

Caffeinated Risk
McCreight & Leece
The monthly podcast for security professionals, by security professionals.Two self proclaimed grumpy security professionals talk security risk, how they’ve managed it in the past and forward looking discussions with guests working in information security and risk management.
Episodes
Mentioned books

Nov 17, 2022 • 6min
Privacy & Toxic Data with Michelle Finneran Dennedy
A great discussion point that didn't make it to air from the original 2021. Not all data is of equal value to the organization and the viable shelf life is seldom tracked or even discussed. This espresso shot takes a humorous look at a serious question about privacy considerations during the development cycle and check out the original full episode with privacy thought leader Michelle Finneran Dennedy.

6 snips
Oct 20, 2022 • 31min
Classifying and effectively communicating enterprise security risk with Paul Mercer
Paul Mercer, a former Royal Navy member, developed a risk management software. He emphasizes prioritizing mitigation over analysis in enterprise security risk management and effective communication with executives. The importance of gaining customer trust through standardized processes is highlighted. The podcast discusses prioritizing key rules in risk-based compliance and aligning control measures with specific risks for effective security management.

Sep 8, 2022 • 7min
Redefining the risk management business partnership with Rachelle Loyear
Exploring the evolution of security in business partnerships, transitioning from silos to collaborative partners. Understanding risk tolerance in budgeting for risk management and aligning efforts with business risk levels.

6 snips
Aug 18, 2022 • 33min
Resilience as a Risk Management Strategy
Learn from international crisis management thought leaders Alexandra Hoffman and Tim Wenzel about building resilience in risk management strategies, navigating influence in organizations, and the ongoing journey of fostering organizational resilience. Explore real-life examples and the challenges of breaking down silos for sustainable business growth.

Jul 21, 2022 • 32min
Infrastructure Resilience and Ethical Considerations
Exploring the impact of the July 2022 nationwide telecom outage, discussion on ethics and commitment to the common good. Navigating challenges in telecom industry resilience, cybersecurity concerns, and legislative developments. Exploring ethics in legislation and cyber security, driving organizational resilience with ethical considerations for societal welfare.

4 snips
Jun 16, 2022 • 31min
GRC Program Development and Implementation with Josh Sokol
Explore how a security practitioner created a custom solution for risk management, challenges in risk registry development, tying risks to assets for evaluation, the role of a CISO in business operations, and translating technical risks into business decisions.

May 19, 2022 • 32min
Strategies for meeting the cyber skill set challenge with Martin Dinel
Exploring strategies for sourcing and retaining cybersecurity talent in Alberta, transitioning from gear-centric to skill-focused cybersecurity, addressing challenges in hiring and retaining specialists in the public sector, building a strong cyber workforce through comprehensive programs, and discussing collaboration for progress in cybersecurity training.

Apr 21, 2022 • 33min
Risk management in the cloud with Illena Armstrong
Exploring cloud risk management challenges, shared accountability in cloud services, evolving attitudes towards cloud services during the pandemic, and the evolution of cybersecurity roles and leadership in organizations

Mar 17, 2022 • 33min
Cyber Crime and Risk Management Strategies with Cara Wolf
Cara Wolf discusses Canadian tech industry innovation, drawing leadership attention to cyber security. Exploring fraud in airlines, cybersecurity challenges, fostering innovation, embracing diversity in cybersecurity.

Feb 16, 2022 • 33min
Continuous Authentication and Risk Management with Ian Paterson
Ian Paterson, CEO of Plurilock, discusses continuous authentication, zero trust models, Canadian startups, talent strengths in STEM, behavior-based cybersecurity, defense strategies, risk management dynamics, and the importance of ongoing risk assessment in a coffee-infused dialogue.


