Hacked Off

Latest Episodes:

098. Javvad Malik: What Makes Effective Security Awareness Training? Jul 12, 2021

Show notes

Security awareness training is a common requirement in most businesses, but oftentimes it can be difficult to effectively teach employees how to recognise and respond to security risks. In this episode, we speak with Javvad Malik – Security Awareness Advocate at KnowBe4, co-founder of Security B-Sides London and cybersecurity blogger – about the variety of risks out there, the challenges of security awareness training, and how best to promote it. 00:28 What is a Security Awareness Advocate? 02:45 Challenges 11:14 Messaging 16:20 Importance of Security Champions 19:25 Minimising risk 21:45 Lesser-known types of phishing attacks 29:20 Promotion 38:10 The fear of embarrassment 40:40 Bias and the role of marketing Listening time: 46 minutes Host: Holly Grace Williams, MD at Secarma Guests: Javvad Malik, Security Awareness Advocate at KnowBe4 KnowBe4: www.knowbe4.com Connect with Javvad: www.linkedin.com/in/javvad/ Javvad on Twitter: www.twitter.com/J4vv4d Resources: Daniel Kahneman’s Ted Talk: https://www.ted.com/talks/daniel_kahneman_the_riddle_of_experience_vs_memory Our website: www.secarma.com Tweet us: www.twitter.com/Secarma Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

097. Dr Andrea Cullen & Lorna Armitage: Women in Cyber Jul 05, 2021

Show notes

Studies in recent years have revealed how little diversity there is within the cybersecurity industry, with women making up only 8% of the cyber workforce in the UK. In this episode, we speak with Dr Andrea Cullen and Lorna Armitage – co-founders of cyber training organisation CAPSLOCK – about the difficulties of getting into cyber, the need for accessibility and inclusivity in the industry, and recruitment advice for organisations and those wanting to get hired. 02:52 Obstacles for those wanting to enter the industry 09:33 Cyber skills 14:05 Building confidence 16:35 Breaking into cyber 21:32 Imposter syndrome and conquering fears 31:14 Finding yourself and your strengths 36:14 The importance of finding a good fit 39:21 Advice for those wanting to get into the industry and recruiters Listening time: 44 minutes Host: Holly Grace Williams, MD at Secarma Guests: Dr Andrea Cullen and Lorna Armitage, co-founders of CAPSLOCK CAPSLOCK: https://www.capslock.ac Connect with Andrea: https://www.linkedin.com/in/dr-andrea-c-57a29522/ Connect with Lorna: https://www.linkedin.com/in/lorna-armitage/ Our website: www.secarma.com Tweet us: www.twitter.com/Secarma Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

096. Natasha Taylor: The Future of Cybersecurity Events Jun 25, 2021

Show notes

Over the past year and a half, the event industry have had to adapt like never before, and this led to many events going online via webinars, digital roundtables, and large-scale virtual conferences. In this episode, we interviewed Natasha Taylor - Senior Conference Producer at DTX - about what makes a successful cybersecurity event, networking from home, and what the future of tech conferences could look like. 0.40 Preparation is everything 4:36 What makes a good panel or presentation? 8:50 It's good to disagree 14:55 Overcoming obstacles 17:20 Technical difficulties 22:30 Why you should give public speaking a go 26:00 Finding a balance 34:20 The future of networking Listening time: 45 minutes Host: Holly Grace Williams, MD at Secarma Guest: Natasha Taylor, Senior Conference Producer at DTX Europe & DTX Manchester DTX Europe: www.dt-x.io/europe/en/page/dtx-europe DTX 360: www.dtx360.io/live/en/page/home Connect with Natasha: www.linkedin.com/in/natasha-taylor-6969a0a9 Our website: www.secarma.com Tweet us: www.twitter.com/Secarma Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

095. Kathleen Booth: How Cyber Criminals Target Your Marketing Team Jun 18, 2021

Show notes

This week, Holly is joined by Clean.io's Kathleen Booth to talk about how the very methods that marketing teams use to bring in customers may also attract the unwanted attention of cyber-criminals. Whether it's third party plug-ins, digital ads, or even a stray tweet - hackers can corrupt your marketing department's efforts and attack your organisation. Thankfully, there are ways to balance robust business security without cutting your marketing team off at the knees. Listen to this week's interview for discussion around innovative yet secure marketing strategies, the importance of cybersecurity awareness training, and why marketers and security staff should be best friends. 0.20 About Clean.io 2:47 3rd party code: what are the risks? 13:00 Broaden your security awareness training 21:00 Marketing + Security 29:10 The attack surface 31:55 Good cyber hygiene 32:55 The keys to the kingdom 35:55 How it feels to be hacked Listening time: 42 minutes Host: Holly Grace Williams, MD at Secarma Guest: Kathleen Booth, VP Marketing at Clean.io Find out more here: www.clean.io Kathleen's podcast: https://inboundsuccesspodcast.com Connect with Kathleen: www.linkedin.com/in/kathleenslatterybooth Our website: www.secarma.com Tweet us: www.twitter.com/Secarma Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

094. Patricia Keating: How Crisis Spawns Innovation Jun 07, 2021

Show notes

This week, Holly speaks with Patricia Keating, founder of Tech Manchester - a start-up hub designed to upskill Manchester-based entrepreneurs, nurture their ideas, and connect them with investors. They discuss cybersecurity for start-ups, the tech business landscape in Manchester, and how virtual conferencing allows you to be in two places at once. 1:20 Working with start-ups 3:55 Is London the only tech hub? 5:30 Common misconceptions 7:55 Mentoring tech business founders 12:00 What does "failing" mean? 16:00 Work-life balance 22:35 Crisis spawns innovation 30:05 Working from home means working anywhere 34:00 Sharing the journey Listening time: 36 minutes Host: Holly Grace Williams, MD at Secarma Guest: Patricia Keating, Founder of Tech Manchester Find out more here: www.techmanchester.co.uk Patricia's podcast: www.podcasts.apple.com/gb/podcast/fastforward/id1438089653 Our website: www.secarma.com Tweet us: www.twitter.com/Secarma Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

093. Dr Dan Prince: Teaching the Next Generation to Think Differently May 28, 2021

Show notes

This week, Holly delves deeper into the topic of security higher education and training with Dr Dan Prince - Senior Lecturer in Security and Protection Science at Lancaster University's School of Computing and Communications. Together, they discuss the challenges that the mentors of today have when teaching the security experts of tomorrow, how to prepare students for threats that may not exist, and how thinking differently may be the key to keeping one step ahead of threat actors. 1:00 Preparing the next generation 4:30 Creating the framework for a Masters in security 9:55 Where is the line? 17:15 Know your enemy 20:40 Working with the NCSC 29:30 Bridging the disconnect 34:00 Taking notes from R2-D2 36:00 How does Lancaster University engage with companies? Listening time: 43 minutes Host: Holly Grace Williams, MD at Secarma Guest: Dr Dan Prince, Senior Lecturer at Lancaster University Contact Dan here: www.linkedin.com/in/drdanielprince You can find more info about Lancaster University's security research centre here: www.lancaster.ac.uk/scc Our website: www.secarma.com Tweet us: www.twitter.com/Secarma Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

092. University of Salford & Tanium: Higher Education's Security Challenges May 21, 2021

Show notes

Recently, the University of Salford announced their partnership with Tanium, to help the education institution improve their security against an increase of attacks. Universities have been high up on the target list for threat actors over the course of the pandemic, and these nefarious parties aren't slowing down anytime soon. In this episode, Holly interviews Mark Wantling - the University of Salford's CISO, as well as Chris Vaughan of Tanium to understand more about their partnership and trade tips on protecting the education sector from cyber-attacks. 1:00 Security challenges in higher education 3:40 Joiners, movers, and leavers 8:30 Are the basics really all that basic? 13:10 How Covid-19 has pushed digital transformation 15:00 Visibility is key 22:00 Your whole security team vs a single pentester 33:00 Are universities sitting ducks for cybercriminals? 37:45 Should you pay the ransom? 40:00 Stop calling it a ransomware attack 45:50 Are you setting the bar high enough? 57:30 Timing is everything 59:00 Closing remarks Listening time: 60 minutes Host: Holly Grace Williams, MD at Secarma Guests: Mark Wantling, CISO at the University of Salford Chris Vaughan, Technical Account Manager at Tanium More info on Salford & Tanium's partnership: www.tanium.com/customers/university-of-salford www.tanium.com/press-releases/tanium-helps-protect-the-university-of-salford-from-surge-of-cyberattacks Contact Mark here: www.linkedin.com/in/mark-wantling-7b149690 More about the University of Salford: www.salford.ac.uk Contact Chris and other Tanium reps here: www.tanium.com Our website: www.secarma.com Tweet us: www.twitter.com/Secarma Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455 NCSC approved security tips: www.ncsc.gov.uk/collection/10-steps

091. Evan Jones: Demystifying Security Architecture May 17, 2021

Show notes

Although our specialty is penetration testing, there's a wide variety of interesting roles available within the security industry. In this episode, Holly sits down with Evan Jones of Complete Cyber, to explore the ins and outs of security architecture. Over the course of the conversation, they discuss the skills necessary to become a security architect, the benefits of using a pen and paper to map out possible threats, and Evan also explains how solution architecture is a lot like a Rubik's cube... somehow. 0:35 Transferring your skills 3:30 What is a security architect? 15:00 What makes a good security architect? 17:00 Dear customers, help us help you 30:30 Threat modelling with a pen and paper 44:20 Very naughty people and adapting to your audience 46:00 The 6th face of the cube Listening time: 50 minutes Host: Holly Grace Williams, MD at Secarma Guest: Evan Jones, Lead Security Architect at Complete Cyber Find out more here: www.completecyber.co.uk www.twitter.com/completecyber Our website: www.secarma.com Tweet us: www.twitter.com/Secarma Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

090. Jonathan Slater: Start-ups and Starting Again: The Benefits of Reskilling Apr 30, 2021

Show notes

In last week's episode we talked about how security professionals can leverage their skills to get into cyber, but how do you obtain those skills in the first place? Enter Jonathan Slater, co-founder of CapsLock and our guest for today. In this episode, we discuss his journey from nuclear, to recruitment, to co-founding a disruptive education model that's designed to help everyone from bus drivers to web developers gain a qualification - and most importantly, employment - in cybersecurity. We also take a deep dive into how candidates can make themselves more attractive to hiring managers, diversity in cyber, and the benefits of starting all over again. 3:15 Stepping down to step up 5:50 Roles to work towards 14:00 Group projects 20:00 Communication, communication, communication 22:30 Increasing your employability 26:15 Sidebar - what is DevSecOps? 31:40 Diversity in cyber 35:15 Reskilling recommendations 36:50 Different roles, sectors, and company sizes 41:30 Standing out from the crowd Listening time: 50 minutes Host: Holly Grace Williams, MD at Secarma Guest: Jonathan Slater, Co-founder of CapsLock Find out more here: www.capslock.ac Our website: www.secarma.com Tweet us: www.twitter.com/Secarma Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

089. Jay Jay Davey: Getting Into Cybersecurity Apr 23, 2021

Show notes

In this episode, Holly interviews Jay Jay Davey - SOC Analyst at CyberClan and founder of NoxCyber - a one stop page of career advice for aspiring cyber security professionals, with resources to help you get into the industry. We spoke with him about the different routes into cyber, as well as what to do once you're in. Listen to this episode for career advice, CV tips, and why explaining what networks are to your parents could lead you being a CEO's shoulder to cry on one day. 1:05 About NoxCyber 2:40 Getting into cybersecurity 7:15 Getting hired 13:05 The different roles in cyber 22:30 Are mentors vital? 26:35 Public speaking 37:00 Develop your writing skills and promote yourself 40:10 The importance of emotional intelligence in cyber Listening time: 43 minutes Host: Holly Grace Williams, MD at Secarma Guest: Jay Jay Davey, founder of NoxCyber Find Jay Jay here: www.noxcyber.co.uk www.linkedin.com/in/noxcyber Our website: www.secarma.com Tweet us: www.twitter.com/Secarma Events: www.eventbrite.co.uk/o/secarma-ltd-31129456455

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected