We’ll Invest in Resilience as Soon as the Ransom Payment Clears
Apr 23, 2024
auto_awesome
Thom Langford, CISO at Velonetic, discusses businesses pledging not to pay ransom demands but changing priorities post-attack. The importance of infrastructure and organizational commitment is highlighted. The podcast also explores ransomware resistance strategies, data security, communication styles, and cybersecurity talent shortage.
Businesses may pledge not to pay ransom demands, but priorities shift post-attack for quick recovery.
Impact of talent shortages in cybersecurity, leading to competitive landscape and challenges for skill development.
Deep dives
Tackling Cybersecurity Mistakes: Learning from a Personal Blunder
A significant takeaway from the podcast delves into an insightful experience shared by a security professional who had sent out numerous questionnaires, ultimately drawing minimal responses. The lesson learned was the value of asking succinct and direct questions instead of overwhelming respondents. This highlights the importance of effectively structuring inquiries to yield meaningful responses.
Diversity in Cybersecurity: Creating Inclusive Environments
Exploring the significance of accommodating neurodiverse individuals within the cybersecurity realm, the podcast discusses the unique challenges faced by this community. Emphasizing the need to foster an inclusive environment, the guest underscores the importance of understanding diverse perspectives and providing tailored support for neurodiverse candidates and employees.
A critical point of discussion revolves around the impact of talent shortages in cybersecurity, with a staggering 3.4 million global vacancies estimated. The conversation highlights the competitive landscape for skilled professionals, leading to job transitions and pricing constraints for smaller organizations. The emphasis on internal training as a viable solution is juxtaposed with the struggle of organizations to invest in skill development.
Innovative Cybersecurity Tools: Dreaming Up Ideal Solutions
The podcast engages in a thought experiment regarding ideal cybersecurity tools, with suggestions ranging from price transparency tools to tech-to-plain language translators. The conversation delves into the realm of desired innovations, including advanced endpoint administration systems that enforce robust security measures without relying on remote administration. Participants share their vision for transformative tools to enhance cybersecurity practices.
Why do lots of businesses pledge to never pay ransomware demands?
And why do their priorities quickly change when they need to get the business back to normal after an attack occurs?
What good is a pledge like that without the infrastructure and organizational commitment to make it possible?
Thanks to our podcast sponsor, CyberMaxx
CyberMaxx offers MaxxMDR, our next-generation managed detection and response (MDR) solution that helps customers assess, monitor, and manage their cyber risks. MaxxMDR fuels defensive capabilities with insights from offensive security, DFIR, and threat hunting, on top of a technology-agnostic deployment model. We think like an adversary but defend like a guardian.
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode