

    Standout Quotes:

    1. “I think when we look at AI, we need to recognize it is a potentially long term larger threat to our institutions, our critical mass and infrastructure, and we need to put in countermeasures to be able to do that. But we also need to recognize that the most immediate impact on that is around what we call high harms, if you like. And I think that was one of the reasons the UK — over a torturously long period of time — introduced the The Online Harms Bill to be able to counter some of those issues. So we need to get AI in perspective. It is a threat. Of course it is a threat. But I see then when one looks at AI applied in the cybersecurity test, you know, automatic intelligence developing hacking techniques, bear in mind, AI is available to both sides. It's not just available to the attackers, it's available to the defenders. So what we are simply going to do is see that same kind of thing that we have in the more human-based countering the cybersecurity threat in an AI space.” -Brian Lord

    2. “The problem we have now — now, one can counter that by the education of children, keeping them aware, and so on and so forth— the problem you have now is the ability, because of the availability of imagery online and AI's ability to create imagery, one can create an entirely fabricated image of a vulnerable target and say, this is you. Even though it isn’t … when you're looking at the most vulnerable in our society, that's a very, very difficult thing to counter, because it doesn't matter whether it's real to whoever sees it, or the fear from the most vulnerable people, people who see it, they will believe that it is real. And we've seen that.” -Brian Lord


    Mentioned in this episode:
    • ISF Analyst Insight Podcast

    Read the transcript of this episode
    Subscribe to the ISF Podcast wherever you listen to podcasts
    Connect with us on LinkedIn and Twitter

    From the Information Security Forum, the leading authority on cyber, information security, and risk management.
    Voir plus Voir moins
    23 min
  • S30 Ep3: David Weisong - Clean Energy: A CISO’s perspective on cyber security challenges

    S30 Ep3: David Weisong - Clean Energy: A CISO’s perspective on cyber security challenges
    Oct 22 2024
    In today’s episode, Steve speaks with David Weisong, CIO of Information Systems at Energy Solutions, a growing company with many US government clients. He speaks with Steve about his experiences overseeing a full migration of the company’s security framework, how he got buy-in for security from the C-suite, and how he has approached the challenge of staffing.


    Key Takeaways:

    1. Organisations are advised to focus on protecting critical assets and closely monitoring any supply chain issues.

    2. Security leaders and teams are also having to prepare policies for AI use and investigate cloud provider dependencies.

    3. Security leaders and teams should be monitoring developments in quantum, staying in step with regulations and needed skills.


    Tune in to hear more about:

    1. Security risks in technology innovation and adoption (1:29)

    2. The impact of quantum computing on cybersecurity and the need for organisations to prioritise legacy technology updates (6:59)

    3. Volatility, uncertainty, and technological change in the security industry (12:45)

    4. How technology innovations can disrupt and improve organisations (18:22)

    5. Managing innovation in a rapidly changing digital landscape (20:40)

    6. Limitations of accessing powerful technologies due to restrictions, threats, and security concerns (26:12)

    7. Emerging threats and risks in technology, including quantum computing, AI, and legacy systems (32:18)


    Standout Quotes:

    1. “We're a professional services organisation, so our contracts are the foundation. And if they're not 100% met, then you actually don't proceed. So it became very easy to say, there's cause and effect here. And that's where that's taken a lot of … repeat exposure, I think, is one part of it, but also setting the stage that it's dynamic. It's not like, oh, yeah, we're done with that, so we can just kind of move on. It's like, we're done with this particular initiative right now. And there are more, and it will be changing probably, quarter to quarter.” - David Weisong

    2. “There’s a lot of things that are being put onto platforms or systems that you sometimes get into the area where you might have a unique combination of things that creates problems. And so that's where I think the industry is looking at it still in a category basis. I think there's a need for a more holistic approach, dare I say, coordination or cooperation between companies and their solution offerings.” - David Weisong

    3. “When I think about the three to five year window, I mean, there's clearly more fraud and more cybersecurity attacks. It is significant, and it's not decreasing. And so the ability for both organisations to share and for the industry that serving up different solutions, there has to be a coordination and a collaboration around that. Because the priority could change from year to year.” - David Weisong





    Mentioned in this episode:

    • Times Higher Education: We need a social science of data by Cristina Alaimo and Jannis Kallinikos
    • ISF Analyst Insight Podcast

    Read the transcript of this episode

    Subscribe to the ISF Podcast wherever you listen to podcasts

    Connect with us on LinkedIn and Twitter


    From the Information Security Forum, the leading authority on cyber, information security, and risk management.
    Voir plus Voir moins
    29 min
  • S30 Ep2: Steve Satterwhite - Learning to Build a Tech-Savy but Emotionally Intelligent Team

    S30 Ep2: Steve Satterwhite - Learning to Build a Tech-Savy but Emotionally Intelligent Team
    Oct 15 2024
    In today’s episode, Steve speaks with Steve Satterwhite, the founder and CEO of Entelligence, and author of "Above the Line: How the Golden Rule Rules the Bottom Line." He shares some simple but fresh ideas about how to find the right person for the right role, how to overcome the skills shortage, and why putting people first is the key to successful cybersecurity.


    Key Takeaways:

    1. Successful companies can upskill employees in technology, using positive experiences and promising opportunities.
    2. Satterwhite reflects on fatherhood, emphasizing the importance of helping children discover their purpose and identity.
    3. Satterwhite believes that the organisation’s role is to provide tools and systems for team members to thrive, while also acknowledging the reality of short-term employment.
    4. Open-minded technology leaders who integrate technical skills with emotional intelligence thrive.


    Tune in to hear more about:

    1. Attracting and retaining talent in the cybersecurity industry (2:40)
    2. Cybersecurity talent shortage and skills gap in enterprises (10:00)
    3. Finding and upskilling cybersecurity professionals for new technologies (16:44)
    4. Prioritising people in business to boost revenue and profits (21:58)
    5. Prioritising emotional intelligence in technology leadership (27:06)


    Standout Quotes:

    1. “I believe that that culture attracts the kind of folks that are ambitious, that are hungry to learn, that are eager to move up in whatever way that they define moving up in their lives. And I think it's our job, really, as leaders, and especially here in our organisation. It’s to create that environment so that people can thrive.” - Steve Satterwhite

    2. “Here’s a stupid analogy, but I like to use it because it's how I think about the business. It's really just to simplify it. Let's say that you're a new airline, or you have a new airline route that you want to go from Houston to Paris, and you're short of pilots to fly the big Dreamliner or the big Airbus from here to there. It's a different operation. So what we do is we go look for people that have been flying 737s most of their career. They're deeply passionate about flying, and they're really good at it, and all we need to do is just kind of upskill them in a short period of time just to fly a different airplane. It's still piloting, it’s still flying. That's what we do. So if you think about just the evolution of technology and the things that we're doing, all we're doing, constantly, at Entelligence is just upskilling people in the shortest possible time.” - Steve Satterwhite
    Mentioned in this episode:

    • ISF Analyst Insight Podcast

    Read the transcript of this episode

    Subscribe to the ISF Podcast wherever you listen to podcasts

    Connect with us on LinkedIn and Twitter

    From the Information Security Forum, the leading authority on cyber, information security, and risk management.
    Voir plus Voir moins
    33 min
  • S30 Ep1: Dr. Andrew Newell - Deep Fakes: An attack on human identity

    S30 Ep1: Dr. Andrew Newell - Deep Fakes: An attack on human identity
    Oct 8 2024
    Today, Steve sits down with Dr. Andrew Newell, Chief Scientific Officer at the British biometrics firm iProov, for a conversation about deep fakes. As technology improves, it’s becoming ever more difficult to determine what’s real and what’s fake. Steve and Andrew discuss what this will mean going forward for security, social media platforms, and everyday technology users.

    Key Takeaways:
    1. Technology is the key to mitigating the threat of deep fakes, which are synthetic images or videos created to deceive.

    2. Deep fakes are becoming increasingly sophisticated, making them hard to spot.

    3. Newell breaks down the problem into two parts: secure identity verification and detecting synthetic images.

    4. Incentives for verifying imagery will radically shift as deep fakes become more prevalent.
    Tune in to hear more about:
    1. Deep fake technology and its potential impact on identity verification processes (5:57)

    2. Preventing deep fake images and videos using technology and algorithmic systems (9:57)

    3. Deep fakes and their potential uses, including filmmaking and education (13:11)

    4. Deep fakes and their impact on society, with a focus on technology’s role in verifying authenticity (18:43)


    Standout Quotes:
    1. “I think the urgency here — and this is the absolutely key part — is that we need to get the technology in place to make sure that the processes that rely on the genuineness of the person in imagery, that we can have something in place that we know works, that we know that we can trust, and is something that is very easy to use.” - Andrew Newell

    2. “I think on the protection of identity proofing systems against the threat from deep fakes, we have a technology solution now. And the urgency is to make sure that this technology is used wherever that we need to actually guard against that threat.” - Andrew Newell

    3. “And one of the most important things, if not the most important thing, is: when we think about a way to mitigate these threats, it has to be something that works for everybody. We cannot end up with a system that only works for certain groups in a society.” - Andrew Newell

    Mentioned in this episode:
    • Dear Infosec
    Read the transcript of this episode
    Subscribe to the ISF Podcast wherever you listen to podcasts
    Connect with us on LinkedIn and Twitter

    From the Information Security Forum, the leading authority on cyber, information security, and risk management.
    Voir plus Voir moins
    24 min
  • S29 Ep4: Unity Amid the Chaos: Finding common ground in a de-stabilised society

    S29 Ep4: Unity Amid the Chaos: Finding common ground in a de-stabilised society
    Sep 24 2024
    Today we bring you the second conversation with ISF CEO Steve Durbin around the increasing impact of technology on society and business. Societies have always been divided, but how future divisions may manifest feels more uncertain than ever right now. In this episode, Steve and producer Tavia Gilbert offer an analysis of potential future scenarios, as well as practical tips for what organisations can do now to prepare.


    Key Takeaways:
    1. The future will be defined by technology and social media, leading to a shift away from traditional divisions and towards a more complex world where data and information are highly instantaneous and influential.
    2. Leadership will need strong empathy, consolidation skills, and the ability to challenge/be challenged.
    3. Leaders should assume imperfection and constantly update their situational awareness to make informed decisions. They also ought to prioritize simplicity and clear communication to build trust and drive success.

    Tune in to hear more about:
    1. Leadership and organisation in a rapidly changing world (4:44)
    2. The role of businesses in society, including their potential to fill the void left by declining trust in traditional leadership models (9:58)
    3. Information security and the importance of skepticism in the digital age (14:33)
    4. Technology’s impact on information sharing and nationalism (18:33)
    5. Trust and verification in social media and supply chains (22:35)
    6. Leadership, adapting to change, and the importance of soft skills in a rapidly changing world (28:23)

    Standout Quotes:
    1. “Businesses have a new responsibility in the modern era … provide guidelines and stability in a time of deep division.” - Steve Durbin

    2. “The one thing that is going to be so important that will differentiate the winners from the losers in the organisational stakes is: those organisations that are able to consolidate this overall sense of corporate purpose with purpose of the individual, whatever that looks like. And if we can do that, then I think that we'll create something that's particularly special and magic.” - Steve Durbin


    Mentioned in this episode:
    • Dear Infosec
    Read the transcript of this episode
    Subscribe to the ISF Podcast wherever you listen to podcasts
    Connect with us on LinkedIn and Twitter

    From the Information Security Forum, the leading authority on cyber, information security, and risk management.
    Voir plus Voir moins
    31 min
  • S29 Ep3: The AI-Quantum Revolution: Today, tomorrow and the future

    S29 Ep3: The AI-Quantum Revolution: Today, tomorrow and the future
    Sep 17 2024
    Today’s episode is the first of three conversations with ISF CEO Steve Durbin around the coming impact of technological development on society and business. We know that new technologies have always tested organisations, and technological innovation and integration into our lives and enterprises — it’s only accelerating. We offer an analysis of potential future scenarios, as well as practical tips for what organisations can do now to prepare. Key Takeaways: 1. Organisations must prioritise supporting smaller entities in keeping up with the fast pace of technological change. 2. Security can deliver competitive advantage, but implementation challenges persist, and security risks can become low priority in a fast-paced tech landscape. 3. Organisations face pressure to modernise technology while managing legacy systems and regulatory demands. 4. CEOs must balance competing priorities, including ESG initiatives, employee expectations, and shareholder demands. 5. Political developments may force organisations to respect local restrictions on technologies. 6. Organisations are advised to protect crown jewels, ensure data protection, and monitor supply chain partners. 7. Organisations must prepare for quantum-proof encryption and socialise policies for AI use. Tune in to hear more about: 1. The impact of technological innovation on business and society, with a focus on adoption challenges and timing (0:00) 2. Security risks in technology innovation and adoption (1:29) 3. The impact of quantum computing on cybersecurity and the need for organizations to prioritize legacy technology updates (6:59) 4. Volatility, uncertainty, and technological change in the security industry (12:45) 5. How technology innovations can disrupt and improve organizations (18:22) 6. Managing innovation in a rapidly challenging digital landscape (20:40) 7. Limitations of accessing powerful technologies due to restrictions, threats, and security concerns (26:12) 8. Emerging threats and risks in technology, including quantum computing, AI, and legacy systems (32:18) Standout Quotes: 1. “Organisations could certainly find themselves cut off from the supercharged processing power, because it may be developed by a government for its own ends and restricted, expensive, all of those sorts of things, so that it effectively becomes unavailable. And I think organisations, despite all of that, are going to have to operate in the shadow of this massive computing power shift when it comes about as the pace of change accelerates, innovations proliferate, traditional life cycles of technology shorten.” - Steve Durbin 2. “If we're going to have smaller organisations within our overall ecosystem, we need to be just sparing a bit of a thought for how they might be keeping up with such a fast pace of change and how we're going to support them in continuing to meet some of the standards and bars that were setting, so that everybody benefits, frankly.” - Steve Durbin 3. “So the world is also reshaping, as we're introducing AI into what we're doing. And so again, I think that the challenge from the business perspective, from the security perspective, from the technology perspective, is really about: how do you focus on what is important for your organisation, for your people, for your customers, in a world that is constantly now changing? And the speed of that change is only going to get faster. And we haven't seen that before.” - Steve Durbin 4. “So you're in a much better position, if you can control your innovations irrespective of what's going on. But you're never going to be able, I think, to divorce yourself completely from the market, because you operate in the market. And so the speed at which the market is evolving is going to, I think, determine — to a certain extent, anyway — your success in managing your own innovation, so you may need to be innovating more quickly than you're comfortable, just in order to try to keep up.” - Steve Durbin Mentioned in this episode: ISF Analyst Insight PodcastISF Podcast: Data Dilemmas: Outsmarting the perils of AI Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter From the Information Security Forum, the leading authority on cyber, information security, and risk management.
    Voir plus Voir moins
    35 min
  • S29 Ep2: Steve Durbin & Nick Witchell - Rethinking Technology Governance in a Fragmented Policy Landscape

    S29 Ep2: Steve Durbin & Nick Witchell - Rethinking Technology Governance in a Fragmented Policy Landscape
    Sep 10 2024
    Today, BBC journalist Nick Witchell interviews Steve about the threat landscape in light of a number of damaging hacks that have recently been made public. They consider the challenges regulators face given the current geopolitical situation and discuss how organisations can create a thorough cyber defense and response plan.


    Key Takeaways:

    1. Organisations cannot abdicate responsibility for data security, even when outsourcing to third parties. They need strong incident response plans and ongoing assessment of third-party security capabilities.
    2. In terms of any country’s political agenda on cybersecurity, AI regulation is often overshadowed by other issues.
    3. Few parliamentarians and ministers come from a security background, which is one reason why it’s critical to provide guidance and insight to them.
    4. A more thoughtful and funded approach to security would benefit society, considering the potential impact on people’s lives and the need for effective incident response.


    Tune in to hear more about:

    1. Accountability and responsibility in cybersecurity (1:59)
    2. Role of cybersecurity centers and national institutions (5:13)
    3. Government and political involvement in cybersecurity (8:29)
    4. Public awareness and the ISF’s role (12:21)
    5. Risk management and security investment (16:32)
    6. Concerns about technology implementation (20:14)


    Standout Quotes:

    1. “We (at the ISF) don't want to be one of those organisations that's constantly barracking people and complaining. We want to be holding true to some of our founding principles, which is about providing best advice, providing some of the best tools, providing some of the best insights that we gather from our own team and also from our member community. But we do need to make more noise about that, because people desperately need to understand some of the implications, and indeed, very much more importantly, what they can actually practically do about it.” - Steve Durbin

    2. “There is no one size fits all. That's the other thing about this. You have to have it in line with your business direction, your size, your maturity, all of those sorts of things. Very often people ask me for blueprints or, what does good look like? And my answer is always the same: it varies depending on your stage of maturity and your willingness to spend, and how important your data is to you.” - Steve Durbin


    Mentioned in this episode:

    • ISF Analyst Insight Podcast

    Read the transcript of this episode
    Subscribe to the ISF Podcast wherever you listen to podcasts
    Connect with us on LinkedIn and Twitter

    From the Information Security Forum, the leading authority on cyber, information security, and risk management.
    Voir plus Voir moins
    24 min
  • S29 Ep1: Jannis Kallinikos - Redefining Data to Reinvent the Market Economy

    S29 Ep1: Jannis Kallinikos - Redefining Data to Reinvent the Market Economy
    Sep 3 2024
    Today’s conversation is a fascinating discussion on the nature of data with Jannis Kallinikos, professor of Information Systems at the London School of Economics. Jannis co-wrote the recently published book Data Rules: Reinventing the Market Economy, in which he and co-author Cristina Alaimo posit that data are a fluid cultural record, rather than a static statistical entity. He and Steve discuss the implications of this understanding of data for the security industry, from how it could change regulatory approaches to how we understand ourselves as humans in relation to data.

    Key Takeaways:
    1. Kallinikos argues that data are not just statistical entities, but cultural entities that convey aspects of our world and reality.

    2. Data are cultural records, not just statistical entities, and are fundamental to economic and social transformation.

    2. Durbin and Kallinikos discuss concerns about data-driven perspectives reinforcing narrow worldviews.

    3. Data regulation needs to reflect data’s interactive and morphing nature and serves to protect society from greedy companies.

    4. Kallinikos warns that politics has become instinct-based, with little time for reflection.

    Tune in to hear more about:
    1. Data’s role in society, economy, and transformation (0:00)

    2. Data’s impact on society, culture, and individual perspectives, with a focus on regulation and balance (7:10)

    3. Data as a living entity, challenges for security professionals, and need for education (18:01)

    4. Data’s impact on society and politics, with a focus on education and government’s role in protecting data (23:15)

    Standout Quotes:
    1. “Data are cultural elements and not statistical entities. It makes a whole lot of difference. By cultural entities, we mean that they are records by which we represent our world. and we act upon the world. We use them to produce, we use them to interact, we use them to communicate. In this respect, data are cultural records, once again, and not statistical entities or entities like those ones that contemporary data science debates.“ - Jannis Kallinikos

    2. “Think how many things we can do that were out of reach before these beasts and these technologies and the data we produce in the facilities that they prepare for us, how many things we can do that were not virtually possible before. So there is a positive side to it. But as you English say, there is no free lunch in life. And this applies here. We win a lot. But there are also important things that we lose.“ - Jannis Kallinikos

    3. “But these are difficult discussions to have in politics. Because they require a little bit of reflection, a step back, a little bit of time. Politics, for good or bad, has become very instinct based over the last three or four decades. Instinct based, more to react, target, and produce reactions of a particular type that are mostly emotional or instinctual.“ - Jannis Kallinikos

    Mentioned in this episode:
    • Times Higher Education: We need a social science of data by Cristina Alaimo and Jannis Kallinikos
    • ISF Analyst Insight Podcast

    Read the transcript of this episode
    Subscribe to the ISF Podcast wherever you listen to podcasts
    Connect with us on LinkedIn and Twitter


    From the Information Security Forum, the leading authority on cyber, information security, and risk management.
    Voir plus Voir moins
    31 min