Today, BBC journalist Nick Witchell interviews Steve about the threat landscape in light of a number of damaging hacks that have recently been made public. They consider the challenges regulators face given the current geopolitical situation and discuss how organisations can create a thorough cyber defense and response plan.


Key Takeaways:

1. Organisations cannot abdicate responsibility for data security, even when outsourcing to third parties. They need strong incident response plans and ongoing assessment of third-party security capabilities. 
2. In terms of any country’s political agenda on cybersecurity, AI regulation is often overshadowed by other issues.
3. Few parliamentarians and ministers come from a security background, which is one reason why it’s critical to provide guidance and insight to them.
4. A more thoughtful and funded approach to security would benefit society, considering the potential impact on people’s lives and the need for effective incident response.


Tune in to hear more about:

1. Accountability and responsibility in cybersecurity (1:59)
2. Role of cybersecurity centers and national institutions (5:13)
3. Government and political involvement in cybersecurity (8:29)
4. Public awareness and the ISF’s role (12:21)
5. Risk management and security investment (16:32)
6. Concerns about technology implementation (20:14)


Standout Quotes:

1. “We (at the ISF) don't want to be one of those organisations that's constantly barracking people and complaining. We want to be holding true to some of our founding principles, which is about providing best advice, providing some of the best tools, providing some of the best insights that we gather from our own team and also from our member community. But we do need to make more noise about that, because people desperately need to understand some of the implications, and indeed, very much more importantly, what they can actually practically do about it.”  - Steve Durbin

2. “There is no one size fits all. That's the other thing about this. You have to have it in line with your business direction, your size, your maturity, all of those sorts of things. Very often people ask me for blueprints or, what does good look like? And my answer is always the same: it varies depending on your stage of maturity and your willingness to spend, and how important your data is to you.” - Steve Durbin


Mentioned in this episode:

• ISF Analyst Insight Podcast
  
  

Read the transcript of this episode
Subscribe to the ISF Podcast wherever you listen to podcasts
Connect with us on LinkedIn and Twitter

From the Information Security Forum, the leading authority on cyber, information security, and risk management.

Today’s conversation is a fascinating discussion on the nature of data with Jannis Kallinikos, professor of Information Systems at the London School of Economics. Jannis co-wrote the recently published book Data Rules: Reinventing the Market Economy, in which he and co-author Cristina Alaimo posit that data are a fluid cultural record, rather than a static statistical entity. He and Steve discuss the implications of this understanding of data for the security industry, from how it could change regulatory approaches to how we understand ourselves as humans in relation to data.

Key Takeaways:
1. Kallinikos argues that data are not just statistical entities, but cultural entities that convey aspects of our world and reality.

2. Data are cultural records, not just statistical entities, and are fundamental to economic and social transformation.

2. Durbin and Kallinikos discuss concerns about data-driven perspectives reinforcing narrow worldviews.

3. Data regulation needs to reflect data’s interactive and morphing nature and serves to protect society from greedy companies.

4. Kallinikos warns that politics has become instinct-based, with little time for reflection.

Tune in to hear more about:
1. Data’s role in society, economy, and transformation (0:00)

2. Data’s impact on society, culture, and individual perspectives, with a focus on regulation and balance (7:10)

3. Data as a living entity, challenges for security professionals, and need for education (18:01)

4. Data’s impact on society and politics, with a focus on education and government’s role in protecting data (23:15)

Standout Quotes:
1. “Data are cultural elements and not statistical entities. It makes a whole lot of difference. By cultural entities, we mean that they are records by which we represent our world. and we act upon the world. We use them to produce, we use them to interact, we use them to communicate. In this respect, data are cultural records, once again, and not statistical entities or entities like those ones that contemporary data science debates.“ - Jannis Kallinikos

2. “Think how many things we can do that were out of reach before these beasts and these technologies and the data we produce in the facilities that they prepare for us, how many things we can do that were not virtually possible before. So there is a positive side to it. But as you English say, there is no free lunch in life. And this applies here. We win a lot. But there are also important things that we lose.“ - Jannis Kallinikos

3. “But these are difficult discussions to have in politics. Because they require a little bit of reflection, a step back, a little bit of time. Politics, for good or bad, has become very instinct based over the last three or four decades. Instinct based, more to react, target, and produce reactions of a particular type that are mostly emotional or instinctual.“ - Jannis Kallinikos

Mentioned in this episode:

• Times Higher Education: We need a social science of data by Cristina Alaimo and Jannis Kallinikos
• ISF Analyst Insight Podcast

Read the transcript of this episode
Subscribe to the ISF Podcast wherever you listen to podcasts
Connect with us on LinkedIn and Twitter


 From the Information Security Forum, the leading authority on cyber, information security, and risk management.

Today is the second in a two-part conversation centered on cultural fluency with global leadership strategist and corporate coach Jane Hyun. Jane is the author of Leadership Toolkit for Asians: The Definitive Resource Guide for Breaking the Bamboo Ceiling and Breaking the Bamboo Ceiling: Career Strategies for Asians, and co-author of Flex: The New Playbook for Managing Across Differences. In this episode, Steve and Jane define cultural fluency and give more tips on fostering cohesion and innovation in global teams.

Key Takeaways:
1. To be effective in a global team with diverse languages and continents, leaders must recognize and attend to cultural differences.
2. Mergers and acquisitions can fail due to cultural differences.
3. In the security industry, retention is a significant issue, and creating a fun and thriving work environment can help address it.


Tune in to hear more about:
1. Cultural fluency and its importance in leadership, particularly when working with people from different backgrounds and cultures (0:00)
2. Cultural fluency in the workplace (6:17)


Standout Quotes:
1. “It's actually about building leadership capacity to work across difference. And it's not just for one cultural group or another; it’s actually for everyone. To build that cultural self awareness and to create an environment where we can ask questions, thoughtfully, that we give some room to each other.” - Jane Hyun

2. “If the leader can be attuned to those little things and show that kind of empathy that engages someone who feels, perhaps, kind of in the margins, or their voice is not always heard, I think that can make a tremendous difference in how they connect to your company, how loyal they are to you, and how much output you will get from their productivity as well.” - Jane Hyun


Mentioned in this episode:

• Flex: The New Playbook for Managing Across Differences
• Breaking the Bamboo Ceiling: Career Strategies for Asians
• Leadership Toolkit for Asians: The Definitive Resource Guide for Breaking the Bamboo Ceiling
• ISF Analyst Insight Podcast

Read the transcript of this episode
Subscribe to the ISF Podcast wherever you listen to podcasts
Connect with us on LinkedIn and Twitter

From the Information Security Forum, the leading authority on cyber, information security, and risk management.

Today, ISF CEO Steve Durbin is in conversation with Adam Rumanek, the founder and CEO of Aux Mode, a company that specializes in digital rights management, content strategy, and IP protection. Adam and Steve discuss the challenges of protecting content and intellectual property, how organisations can manage their risk in that area, and what to do if your content is compromised.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin is in conversation with Brett Beranek, Vice President and General Manager of security and biometrics at Nuance Communications. Steve and Brett discuss some of the potential and the challenges of biometrics in the security space, including recent advancements in deep neural networks and deep fakes.

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

In this episode, Steve speaks with Carl Allen, a private equity investor and co-founder of the Dealmaker Wealth Society. They discuss security across the mergers and acquisitions process, particularly for small and mid-size businesses.
More ISF resources on this topic:

• Information Security in Mergers and Acquisitions
• Video Presentation: The Role of Information Security in Mergers and Acquisitions
• Consultancy Service: Cyber Risk for Mergers and Acquisitions

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin is in conversation with Mark Ralls, President and COO of Invicti Security, a Texas-based company that provides dynamic web application security solutions. You’ll hear Mark mention what he calls the FUD approach to security — starting from fear, uncertainty and doubt. Steve and Mark talk about the cost this approach can ultimately have in relation to people, process, technology, and outsourcing. They also discuss the current threat landscape, security by design, and developing the next generation of cybersecurity talent.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin and producer Tavia Gilbert discuss highlights from the conversations we’ve featured on the podcast over the last several weeks. We review our season and consider takeaways, in terms of business leadership and actionable insights for our members, particularly during these times of instability.

Related Resources from ISF:

• “Are 5G Networks Setting The Stage For A New Wave Of Cyberattacks?” — Forbes, 10 August 2021
• Threat Horizon 2022: Digital and Physical Worlds Collide
• The New World Order (ISF Podcast, 19 January 2022)
• The Race for Tech Dominance (ISF Podcast, 25 January 2022)
• ISF Ransomware Support: Prepare, Respond, Resume
• Review and Gap Analysis of Cybersecurity Legislation and Cybercriminality Policies in Eight Countries

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, Steve is speaking with Prof. Federico Varese, a professor of criminology and head of the sociology department at Nuffield College at Oxford University. Prof. Varese talks with Steve about the history of organised crime in Russia and around the world, the mafia’s movement into cybercrime, and what the future may hold for these criminal organisations.

Related Resources from ISF:

• ISF Podcast, Alexander Seger — How Global Law Enforcement Fight Cybercrime
• ISF Podcast, Inside the Mind of Today’s Cybercriminals, Brett Johnson Part 1
• ISF Podcast, The Life of a Cybercriminal, Brett Johnson Part 2
• Misha Glenny: The Evolution of Cybercrime with Misha Glenny, author of McMafia

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, Steve sits down with Alexander Seger, head of the Cybercrime Division at the Council of Europe. They discuss ways to promote cooperation between private businesses and law enforcement agencies, the challenges of investigating and prosecuting cybercrimes across multiple jurisdictions, and recent developments with the Budapest Convention on Cybercrime that could mitigate those challenges.

Related Resources from ISF:

• Mitigating Ransomware Attacks
• Review and Gap Analysis of Cybersecurity Legislation and Cybercriminality Policies in Eight Countries

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

In this episode, we’re featuring a conversation Steve had just last week with Stephen Poloz, a world renowned economist who served as Governor of the Bank of Canada from 2013-2020. Steve and Stephen discuss some of the themes Poloz addresses in his recently released book, The Next Age of Uncertainty: How the World Can Adapt to a Riskier Future. They discuss communicating in the midst of crisis, how the fourth industrial revolution compares to past historical moments of change, and risk management and resilience amidst global turmoil.

Mentioned in this episode:

The Next Age of Uncertainty: How the World Can Adapt to a Riskier Future
Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin speaks with Marc Gibson, owner and CEO of DThree Technologies, a company that specializes in helping small-medium enterprises blend their people, processes, and technology. They talk about the unique security challenges small businesses face, how to build a culture of security in a small business environment, and career possibilities for security professionals within SMEs.

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin and host Tavia Gilbert are talking all things 5G — what it is, what changes it will effect, and how we can keep our operations and supply chains secure as it rolls out.

Related ISF Resources:

• “Are 5G Networks Setting The Stage For A New Wave Of Cyberattacks?” — Forbes, 10 August 2021
• Threat Horizon 2022: Digital and Physical Worlds Collide
• The New World Order (ISF Podcast, 19 January 2022)
• The Race for Tech Dominance (ISF Podcast, 25 January 2022)

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today is the first in a two-part conversation centered on cultural fluency with global leadership strategist and corporate coach Jane Hyun. Jane is the author of Leadership Toolkit for Asians: The Definitive Resource Guide for Breaking the Bamboo Ceiling and Breaking the Bamboo Ceiling: Career Strategies for Asians, and the co-author of Flex: The New Playbook for Managing Across Differences. In this episode, Steve and Jane discuss how leaders can get the best out of their workers in a remote work environment and discuss practical ways leaders can facilitate productive meetings with teams spread out all over the world.

Key Takeaways:
1. Leaders must cultivate self-awareness and recognition of areas for improvement in personal and professional growth.
2. Innovation can be driven by bringing different cultural norms and views together virtually.
3. Culturally adaptive facilitation can lead to more innovative ideas in remote settings.


Tune in to hear more about:
1. Navigating cultural differences in business leadership (0:00)
2. Self-awareness and cultural understanding in business leadership (3:18)
3. Remote work, cultural perspectives, and effective meeting strategies (6:51)


Standout Quotes:
1. “There's no way we can keep doing things the same way. Because if we do, we're gonna get nothing different, right? We’re not going to get the innovation that we want.” - Jane Hyun

2. “I just wanted to be accepted. I just wanted to be like everybody else. But then I realized, as I matured, there's nothing wrong with my cultural background, and really, I had to lean into who I was. The values that my parents and the things that I learned from my Korean community are really interesting and good and helpful, and could be a driver for innovation for the work that we do. And until I got to that point, I don't think my work was able to truly flourish in the way I could.”  - Jane Hyun

Mentioned in this episode:

• Flex: The New Playbook for Managing Across Differences
• Breaking the Bamboo Ceiling: Career Strategies for Asians
• Leadership Toolkit for Asians: The Definitive Resource Guide for Breaking the Bamboo Ceiling
• ISF Analyst Insight Podcast

Read the transcript of this episode
Subscribe to the ISF Podcast wherever you listen to podcasts
Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management.

Our guest today is David Thornewill, Group CISO for transportation and logistics giant DHL. Steve sat down in the ISF headquarters in London to speak with David at his home in Germany. They discuss the ever-changing role of the CISO, the challenges and practical strategies of building a culture of security in a multinational corporation with more than half a million employees, and preparing for future threats.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, we’re featuring highlights of a recent “fireside chat” hosted by global tech services and consulting firm Infosys, and featuring our own ISF CEO Steve Durbin. Steve’s interviewer is his long-time colleague and friend Vishal Salvi, who serves as Chief Information Security Officer and Head of Cyber Security Practice at Infosys.

• More about Infosys
• More about Vishal Salvi
  
  

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

In this episode, originally released in April 2021, we’re bringing you a conversation between ISF CEO Steve Durbin and ISF analyst Dan Norman from the 2020 ISF Congress. Steve and Dan discuss the overall direction of the security profession in the current climate and how to build a team and a culture to promote secure practices throughout your organization.

Mentioned in this episode: Addressing Psychological Vulnerabilities
Positively Influencing Security Behavior

• Read the transcript of this episode
• Subscribe to the ISF Podcast wherever you listen to podcasts
• Connect with us on LinkedIn and Twitter

From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin and host Tavia Gilbert discuss research he’s been conducting during the fall of 2021 around The New World Order and the Race for Tech Dominance. This is the second of two episodes focusing on this theme.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin and host Tavia Gilbert discuss research he’s been conducting during the fall of 2021 around The New World Order and the Race for Tech Dominance. This is the first of two episodes focusing on this theme.
Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Happy New Year to all of our listeners! It’s hard to believe we’ve been doing this podcast for five years now. Our audience keeps growing, and we’re excited to bring you more insightful guests in 2022 — the best is yet to come.

But today, we’re taking a look back. This episode features clips from some of our favorite episodes from 2021. The full episodes are linked below, in case you missed one or want to revisit the full conversations.

• Dame Inga Beale - Communication: Listen and Be Heard
• Kate Montague — How to Rethink, Reset, and Refocus
• Kate Stone — The Role of Analogue in the Digital Age
• Margaret Cunningham — Healthy Workplaces and Trust
• Thomas Eisenmann — Why Startups Fail
• Michele Wucker — You Are What You Risk
• Josh Jackson — AI, Automation, and Cyber Ethics: Changing the Game
• Brian Cox — Intellectual Honesty and Learning to be a Leader
• Max McKeown — Thriving in a World of Opportunities, Shocks, and Change
• Steve Wozniak in Conversation with Steve Durbin
  
  

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Last week, we featured a presentation ISF CEO Steve Durbin made on December 8, 2021, on the Emerging Threats we expect to see in 2022. This week, we’ll hear the presentation’s Q&A session, in which Steve responds to the audience questions.

Mentioned in this episode:

• Demystifying Zero Trust
• Protecting the Crown Jewels
• “Zero Trust: Five Misconceptions Every Business Should Avoid” — Forbes, 1 December 2021
• Contact Mark Chaplin 
• Contact Paul Holland
• Contact Steve Durbin: steve.durbin@securityforum.org
  Phone: +44 (0) 7785 953800
  Twitter: @stevedurbin
  LinkedIn: https://www.linkedin.com/in/stevedurbin/
  
  

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

This week, we’re featuring a presentation ISF CEO Steve Durbin made on December 8, 2021, on the Emerging Threats we expect to see in 2022. Steve sets some context for his thinking around the threats for 2022, goes through four of what he believes will be the threats to watch out for in 2022, and then outlines some of the mitigations that organizations can adopt to protect themselves from these threats.

• Demystifying Zero Trust
• Protecting the Crown Jewels
• Steve Durbin: steve.durbin@securityforum.org
  Phone: +44 (0) 7785 953800
  Twitter: @stevedurbin
  LinkedIn: https://www.linkedin.com/in/stevedurbin/
  
  

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Viviane Reding, former First Vice-President of the European Commission, sits down with ISF Chief Executive, Steve Durbin to discuss the ramifications of GDPR, cybercrime, and what kind of governance in cyberspace is possible going forward.

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin sits down with trust expert, author, and lecturer at Oxford University, Rachel Botsman. They discuss the nature of trust, how trust differs from transparency, and how to build a culture of trust within your organisation.

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

In this episode, Steve speaks with Amanda Fennell, a security professional with over two decades in the industry who currently serves as CISO and CIO of Prove and adjunct professor of cybersecurity at Tulane University. She talks to Steve about why a CISO must be an educator at heart, how to embrace feedback in order to grow, and how young professionals can shape their careers in security as the role of the CISO evolves.


Key Takeaways:
1.  Important foundational principles in security include least privilege, risk mitigation, and vulnerability management.
2. Amanda Fennell suggests that new CISOs befriend their legal officers, in order to better understand security and risk.
3. Handing change can be a key indicator of high performance in security, with those who thrive in change being more likely to be high performers.


Tune in to hear more about:
1. Teaching technical skills and emotional intelligence in a technical field (2:25)
2. Security leaders’ communication and education strategies (4:35)
3. Security fundamentals and vulnerability management (10:37)
4. Evolving role of CISOs, career progression, and coping with stress in security leadership positions (13:21)
5. Managing stress and mental health in leadership roles (18:57)


Standout Quotes:
1. “It was a long, long time ago. My boss sat me down for a performance review and said, you have a reputation for not taking feedback well, because you're really sure that you're right. And I took that to heart. And for a long time, I did have to fake that feedback coming to me, like, ‘Thank you for the feedback. I'll think about this. That’s so …’ You know, whatever, and just freeze your face into a smile. Now, I love it. I invite it.” -Amanda Fennel.

2.  I think that probably, my other big advice for people who are first-time CISOs who are new in their role: become good friends with your legal officer.That’s going to be your best friend on the team. They understand, especially if they have compliance and audit — those people, and I say this as someone who worked at a legal tech company, software for five years — but your legal officers understand security and risk really well. And they're going to help you to interpret and translate things often. And that has been one of my biggest helps in my career. -Amanda Fennell


Mentioned in this episode:

• ISF Analyst Insight Podcast
  
  

Read the transcript of this episode
Subscribe to the ISF Podcast wherever you listen to podcasts
Connect with us on LinkedIn and Twitter

From the Information Security Forum, the leading authority on cyber, information security, and risk management.

ISF CEO Steve Durbin speaks with computer programmer, philanthropist, and co-founder of Apple, Steve Wozniak. Woz reminisces about the past and looks into the future of Big Tech, and considers what both could mean for the future of security.

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin is in conversation with Max McKeown, a writer, consultant, and researcher specialising in innovation strategy, leadership and culture. He and Steve talk about effective communication, resilience, and how to lead with long-term vision when you feel overwhelmed by day-to-day tasks.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

In this episode, ISF CEO Steve Durbin speaks with Dr. Sadie Creese, a professor of Cybersecurity at Oxford University. Dr. Creese is the founding Director of the Global Cyber Security Capacity Centre (GCSCC) at the Oxford Martin School and a member of the World Economic Forum’s Cyber Security Centre’s Strategic Advisory Board. She and Steve discuss the current threat landscape, deep machine learning, and educating business leaders in the basics of cybersecurity.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin is in conversation with Dr. Brian Cox, professor of Particle Physics at the University of Manchester. Dr. Cox worked on the ATLAS experiment at the Large Hadron Collider at CERN in Switzerland and has co-written several books on physics, including Why does E=mc2? and The Quantum Universe. He’s also known for appearances in many science programmes for BBC radio and television, including In Einstein's Shadow and the BBC Horizon series. Dr. Cox and Steve discuss how to translate a complex message to a lay audience, the need for intellectual honesty, and the value of play even in serious endeavors.

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin and host Tavia Gilbert give a preview of the upcoming season of the ISF Podcast, which features conversations with ISF’s Digital Congress 2021 keynote speakers.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

In this episode, originally released in December 2020, Steve welcomes motivational speaker, corporate consultant, and educator Reggie Butler back to the podcast. Reggie last connected with Steve in 2018 for an episode of our videocast (link below). Today’s conversation focuses on what we’ve learned through the experience of working from home during the pandemic, strategies for uniting teams even while socially distanced, and why leaders should model vulnerability and transparency now more than ever.

Learn more about Reggie Butler.
Mentioned in this episode:2018 ISF Videocast with Reggie Butler: Finding your ‘rhythm’ in business
Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

In this episode, ISF CEO Steve Durbin and podcast host Tavia Gilbert dive deeper into this season’s theme of Digital Transformation. We've had a handful of guests, including Jonathan Moore, Bob Phibbs, and Mel Shakir, and today Steve shares his own perspective about this current moment of Digital Transformation.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

In this episode, ISF CEO Steve Durbin speaks with Mel Shakir, Managing Director of DreamIt Ventures, about his work helping cybersecurity startups reach their full potential. They discuss how helping cybersecurity startups can reach their full potential and how CISOs can keep up with changing cybersecurity software in this time of digital transformation, as well as tips for cybersecurity software vendors who might approach CISOs already feeling inundated by pitches.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin is in conversation with Bob Phibbs, “The Retail Doctor.” Bob is recognized as a leading expert on brick-and-mortar retailers, and he has consulted for, among others, Caesar’s Palace, Lego, Omega, Vera Bradley, and Yamaha. Bob shares his perspective on digital transformation in the retail market, building a solid team, and effective communication within an organisation.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

In this episode, ISF CEO Steve Durbin sits down with Jonathan Moore, CTO of SpiderOak, a data security software design firm in Silicon Valley. Steve and Jonathan discuss digital transformation, creating zero trust models that work, and the future of information security and Big Tech.

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, Steve is speaking with investigative tech journalist Geoff White, who has been covering tech and financial crime for more than 20 years. Listeners may be familiar with his popular podcast The Lazarus Heist for the BBC World Service, and now his new book, Rinsed: From Cartels to Crypto: How the Tech Industry Washes Money for the World's Deadliest Crooks, will be available from Penguin Random House next week.  Steve and Geoff discuss current trends in organized cybercrime, how these criminals are—or maybe aren’t—adopting AI, and the difficulties law enforcement still faces in helping the victims of these crimes.

Key Takeaways:
1.  Nation states and government agencies have been known to adopt tactics from organized crime gangs and activists – a sort of trickle-up effect.
2. As technological advancements are presenting criminals with new avenues for money laundering, law enforcement is not always able to keep up and instead is having to prioritize high level crimes.
3. The law enforcement landscape is a fast changing world, as agencies adapt and gain more awareness of cybercrime tactics relating to AI and cryptocurrencies.

Tune in to hear more about:
1. Cybercrime evolution, nation-state involvement, and tactics (3:31)
2. AI use in cybercrime, potential for innovation and defense (8:29)
3. Cybercrime and money laundering, with a focus on the role of technology and law enforcement (11:45)
4. Cybercrime, crypto, and organized crime evolution (15:59)

Standout Quotes:
1. “Sometimes the tools of organized cybercrime, gangs, nation states have also learned from hacktivists. From leaks from people like WikiLeaks or from Anonymous, they've learned the damage that a leak can do a leak of information can do. And that's fed into that disinformation piece nation states now extremely astute at getting in stealing information and then weaponizing that information to change elections, to change people's attitudes, to influence world events, the nation states have got both feet in to this cybercrime game.” -Geoff White

2. “I think maybe it's worth thinking like a criminal and understanding how thinking like a criminal is different to thinking like a different type of enterprise. The reason I enjoy thinking about organized crime and covering organized crime is because it's organized. These are networks, as you say, of professional, organized people. But they're not out to win customers. They're not like Microsoft and Google who wants to come out with innovation and innovative new products to win customers in their competition. No. They want to make money from victims. And frankly, as long as you're making enough money from your victims month in month out, you don't change. There's no reason to innovate. Crime gangs innovate when law enforcement and the force of authority stop them from making the money they usually make. That's when you innovate.” -Geoff White

3. “I think there was a time when, frankly, explaining Bitcoin to sort of rank and file police officers was a struggle. I think those days are gone … There's been this realization that things like cryptocurrency is something that law enforcement needs to be on top of.” -Geoff White

4. “As cryptocurrency gets larger, as more financial institutions get behind it, as governments get behind it, yes, it can make it more legitimate, it can expand the legitimacy of it. But it also creates more noise, if you like, for the criminals to hide.” -Geoff White


Mentioned in this episode:

• ISF Analyst Insight Podcast
  
  

Read the transcript of this episode
Subscribe to the ISF Podcast wherever you listen to podcasts
Connect with us on LinkedIn and Twitter

From the Information Security Forum, the leading authority on cyber, information security, and risk management.

In this episode, originally released in November, 2020, Steve is in conversation with philosopher, author, and speaker Anders Indset. Steve and Anders discuss the importance of leaders engaging in what he calls a “self audit,” having the strength and courage to get vulnerable, the importance of listening, and more.

Mentioned in this episode:

• Arne Næss
• Lofoten
• The Social Dilemma

Read the transcript of this episode Subscribe tothe ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security and risk management

In this episode, ISF CEO Steve Durbin speaks with Josh Jackson, Global Head of Government and Public Services for 6clicks and the Executive Director of the AI Association. As the AI Association’s leader, Jackson advocates and educates government agencies, including the U.S. Congress, about artificial intelligence. Steve and Josh discuss the future of AI, how the workforce can survive the coming robot takeover, the role of government in regulating AI and cyber, and more.


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today, ISF CEO Steve Durbin speaks with Jonathan Brill, futurist and author of the new book, Rogue Waves: Future-Proof Your Business to Survive and Profit from Radical Change. They discuss ways organizations can prepare for the confluence of small events that can add up to major disruption, developing institutional resilience, and how to strategies to facilitate sound decision-making in the boardroom.

Mentioned in this episode:
Rogue Waves: Future-Proof Your Business to Survive and Profit from Radical Change


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Our season six theme is disruption, and today ISF CEO Steve Durbin and ISF Podcast host Tavia Gilbert discuss a paper on global cyber crisis. This is a paper that the ISF wrote for the Astana Club, to which Steve is a regular contributor. Last week, we talked about how most governments seem to be struggling with how to rein in big tech companies in order to protect their citizens’ privacy. Today, we focus more on cyber attacks by both state-backed and independent actors.

Mentioned in this episode:

The Astana Club

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Our theme this season is disruption, and today, ISF CEO Steve Durbin and podcast host Tavia Gilbert discuss digital totalitarianism, a topic based on the ISF's reporting for the Astana Club, an international discussion platform that gathers prominent political figures, diplomats, and experts from the world's top analytical centers. Today’s conversation focuses on how most governments are struggling with how to rein in big tech companies in order to protect their citizens’ privacy.

Mentioned in this episode:

The Astana Club

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Today is the start of a new season focusing on global disruption. It will feature a mix of conversations between Steve Durbin, CEO of the ISF, our host Tavia Gilbert, and expert guests.
 
This episode provides a summary of the themes that will be explored in this series, namely:

• Steve Durbin’s contribution to the Astana Club Top 10 Risks for Eurasia 2021 focused on Digital Totalitarianism and the Global Cyber Crisis as the world experiences a global cyber disruption.
• Jonathan Brill – Future-proof your business to survive and profit from radical change.
• Josh Jackson – The positive benefits of AI. 

Mentioned in this episode:

The Astana Club
Jonathan Brill
Josh Jackson

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

https://bit.ly/3dMNgcH

In this episode, originally released on January 26, 2021, ISF CEO Steve Durbin talks with Dame Inga Beale, the former CEO of Lloyd’s of London, about the role that listening played when she became the first (and only) female CEO in Lloyd’s more than 300-year history. They also discuss the courage and effectiveness of simplicity in communication, a new style of leadership built on trust, and career advice for both board members and security professionals who are relatively new to the industry.

More about Dame Inga Beale and Lloyd’s of London.

Mentioned in this episode: 

• Dive In Festival

• Read the transcript of this episode.
• Subscribe to the ISF Podcast wherever you listen to podcasts.
• Connect with us on LinkedIn and Twitter.

From the Information Security Forum, the leading authority on cyber, information security, and risk management.

https://bit.ly/3w4PjPz

ISF CEO Steve Durbin and Tavia Gilbert close out the Authors Roundtable season,  discussing what they’ve learned from interviews over the past four episodes with Thomas Eisenmann, Michele Wucker, Michelle Seiler Tucker, and Matt Blumberg. They review what they learned from each of those conversations and link those conversations directly to the concerns of and opportunities for cybersecurity listeners.
Mentioned in this episode:
Professor Thomas Eisenmann’s Why Startups Fail: A New Roadmap for Entrepreneurial Success (US and Canada) and The Failsafe Startup (outside the US and Canada)

Michele Wucker’s The Gray Rhino: How To Recognize and Act on the Obvious Dangers We Ignore and You Are What You Risk: The New Art and Science of Navigating an Uncertain World

Michelle Seiler Tucker’s Exit Rich: The 6P Method to Sell Your Business for a Huge Profit

Matt Blumberg’s Startup CEO and Startup CXO: Startup CXO: A Field Guide to Scaling Up Your Company's Critical Functions and Teams



IRAM2—Information Risk Assessment Methodology 2
Threat Horizon Report 2021
Threat Horizon Report 2022
Threat Horizon Report 2023
FAIR


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

https://bit.ly/3ycpEGv

In today’s episode, ISF CEO Steve Durbin speaks with Matt Blumberg, a technology entrepreneur and business builder based in New York City, co-founder and CEO of Bolster, and the author of Startup CEO and the new release, Startup CXO: A Field Guide to Scaling Up Your Company's Critical Functions and Teams. Steve and Matt discuss the ups and downs of starting a business in 2020, inclusion in the boardroom and beyond, and what a functional executive team looks like.


Mentioned in this episode: Startup CXO: A Field Guide to Scaling Up Your Company's Critical Functions and Teams
Startup CEO


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

https://bit.ly/3vLxFAr

In today’s episode, ISF CEO Steve Durbin is in conversation with Michelle Seiler Tucker, speaker, author, and CEO of Seiler Tucker, a business that specializes in mergers and acquisitions.

Michelle speaks with Steve about her newest book, Exit Rich: The 6P Method to Sell Your Business for a Huge Profit. They discuss tips on selling a business at a profit, the current state of M&A business in the COVID economy, the role of cybersecurity in M&A, and more.

Mentioned in this episode: Exit Rich: The 6P Method to Sell Your Business for a Huge Profit

Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

Recently, British journalist Juliette Foster interviewed Steve for a feature in The European, and today we’re listening to that conversation. Steve and Juliette explore a range of topics, including how to get buy-in to your security strategy at all levels of the organization, how much security should cost, navigating the regulatory landscape, and which industries and enterprises Steve believes could be templates for security.

Key Takeaways:
1. Good cyber strategy aligns with business strategy, is quantifiable, and involves all employees.
2. Durbin suggests involving security in project planning to avoid retrofitting security measures.
3. Durbin suggests that security teams need to spend more time explaining security implications to business leaders in a way they can understand.
4. Durbin suggests that leaders must create a personal investment in security by providing feedback and justifying costs in a way that resonates with each individual’s role and responsibilities.
5. Durbin highlights the evolving regulatory landscape, with a shift from standardization to protectionism and complexity for organizations.
6. Durbin highlights the evolving threat landscape, including malware, ransomware, and phishing attacks.

Tune in to hear more about:
1. Aligning cybersecurity strategy with business goals and outcomes (1:36)
2. Cybersecurity strategies, testing, and budgeting (10:42)
3. Regulation complexity and its impact on businesses (18:00)
4. Cybersecurity investment, risk management, and emerging threats (22:44)
5. Evolving cyber threats and the importance of resilience (26:58)

Standout Quotes:
1. “What is important for organizations is not to become over fixated on the threats — that’s necessary, obviously, to have a good defense — but also to figure out this whole notion of resilience. How quickly could we get our systems back up and running? How quickly could we get our organization functioning again? How are we going to recover our data? Where are we storing it? Those sorts of things.” - Steve Durbin

2. “... the crux of good cyber strategy is having an alignment with a business strategy happening in alignment with what it is that the organization is looking to do on a daily basis, which in the majority of cases is: increase revenue, increase shareholder value, deliver back to employees, customers, and to further the ideals of the organization.” - Steve Durbin

3. “So the role of the security leader in any budget cycle is to try to align whatever spend she or he wishes to have with the future direction of travel of that organization. And if you can start to do that, then the whole conversation becomes very much easier. But I'm not a huge fan of setting fairly random percentages, because I think it sends entirely the wrong message. You run the risk of overspend or underspend. And what you actually want to be doing is spending appropriately to deliver the right level of protection for your critical assets, for your company, for your employees, for your shareholders, so that you can continue to provide a thriving environment.”  - Steve Durbin


Mentioned in this episode:

• ISF Analyst Insight Podcast
  
  

Read the transcript of this episode
Subscribe to the ISF Podcast wherever you listen to podcasts
Connect with us on LinkedIn and Twitter

From the Information Security Forum, the leading authority on cyber, information security, and risk management.

https://bit.ly/3wCmKKo

In this episode, Steve Durbin speaks with commentator and policy analyst Michele Wucker, author of The Gray Rhino: How To Recognize and Act on the Obvious Dangers We Ignore and You Are What You Risk: The New Art and Science of Navigating an Uncertain World. Steve and Michele discuss individual and collective risk appetite, the concept of a risk ecosystem, and how to build a culture and team that can balance your organization’s risk appropriately.


Mentioned in this episode: The Gray Rhino: How To Recognize and Act on the Obvious Dangers We Ignore

You Are What You Risk: The New Art and Science of Navigating an Uncertain World


Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

https://bit.ly/3cmUjZa

Today, ISF CEO Steve Durbin is speaking with Harvard Business School Professor Thomas Eisnemann about his new book, Why Startups Fail: A New Roadmap for Entrepreneurial Success. Steve and Prof. Eisenmann look at examples of a few of the case studies included in his book that illustrate why some startups succeed, but most fail. Whether you’re an entrepreneur or not, everyone in business can learn from these failures.

Mentioned in this episode: Why Startups Fail: A New Roadmap for Entrepreneurial Success (US and Canada) The Failsafe Startup (outside the US and Canada)
Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management

https://bit.ly/3wMrLzX

In this episode, originally released in November 2020, Steve is in conversation with Dr. Hannah Fry, associate professor in the Mathematics of Cities at the Centre for Advanced Spatial Analysis at University College London, and a researcher in the patterns of human behaviour, particularly in an urban setting. In this conversation, Steve and Hannah discuss the challenge and imperative of communicating across demographics with simplicity and clarity; the power of storytelling; the moral tensions inherent in data mining; and more.

Mentioned in this episode:Hello WorldJon RonsonCambridge Analytica data scandalDrone legislation in the UKISF Threat Horizon 2021

Read the transcript of this episode
Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter
From the Information Security Forum, the leading authority on cyber, information security, and risk management.