Behave: Recent Episodes
CybSafe
Behave, a CybSafe podcast, is the foremost cybersecurity podcast focused on human cyber risk.
Tune in for cutting edge discussions on a dynamic, evolving industry and to stay ahead of the shift from awareness to security behaviours and human risk quantification.
Hosted on Acast. See acast.com/privacy for more information.
In this week’s episode, host Joe Giddens sits down with Julie Haney, the program lead at the US National Institute of Standards and Technology (NIST), to discuss the recent Gartner report, “Security Awareness Efforts Fall Short. Now What?”
Julie and Joe delve into the challenges faced by security professionals running programs and the mounting urgency to measure program effectiveness.
Julie’s LinkedIn: https://www.linkedin.com/in/julie-haney-037449119/
In today’s episode of Behave, Munya Hoto, VP of Marketing at CybSafe speaks with Security Expert, Mo Amin.
Mo is recognized as an authority in the security industry with an extensive career spanning nearly 20 years. His journey into the security field began in helpdesk and desktop support roles, gradually moving into security investigations and forensics, with this exposure to the human side of security, particularly user understanding and behavior, igniting his interest in security culture.
The conversation revolves around the evolution of security culture, human risk management, and the challenges of building effective security awareness programs within organizations. They touch on the changing landscape of security awareness training, and the shift toward understanding the importance of measuring and influencing behaviors, ultimately leading to the concept of human risk management.
In this episode, Munya has an insightful conversation with Ash Hunt, current Global Chief Information Security Officer (CISO) at Apex Group.
Ash has worked extensively across UK Government departments, FTSE/FORBES organizations, and Critical National Infrastructure (CNI), in addition to authoring the UK’s first quantitative framework and actuarial model for information risk. He has also served as a media commentator for Sky News & ITV on cyber security issues.
He is currently the Global Chief Information Security Officer (CISO) at Apex Group Ltd — a global, top-tier independent service provider operating from over 80 offices in more than 40 markets worldwide, with over 10,000 employees.
Today, they discuss what Ash has found in terms of the ineffective practices in Information Security, how he approaches risk management, as well as how many industries aren’t moving rapidly enough toward the human risk elements of security.
To learn more about Ash, head to his LinkedIn page: https://www.linkedin.com/in/ashjhunt/?originalSubdomain=uk
In this episode of Behave, Ben is joined by Dr. Jason Nurse, Director of Science and Research at CybSafe.
With a long career of research in the space, Dr Nurse explores the interdisciplinary nature of cybersecurity, privacy, and trust, especially considering the impact of new technologies on these areas.
Today, Ben and Jason have an in-depth discussion around how leadership, policies, training, and change can affect a security culture, what questions CybDB can answer, and the two way relationship between change and your company’s security culture.
To learn more about Jason, head to his LinkedIn page here: https://www.linkedin.com/in/jasonrcnurse/
On this episode of Behave, Munya sits down with Stephen Middleton, Information Security Officer at EMR.
With 20 years in the IT world, starting with an IT Helpdesk role straight out of college, Stephen has seen the changes to the industry and has wide exposure to the many corners of the IT world, including project management, product management QA, testing, and more.
Today, they discuss how Stephen approaches the many changes we see year after year - from the hygiene of security to how teaching real-world examples outside of a work environment can help employees truly understand the importance of security when online in any capacity.
They also explore how an open and inviting mental health culture can influence employees to carry this honesty and understanding into their work in cybersecurity, as well as the IT Apprenticeship program headed by Stephen.
Connect with Stephen on LinkedIn here: https://www.linkedin.com/in/middletonstephen/?originalSubdomain=uk
On this episode on the Behave podcast, Ben is joined by Itamar Shalev, Cyber Security Global Awareness and Training Manager at Amdocs.
Itamar has been a security professional for over 20 years, with a variety of roles from Head of Cyber Security Awareness and Training, to the Ministry of Public Security alongside other government positions.
In their discussion today, Ben and Itamar discuss the challenges surrounding a positive security training culture, what Itamar has learned across his many roles, as well as the attitude you need to have to do your best in combating human error.
Connect with Itamar on LinkedIn here: https://www.linkedin.com/in/itamarshalev/?originalSubdomain=il
In this fascinating episode of Behave, Ben is joined by Leanne Walker, Head of Cyber Culture and Behavioural Change at Royal Mail Group in the UK.
As part of the Cyber Leadership team, Leanne specializes in the human side of information and cybersecurity, creating an environment where appropriate cyber behavior becomes standard practice.
In their engaging discussion today, Ben and Leanne chat about the importance of creating useful resources and learning strategies for staff, the quality and delivery difference for off-the-shelf resources versus original, and the imperative need for psychological safety in your organization.
Follow Leanne on LinkedIn.
On this enlightening episode of the Behave Podcast, Munya is joined by Janet Roberts, Global Head of Security Education & Awareness at Zurich Insurance Company.
Janet has an outstanding track record in strategic security awareness program development/management. She is constantly innovating and creating ways to engage and educate employees on security awareness.
In their time today, Janet and Munya explore the importance of a good security awareness program and what separates the group, as well as the observations Janet has made in her long career in the industry.
To learn more about Janet or to connect, find her on Linkedin - https://www.linkedin.com/in/janetroberts/
Ben Donaldson sits down with Lisa Kubicki, Director, Trust & Security Training & Awareness at DocuSign.
Lisa reveals what her role at DocuSign is and what a day at her job looks like, a few tips on how you can incentivize people to work toward a more secure environment and the benefits of simplifying processes for people to build trust and reliance in your security force.
She opens up about the importance of being available to people, and building a good reputation to allow an open and reliable culture with your coworkers and colleagues.
Finally, she emphasizes her approach to the human side, in terms of leadership and fund allocation, and why the people are just as important as technology in cybersecurity.
Make sure you don’t miss this valuable conversation between two industry leaders in the cybersecurity space!
Check out Lisa Kubicki:LinkedIn and DocuSign.
Munya Hoto sits down with Ava Woods-Fleegal, Global Security Awareness Leader at Raytheon Technology.
Ava discusses how she went from picking apart computers as a child to working in cybersecurity today, what’s involved in successfully changing human behaviour, and her thoughts on the statement that humans are the weakest link in cybersecurity, as well as what we can do to change that perception.
Make sure you don’t miss this knowledge-filled conversation between two industry leaders in the cybersecurity space!
Check out Ava Woods-Fleegal: LinkedIn and Raytheon Technologies.
Munya sits down with Niamh Muldoon, Chief Information Security Officer at Fenergo.
Niamh debunks the misconception that cyber security is only about technology, as she reveals that it’s more about using data to understand what’s needed to support the growth of a business.
She also talks about what it takes for leaders in an organisation to build a strong security culture that ultimately supports growth, how women who are looking to enter the security space can reach out to leaders in the space to learn and create connections, as well as what it really means to be a CISO and learning both the technical side and the business side of things.
Make sure you don’t miss this conversation filled with great insights between two industry experts in the cyber security space!
Check out Niamh Muldoon: LinkedIn and Fenergo
Munya sits down with Dan Dipple, Cyber Security Manager at Charles Taylor.
Dan has over 15 years of experience in information technology and security. Today, we’ll explore his background in the military, his current role as a Cyber Security Manager and what a day in his job looks like.
He explains how each of the 3500 people at Charles Taylor should be a frontline defender when it comes to security, why he thinks ‘cyber security’ is a buzzword today and how reports of human error being the biggest cause of cyber threats negatively impacts the conversation around cyber security.
He also uncovers his three biggest insights on cyber security so make sure you don’t miss this valuable conversation with an experienced industry expert in the cyber security space!
Check out Dan Dipple:LinkedIn and Charles Taylor
Munya Hoto sits down with Michelle Levesley, the Cyber Security Awareness Lead at Channel 4.
During her interview, Michelle discusses her fairly new position, the difference between having technical skills and being technical, how it is easier to implement certain programs when you have receptive colleagues who are willing to assist, and the importance of being confident in your role.
Additionally, she emphasizes the pitfalls of getting stuck in your ways, instead of being open to exploring fresh solutions and perspectives in order to move the industry forward.
She also uncovers how to build trust with your colleagues and why it’s so crucial to “humanize” and take responsibility instead of blaming others.
Make sure you don’t miss this conversation between two industry leaders in the cyber security space!
Check out Michelle Levesley: LinkedIn and Channel 4
Ben Donaldson, Community Engagement Manager at CybSafe, sits down with Louise Cockburn and Linda Morgan. They share the role as Information Security Culture & Awareness Manager at Quilter.
Linda and Louise reveal the benefits of sharing a role while building security programs from scratch, the importance of communicating the results your programs produce to execs and how humans can help with spotting red flags and be a part of the firewall, if they are taught properly.
They also touch on the future of cyber security and how automation can save a considerable amount of time and money compared to manual data collations; as well as how the industry is shifting away from phishing programs and basic CBT in favor of human risk management.
Tune in for a dynamic conversation between these industry leaders to stay ahead of the evolving world of cyber security!
Check out Linda Morgan: LinkedIn and Quilter
Check out Louise Cockburn: LinkedIn
Hosted on Acast. See acast.com/privacy for more information.
Ben Donaldson, Community Engagement Manager at CybSafe, sits down with Alisha Chambers, Security Engagement and Culture Manager at Tesco.
Ben and Alisha explore the intersection of psychology and cyber security, oftentimes seen as the human element of security. They discuss the impact of quality leadership, as well as what you can do if you’re not getting the support you need.
Ben and Alisha additionally look into the availability of useful security data. Half the battle can be knowing where to look, and then effectively pulling that data into a more centralized place to be analyzed, understood, and acted upon.
Tune in for a dynamic conversation between these two industry leaders to stay ahead of the evolving world of cyber security!
Check out Alisha Chambers: LinkedIn and Tesco
Ben Donaldson, Community Engagement Manager at CybSafe, sits down with Lianne Potter, the Head of Security Operations at ASDA.
Discover the inspirational story of how Lianne “fought” her way into the Cyber Security space and her lessons and achievements along the way. You’ll also learn how using “technical jargon” can turn people off from cyber security and why FUD - fear, uncertainty and doubt - might not be as efficient as we thought.
Ben and Lianne will also uncover the importance of diversity in cyber security, why it’s important to have non-technical people involved in the space in order to avoid that ivory tower mentality and how it’s vital to get the message out there to as many as possible.
Tune in for a conversation between these two industry leaders to stay ahead of the vigorous and evolving world of Cyber Security!
Check out Lianne Potter: LinkedIn and ASDA
Munya Hoto sits down with Ellie Warner, the Managing Director and Global Head Of People Security at Standard Chartered Bank.
Ellie talks about the expansive role security plays in the financial industry, particularly as it applies to customer data. They also discuss why we need to have collaborative conversations about things like risk culture and human behavior, Ellie’s advocacy for women in leadership roles, and so much more.
Make sure you don’t miss this conversation between two industry leaders in the cyber security space!
Check out Ellie Warner: LinkedIn and Standard Chartered Bank
Munya Hoto sits down with Molly McLain Sterling, a Global Security Culture Leader at Medtronic.
They talk about why trust is foundational to security awareness, how you can catalyze actual behavior change, and how to avoid getting distracted by semantics while focusing on reducing risk and keeping people secure.
Make sure you don’t miss this conversation between two industry leaders in the cybersecurity space!
Check out Molly McLain Sterling: LinkedIn and Medtronic
Oz Alashe, Founder and CEO of CybSafe, sits down with Lance Spitzner, director at SANS Institute. Lance is a titan in the human cyber risk space with more than 20 years of experience.
They talk about why we should focus more on the human cyber risk side and highlight that we can’t solve human risks by throwing technology at the problem. They also discuss the rise of attacks through email, phone calls and more recently, through text messages. Unless we focus on managing human risk, attackers will always have ways to go around the solutions we implement.
Check out Lance Spitzner: LinkedIn and SANS Institute
Ben Donaldson, Community Engagement Manager at CybSafe, sits down with Mads Howard, People Centred Security Lead at Sage.
They talk about what it means to lead a security team, the importance of culture within the team, and how to build a supportive team that knows why they do what they do. They also talk about how it’s your job as a security team to make cybersecurity relevant and engaging as it becomes an essential life skill.
Make sure you don’t miss this conversation between two industry leaders in the cyber security space!
Check out Mads Howard: LinkedIn and Sage
Behave, a CybSafe podcast, is the foremost cybersecurity podcast focused on human cyber risk.
Tune in for cutting edge discussions on a dynamic, evolving industry and to stay ahead of the shift from awareness to security behaviours and human risk quantification.