

ISF Podcast
Information Security Forum Podcast
The ISF Podcast brings you cutting-edge conversation, tailored to CISOs, CTOs, CROs, and other global security pros. In every episode of the ISF Podcast, Chief Executive, Steve Durbin speaks with rule-breakers, collaborators, culture builders, and business creatives who manage their enterprise with vision, transparency, authenticity, and integrity. From the Information Security Forum, the leading authority on cyber, information security, and risk management.
Episodes
Mentioned books

Jul 24, 2018 • 10min
M&A Best Practices for Cybersecurity
Today, acquirer companies in M&A’s are intensifying their cyber security due diligence during the negotiation period. Why? Because the cyber-risks to businesses are ever intensifying and any data vulnerabilities exposed can seriously threaten the value of a business and the overall success of the venture.
In this podcast, Steve Durbin, Managing Director at ISF, discusses the importance of the acquiring entity understanding the organisations information assets, and why cyber security due diligence should be implemented at an early stage of M&A to add value to the process and mitigate risk exposure post deal.
https://www.securityforum.org/videos-podcasts/isf-podcast-ma-best-practice-cybersecurity/

Jul 19, 2018 • 20min
The Challenges of Integrating Security into the Product Development Process (Richard Guida, Part 3)
In the final part of this 3-part business leaders podcast series, Richard Guida, former CISO at Johnson & Johnson, and Steve Durbin, Managing Director at ISF, discuss what keeps CISO’s awake at night, the challenges integrating security into the product development process, and the importance of security for lay people.
https://www.securityforum.org/videos-podcasts/isf-podcast-security-product-development-process/

Jul 17, 2018 • 16min
Is AI & Machine Learning Contributing to the Skills Shortage?
Artificial intelligence and machine learning are redefining cyber security, re-engineering threat detection tools and exposing sophisticated attacks – but there is a dark side. With increased use, we are seeing outcomes that go beyond the capabilities of IT and security professionals, which if not managed correctly could lead to major security issues and widen the already long-term skills gap.
In this podcast, Steve Durbin, Managing Director at ISF distinguishes the difference between machine learning and AI and discusses the pros and cons of the advancing technologies on cyber security, and particularly on the cyber workforce.
https://www.securityforum.org/videos-podcasts/isf-podcast-ai-machine-learning-contributing-to-the-skills-shortage/

Jul 12, 2018 • 16min
Third Party Suppliers - Where is my data?
A survey with ISF Members revealed that only 50% of organisations have a sufficient framework in place to manage third parties suppliers, and they don’t regularly review or update it!
With third party suppliers playing a critical role in supporting business activities, and often having access to critical business information and customer data, management and engagement with third parties as part of your breach prevention plan is essential.
In this podcast Steve Durbin, Managing Director at ISF shares what organisations must do to ensure third party suppliers have sufficient controls in place, and how to prioritise which third party suppliers need the most attention.
https://www.securityforum.org/videos-podcasts/isf-podcast-third-party-where-is-my-data/

Jul 10, 2018 • 13min
Connected Devices and Data Security: The Challenges to Business and the Consumer (Richard Guida, Part 2)
In the second part of this 3-part business leaders podcast, Steve Durbin, Managing Director at ISF and Richard Guida, Managing Director at Guida Technologies discuss the negative impact new technology and in particular connected devices has on data security, and what this means for both businesses and consumers in the future.
https://www.securityforum.org/videos-podcasts/isf-podcast-data-security-iot-challenges/

Jun 24, 2018 • 22min
Steve Durbin in Conversation with Richard Guida - Part 1
In the first of this 3 part Business Leaders podcast, Steve Durbin, Managing Director at the ISF talks with Richard Guida, Managing Director at Guida Technology Associates about his experience as a former CISO implementing data security within a large organisation, the role technology plays and the implications this has on security and the people who work within it.
https://www.securityforum.org/videos-podcasts/isf-podcast-richard-guida-episode-1/

Jun 24, 2018 • 18min
Mobile Apps: My kingdom for an app!
Increasingly organisations are incorporating mobile apps into their customer service offerings, however struggle to overcome the challenge of adequately securing apps, while ensuring ease of access is not compromised. With the added consideration of data privacy, businesses need to start focusing on security rather than just performance, but whose responsibility is it?
In this podcast Steve Durbin, Managing Director at the Information Security Forum discusses the challenges associated with acquiring, using and operating mobile apps, and provides actions to manage those challenges, while maintaining the business benefits.
https://www.securityforum.org/videos-podcasts/isf-podcast-mobingdom-for-an-app/

May 17, 2018 • 24min
GDPR SOS: Are we too late to meet compliance?
In this podcast, Steve Durbin, Managing Director at the Information Security Forum, shares the 5 key actions organisations can take today to demonstrate compliance, and how they can continue to build compliance into the organisations DNA beyond the deadline date. Steve also discusses the key issue of third party suppliers and their access to personal information, sharing an approach to help rationalise the number of suppliers and protect the data shared with them to support your compliance programme.
https://www.securityforum.org/videos-podcasts/isf-podcast-gdpr-too-late/

Apr 24, 2018 • 12min
Building a Workforce for the Future: All roads lead to the CISO
Recognising the need to build a sustainable security workforce is of real concern to organisations across all sectors, as any shortfalls in skills and capabilities could leave an organisation vulnerable to an attack on its most critical assets, impacting an organisations performance and brand reputation. But as demand outstrips supply, a sustainable security workforce is becoming more and more difficult to achieve, increasing pressure on the CISO’s role.
In this podcast Steve Durbin, Managing Director at the ISF, discusses the skills and attributes CISOs should be looking for when building a sustainable workforce, how to retain them, and the part technology will play in the future when trying to overcome the workforce shortfall.
https://www.securityforum.org/videos-podcasts/isf-podcast-buile-for-the-future/

Feb 6, 2018 • 13min
Protect your critical information assets before it's too late
When your most critical information assets represent 80% of your organisations total value, it’s important to know exactly what they are, where they are, and how to protect them? Until regulations such as GDPR came into focus, most organisations, while familiar with the term had no real understanding of how to define their ‘critical information assets’ and why they should be protecting them. Organisations now know that protecting these assets is crucial if they want to compete and succeed in a global market.
In this podcast, Steve Durbin, Managing Director at the Information Security Forum discusses what critical information assets mean to different organisations, how you can protect them, and what the consequences could be for an organisation if these assets were to be breached.
https://www.securityforum.org/videos-podcasts/isf-podcast-protect-critical-assets/


