Working in ransomware response, investigation and recovery | John Price

Jul 28, 2025

Ask episode

Chapters

Transcript

Episode notes

Intro

00:00 • 3min

From Curiosity to Cybersecurity Leadership

02:37 • 17min

Escalating Threats: Ransomware and Email Bombing

19:19 • 4min

The Importance of Documentation in Cybersecurity

23:15 • 9min

Essential AI Tools and Security for Future Cyber Professionals

32:07 • 2min

Connecting with Experts and Engaging the Audience

33:47 • 2min

Get your FREE Cybersecurity Salary Guide: https://www.infosecinstitute.com/form/cybersecurity-salary-guide-podcast/?utm_source=youtube&utm_medium=podcast&utm_campaign=podcast

John Price of SubRosa joins today's Cyber Work Podcast to share insights from his unique career path spanning UK military counterintelligence, banking cybersecurity and founding his own digital forensics consultancy. John breaks down what really happens when ransomware hits small and medium businesses, why most companies choose recovery over legal action, and how his team helps organizations get back on their feet quickly. He also discusses the growing threats facing industries like automotive dealerships, the critical role of documentation in forensics work, and why AI will reshape both offensive and defensive cybersecurity strategies.

0:00 - Intro
1:00 - Cybersecurity Salary Guide
2:34 - Meet John Price
2:51 - Early career in military counterintelligence
5:13 - Career journey from military to banking to SubRosa
8:34 - Role as founder and head of SubRosa
10:51 - Digital forensics and breach response operations
13:13 - Typical ransomware response process
17:57 - Building and managing a forensics team
19:50 - Unusual cases and industry-specific threats
24:29 - Importance of writing and documentation in forensics
27:36 - Breaking into digital forensics without experience
30:46 - Future of email security and AI's impact
33:47 - About SubRosa and AI security focus

View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcast/?utm_source=youtube&utm_medium=podcast&utm_campaign=podcast

About Infosec
Infosec's mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ's security awareness training. Learn more at infosecinstitute.com.