

ISF Podcast
Information Security Forum Podcast
The ISF Podcast brings you cutting-edge conversation, tailored to CISOs, CTOs, CROs, and other global security pros. In every episode of the ISF Podcast, Chief Executive, Steve Durbin speaks with rule-breakers, collaborators, culture builders, and business creatives who manage their enterprise with vision, transparency, authenticity, and integrity. From the Information Security Forum, the leading authority on cyber, information security, and risk management.
Episodes
Mentioned books

Jan 23, 2018 • 14min
Who is the real insider threat to you business?
 Insider threats account for 54% off all breaches, and are found at all levels of an organisation, from top to bottom. Numerous factors are increasing organisations’ exposure to the threats posed by insiders, and technical controls are limited. To combat these threats, organisations must invest in a deeper understanding of trust, and work to improve the trustworthiness of all insiders. 
The insider threat has only intensified as people have become increasingly mobile and hyper-connected, and with technology continuously advancing, the risks posed by insiders are only set to increase. 
In this podcast, Steve Durbin, Managing Director, ISF discusses the most common types of insider threats, as well as how organisations need to take a holistic approach to tackle insider threats that include both technology and people when embedding security into their organisation’s DNA.
https://www.securityforum.org/videos-podcasts/isf-podcast-who-to-your-business/
 

Jan 10, 2018 • 8min
Ransomware? The currency of cyber criminals...
 The frequency of ransomware attacks on businesses has significantly grown over the past two years, with the number of detections increasing by nearly 2000%. As the space becomes more attractive and lucrative to cyber criminals, the threat of ransomware is only set to rise in 2018 as attackers get more creative, sophisticated and persistent, and attacks from named ransomware such as WannaCry and BadRabbit become ever more prevalent. 
With so many end points accessible to malware, organisations must be more vigilant than ever to protect themselves against this growing threat. 
In this podcast, Steve Durbin, Managing Director, ISF addresses what organisations can do to prepare and protect against ransomware, and how focusing on the basics, as well as embedding security awareness within the organisation can help prevent such attacks.
https://www.securityforum.org/videos-podcasts/isf-podcast-rans-cyber-criminals/
 

Dec 19, 2017 • 13min
The CISO Reset: Redefining your value to the business
 The role of a CISO has evolved over the years’ and now requires someone who combines InfoSec capabilities with business requirements. They must be able to align cyber to business strategy, speaking both languages while developing reporting metrics that satisfies the board and promotes good cyber resilience across the business. All these attributes support the belief that the CISO of the future doesn’t have to come from an IT background. 
In this podcast, Steve Durbin, Managing Director ISF, addresses the objectives a CISO should aim to achieve in the first 100 days in the role, and offers insights into how a CISO should work with the board and security teams to achieve these.
https://www.securityforum.org/videos-podcasts/the-ciso-reset/
 

Dec 6, 2017 • 11min
EU GDPR for India: Are you ready to protect your European customers' data?
 With the main industries in India comprising IT Services providers, banks and conglomerates such as Tata Group, Birla Group, Mahindra, and Reliance who all manage EU personal data – Indian organisations are determining how they can comply with the EU GDPR by May 2018. India aims to achieve 25 billion digital transactions in 2017 to 2018, so complying with the GDPR is going to have to be top of the business agenda.  
In this podcast, Steve Durbin addresses some of the challenges that India will face and offers insights into best practice solutions to address the requirements of the EU GDPR. Steve also discusses how Indian organisations should not view the EU GDPR as a compliance burden, but as an opportunity for culture change across the business that will lead to tangible business benefits. Find out more at www.securityforum.org.
https://www.securityforum.org/videos-podcasts/isf-podcast-eu-gn-customers-data/
 

Nov 29, 2017 • 13min
Cyber and the Board: Stop making excuses and start making the decisions that matter
 When we talk about the board and cyber security, we have moved away from the board doesn’t get it, to the board gets it, to the board doesn’t feel they are sufficiently briefed when a breach takes place. But is all of this evasive talk to avoid responsibility, or is there still a lack of communication between cybersecurity professionals and the board? 
In this podcast, Steve Durbin, Managing Director ISF, offers insights into the specific actions the board needs to take to embed cybersecurity into business strategy. With the May 2018 deadline for the EU GDPR fast approaching, the board should be viewing upcoming legislation as an opportunity for cultural change, rather than a compliance burden. 
https://www.securityforum.org/videos-podcasts/isf-podcast-cybeions-that-matter/
 

Nov 21, 2017 • 11min
IoT: All I did was press the button on my smartphone
 The smartphone has become an extension of our work and our personal life – everyone expects to be able to access something with a click of the button. But what are some of the serious consequences that a culture of convenience has given rise to? With 21 billion connected devices estimated to be around the world by 2020 this is surely a question all technology users should be asking. 
In this podcast, Steve Durbin, Managing Director, ISF, discusses the business and personal security consequences of IoT and how technology providers need to ensure security is built in rather than tapped on to IoT devices. For more information visit www.securityforum.org.
https://www.securityforum.org/videos-podcasts/isf-podcast-iot-on-my-smartphone/
 

Sep 6, 2017 • 10min
Tackling the Cyber Skills Shortage: Innovation is Key
 As organisations of all sizes try to be more agile in responding to emerging threats, finding people with the right skill set is something of a challenge. With cyber now integrated into the DNA of business, the big question remains: how do we attract, train and retain the cyber specialists of the future? 
In this podcast, Steve Durbin, Managing Director ISF, offers insights into how educational bodies and organisations, such as the ISF, can educate the next generation of cyber security professionals. Steve highlights the constantly evolving and dynamic nature of the role that makes cyber security such an attractive career path, whilst also discussing the importance of helping business people transition into the security space.
https://www.securityforum.org/videos-podcasts/isf-podcast-tacknnovation-is-key/
 

Aug 15, 2017 • 9min
Falsification: How to protect the integrity of data
 As organisations become increasingly dependent on data, unscrupulous competitors and cyber criminals are using falsified information as a form of attack. Falsification has been used to inflict both product and brand damage on organisations that have been too slow to protect their information. So, what steps can organisations take to protect the integrity of their data and minimise the impact upon their brand? 
In this podcast, Steve Durbin, Managing Director ISF, provides solutions for businesses. Steve discusses what has contributed to the growth of falsified information, how businesses should protect the integrity of their data and how they should work collaboratively with third parties to tackle the threat. 
https://www.securityforum.org/videos-podcasts/falsification-hontegrity-of-data/
 

Jul 26, 2017 • 11min
GDPR Compliance: Full disclosure becomes a reality
 Many organisations with a footprint in Europe are still unclear if the GDPR applies to them, or if they have the right team and resources to address it. The GDPR will require a collaborative effort between businesses and third parties to ensure that all areas of the information life cycle are protected – a daunting project for security teams.
In this podcast, Steve Durbin, Managing Director ISF, offers top tips and insights into the steps organisations must take to comply with the GDPR – to produce a security model of ‘privacy by design’. Fundamentally, organisations will need to know what data they are storing, how they are storing it and how they are protecting it – to show regulatory bodies that they have taken every possible step to preserve the integrity of customer data.
For more information visit: www.securityforum.org 

Jun 27, 2017 • 13min
Emerging Technology: AI's role in business
 Artificial Intelligence is a growing trend across industry sectors from medical and legal to automotive and manufacturing. However, the new capabilities of AI technologies, can lead to unexpected outcomes and new risks on the threat horizon, such as: AI machines misunderstanding information, new means for criminals to extract an organisation’s mission critical information and AI technologies learning from wrong or incomplete data to make poorly informed decisions. Such cybersecurity risks raise the questions, what does the growth of AI mean for businesses and how can business leaders ensure that the benefits of AI outweigh the risks? 
In this podcast, Steve Durbin, Managing Director ISF, offers insights for C-suite and business leaders into how to collaborate across the organisation to create best practice methods for deploying AI systems. Steve provides an overview of the risks associated and maps out the security by design argument to enable companies to successfully handle emerging technology and develop a robust cyber resilience strategy. 
https://www.securityforum.org/videos-podcasts/4696-2/
 


