Future Secured - Shaping A Future-Proof Digital Society podcast

Future Secured - Shaping a Future-Proof Digital Society

35:00

The healing power of fitness goes far beyond physical benefits—for today’s guest, it’s a form of self-expression and a celebration of what the body can do. In this episode, host Nora McInerny sits down with fitness personality Ivylis Rivera, who shares her deeply personal journey of navigating life with Chronic Migraine while holding onto her passion for movement. Ivylis opens up about the struggle of staying active while facing the fear of triggering a headache or migraine attack and the resilience it takes to keep pushing forward—a resilience that carried her through the challenging journey of finding a Chronic Migraine treatment plan that worked for her. Join Nora and Ivylis as they explore the concept of “soft living,” a philosophy Ivylis embraces—staying active, listening to your body, and building trust in oneself. Click here for Product Information, including Boxed Warning and Medication Guide, or visit https://abbv.ie/prescribing_info See omnystudio.com/listener for privacy information.…

Future Secured - Shaping a Future-Proof Digital Society

Поширити

Головна серій•Feed

Future Secured brings you in-depth conversations with Australian and global cyber security leaders, founders, CEOs, and co-founders.
Hosted by Jason Murell and Tom Finnigan, each episode delves into the personal journeys of these experts as they navigate the challenges of building and scaling successful cyber security businesses.
From critical industry issues to hard-learned lessons, the podcast explores the competitive global market and offers valuable insights on how to start, grow, and succeed in the cyber security space.
Join us as we uncover the stories behind the industry's brightest minds and build a knowledge base to help aspiring cyber security entrepreneurs thrive.

17 епізодів

#Tech #Future Secured

updated 4 дні тому

Поширити

Головна серій•Feed

17 епізодів

#Tech #Future Secured

Усі епізоди

Future Secured - Shaping a Future-Proof Digital Society

1
Verizon Warning - The Real State of Cyber Security. Future Secured Ep 38 48:51

4 дні тому48:51

48:51

What do C-suites misunderstand most about cyber security? Robert Le Busque, Regional VP for Asia Pacific at Verizon Business Group, joins Tom Finnigan and Jason Murrell to talk about the real state of cyber readiness and the costly gaps most leaders don’t see until it’s too late. From his background in classical music to running cyber simulations with Fortune 500 execs, Rob shares candid insights from decades on the front lines of digital infrastructure, cyber strategy and crisis response. 🚨 His warning? The threats are real, but the fundamentals still aren’t in place. And the next breach likely won’t be a tech failure it’ll be human. 🔑 Key Takeaways “It’s not if, it’s not when, it’s how.” C-suite leaders must shift their mindset to focus on response readiness, not just threat anticipation. Ransomware isn’t fading. Verizon data shows 51% of breaches now involve ransomware and attackers are combining encryption with exfiltration. Preparedness is a muscle. Tabletop exercises and realistic simulations remain the gold standard for executive cyber readiness. The basics still trip us up. Weak passwords, MFA gaps, and phishing still dominate breach root causes, decades later. Human behaviour is the lowest tide mark. Targeting individuals continues to be the most successful attack vector. Cyber criminals run like corporations. These are not hoodie-wearing loners; they’re structured, profitable and evolving constantly. Real-time posture data is the next frontier. Snapshot audits aren’t enough. Continuous risk insights will reshape board-level cyber conversations. 📢 Soundbites “Amateurs practice until they get it right. Professionals practice until they can’t get it wrong.” “You never rise to the occasion. You default to your level of preparedness.” “The cyber threat that worries me most? Human behaviour.” “Tabletops are good. But real-world drills show what really breaks.” “Criminals only need to be right 1% of the time.” “It unravelled really quickly when it became real.” “A snapshot in time isn’t good enough.” “Most SOCs are full of tools, very few outcomes.” “The threat model isn’t broken, so they’re not trying to fix it.” “Cyber security is everyone’s job, but leadership must set the tone.” ⏱ Chapters 00:00 – Welcome & Context on APAC Cyber Landscape 02:27 – Rob’s Unlikely Path: From Music to Technology 07:08 – COVID, Digital Acceleration & Leadership Lessons 10:35 – Cyber Threats in APAC: What Keeps Execs Awake 15:50 – Inside Verizon: Global Infrastructure at Scale 18:57 – The Evolving Nature of Ransomware 22:34 – Real-Time Readiness: How C-Suites Should Prepare 27:30 – Why Simulations Beat Tabletop Exercises 33:03 – Continuous Risk vs One-Off Audits 36:04 – Why People Still Matter More Than Tech 39:05 – Bridging the Cyber Skills Gap 41:30 – AI Threats vs Old-School Scams 43:59 – The Basics Still Aren’t Basic Enough 46:50 – Final Advice to Cyber Leaders…

Future Secured - Shaping a Future-Proof Digital Society

1
Bug Bounties, The Wanted Poster For Ethical Hackers - Future Secured Episode 35 51:30

8 днів тому51:30

51:30

In this episode, Casey Ellis, founder of Bugcrowd and a pioneer of the crowdsourced cyber security movement, shares the hard-earned lessons from building a category-defining company. Casey pulls back the curtain on the real startup grind: from bootstrapping Bugcrowd into a global force to navigating leadership pressures, health crises and building resilient teams. He lays bare the hidden truths of entrepreneurship, scaling cyber security innovation, and why humanising hackers is essential to the future of digital defence. Whether you're a CISO, a cyber founder, or a leader preparing for the next wave of cyber security threats, Casey's insights will resonate deeply and possibly change the way you think about trust, leadership, and resilience. 🛡️ Core Themes and Big Takeaways Crowdsourcing Cyber Defense: Why tapping global ethical hackers outpaces traditional security models. Entrepreneurial Resilience: 17+ years to "overnight success" — Casey's brutal honesty on what it really takes. Leadership Evolution: From "doing everything" to mastering the art of delegation and trust. Health and Hustle: Ignoring health nearly cost Casey his life and he’s not holding back on lessons learned. Culture Over Everything: Building trust-first teams that scale cybersecurity innovation. The Human Side of Hackers: Why reframing the hacker narrative is essential for modern security strategies. 🧠 Soundbites You Can’t Miss 🔥 "You don't get a pass on your health, no matter how 'busy' you are." 🔥 "Building a company is finding where your Venn diagrams overlap, not forcing them." 🔥 "Double down on your strengths. Delegate the rest without guilt." 🔥 "If you're working on your one weakest skill, you're ignoring your ten strongest." 🔥 "Founders should be irrationally passionate about the problem they're solving, it has to look crazy to others at first." 🔥 "Humanising hackers isn't optional. It’s critical if we want cybersecurity to evolve." 🔥 "There’s no such thing as 100% secure, the question is, how do you stay ahead?" ⏱️ Chapters 00:00 - Intro to Casey Ellis and Bugcrowd’s origins 02:08 - How the idea for crowdsourced security was born 06:04 - Entrepreneurial lessons from the GFC, COVID, and everything in between 10:01 - The CEO’s real job: doing less, leading more 14:00 - Ignoring health almost cost everything 18:05 - Timing your scale-up: when, not if 22:05 - How to build and trust a world-class cyber team 28:14 - Why delegation makes or breaks startups 32:45 - Strengths vs Weaknesses: play to your natural edge 34:50 - Capital raising and the "midpoint" you need to find 39:47 - Why culture beats strategy every time 43:39 - Changing perceptions: Hackers as allies 46:35 - The defender’s dilemma — and how to win 51:50 - What's next for cybersecurity in a chaotic world…

Future Secured - Shaping a Future-Proof Digital Society

1
This Isn’t a Front Door. It’s a Vault Cloud - Future Secured Episode 36 42:31

8 днів тому42:31

42:31

In this episode, Tom Finnigan and Jason Murrell sit down with Rupert Taylor-Price, CEO of Vault Cloud, to dive into what it takes to build sovereign cloud infrastructure that doesn’t just host data, it protects national secrets. Rupert shares his journey from developer to hyperscale cloud builder, the decision to own source code, and why Vault refuses to compromise on security. The conversation explores the future of AUKUS Pillar Two, how government funding is shaping sovereign tech, and why “building a vault, not a front door” isn’t just a metaphor, it’s an engineering blueprint. Rupert also unpacks the intersection of AI, national security and trust and why Australia is uniquely positioned to lead in a shifting geopolitical landscape. Takeaways Owning the source code is foundational to true cloud security. Vault Cloud’s strict, non-negotiable controls are designed for secrets, not convenience. Usability and security are always in tension and Vault leans toward protection. Sovereign capability is becoming a national security imperative. AI brings both risk and opportunity to secure infrastructure. Vault Cloud has had zero customer breaches, a rare feat. AUKUS opens a trillion-dollar pathway for tech collaboration across three nations. Pillar 1 is about military capability; Pillar 2 is about technology interoperability. Engineering a truly sovereign, multi-nation cloud is complex but critical. Australia’s agility makes it well-positioned in the AI and cyber arms race. Interoperability between nations requires aligned standards, not just alliances. Government investment is essential to enable secure sovereign tech. Different sectors demand different security levels, there is no one-size-fits-all. Critical infrastructure and defence require zero-trust, high-bar security controls. Cloud built for convenience will never meet the bar for classified systems. Secret cloud environments come with trade-offs, but for some, they’re necessary. Psychological data, social records, and defence systems need maximum protection. Global shifts in AI and trade are creating competitive openings for Australia. Vault Cloud’s strategy is built around foresight, not just compliance. Titles This Isn’t a Front Door. It’s a Vault. Building Australia’s Secret Cloud Engineering Sovereignty at Hyperscale AUKUS, AI & the Vault Standard From Source Code to National Security Sound Bites "We build vault doors in the physical analogy." "Vault has never had a customer breach of its system." "You don’t turn MFA off. There is no switch." "We wanted to own the source code of this platform." "Sovereignty isn’t a feature, it’s a foundation." "It’s quite a feat to get three countries aligned." "This is about building infrastructure that nation-states can trust." "There’s an opportunity to blend AI models for better outcomes." "Every time you see these changes, it creates opportunity." Chapters 00:00 – Introduction to Vault Cloud & Sovereign Infrastructure 01:17 – Rupert’s Journey: From Developer to National Cloud Provider 04:28 – Building Secure Systems for Government Use 06:00 – Balancing Protection vs. Usability in Cloud Architecture 11:19 – The Case for Sovereign Capability in Tech 14:40 – AI, Security & the Real-World Risks Emerging 21:13 – Demystifying AUKUS Pillar Two 24:02 – Cross-Nation Tech Collaboration Challenges 27:31 – Inside Government Investment in Sovereign Cloud 30:33 – Building a Classified Cloud for AUKUS 33:31 – What “Secret Cloud” Really Means in Practice 39:59 – Chaos, Geopolitics & Why Australia Has the Advantage…

Future Secured - Shaping a Future-Proof Digital Society

1
Never Go Full Cyber - Future Secured Episode 37 40:09

8 днів тому40:09

40:09

Why Basics Beat Buzzwords with Edward Farrell In this episode of Future Secured, Tom Finnigan and Jason Murrell sit down with Edward Farrell, CEO of Mercury Information Security Services, to talk about why cyber security has lost its way—and what it will take to fix it. Known for his no-nonsense perspective, Edward argues that the industry is obsessed with brain surgeons when what it really needs are more good GPs. We explore how hype, inflated job titles, and obsession with advanced tools are pulling focus from the practical, day-to-day security work that actually reduces risk. With experience spanning governance, pen testing, and training, Edward shares war stories from the field, exposes the hidden dangers of motivated amateurs, and explains why apprenticeship models—not certifications—might be the real fix for our cyber talent shortage. If you're a founder, CISO, engineer or just trying to make sense of this confusing industry, Edward’s take will help you separate the meaningful from the meaningless in cyber security today. 🎧 Key Takeaways: Stop chasing shiny tools. Focus on basics that protect your business. Cyber security needs apprentices, not just experts. Human bias is a bigger threat than hackers. Too many businesses are ‘going full cyber’—and getting burned. Insider threats are the biggest risk no one talks about. It’s not about a silver bullet—it’s about trade-offs. 🗣️ Soundbites: "Never go full cyber." "A motivated idiot is a dangerous thing." "We’re obsessed with brain surgeons and ignore the GPs." "Startups catch fire before they secure the house." "We reward enthusiasm over expertise—and that’s a problem." ⏱️ Chapters: 00:00 – Why You Should Never Go Full Cyber 04:54 – Redundancy, Risk and the State of Cyber 10:05 – The Hype Cycle vs Real Problems 14:59 – Apprenticeship Models in Cyber 19:56 – Clarity in Roles, Titles and Tools 24:03 – Danger of Enthusiasts Without Experience 26:58 – Why Storytelling Still Wins in Cyber 30:42 – Australian Culture vs Silicon Valley Speed 34:46 – Basic Security Wins, Always 39:25 – Insider Threats: The Silent Killer 45:00 – Cyber Drills and Missing Basics…

Future Secured - Shaping a Future-Proof Digital Society

1
🎙️ Future Secured Episode 34: The Fifth Domain is Cyber Warfare 44:13

5 weeks тому44:13

44:13

In this hard hitting episode of Future Secured, Jason Murrell and Tom Finnigan sit down with Matt Wilcox, Founder and CEO of FIFTH DOMAIN, to unpack what it really takes to train and equip the cyber warriors of today. With a unique background, Matt brings a rare perspective to cyber training, focusing on human performance, immersive learning, and the adversarial mindset needed to win in the fifth domain: cyber warfare. This is more than a conversation about SOCs and startups. It’s a deep dive into how Australia must rethink capability, build sovereign resilience, and move beyond tick box security into real, live-fire readiness. From government to legal, defence to finance, if your organisation holds sensitive data or critical infrastructure, this is essential listening. 🧠 Key Takeaways: 🎥 Matt’s unconventional journey from creative industries to cyber security 🧠 Cyber is a human problem before it’s a tech problem 🎯 Understanding your adversary is the key to effective defence 🛡️ Cyber warfare is real and most organisations are not prepared 👩‍💻 Hidden talent exists inside every company, if you know how to find it 🧪 Capture-the-Flag and experiential learning outperform traditional training 💥 Failures in business and ops offer the best growth opportunities 💼 Authenticity attracts the right team, camouflage leads to culture failure 🔐 Legal firms are highly vulnerable due to legacy behaviours and secrecy 🇦🇺 Australia’s startup ecosystem lacks the support to turn innovation into impact 🛰️ Sovereign capability isn’t optional, it's a national security imperative ⚠️ The next major cyber attack could be devastating and it’s not “if”, but “when” 🗣️ Sound Bites "Cyber exists because there is an adversary." "You don’t need 100 people—you need 5 good ones with the right mindset." "Authenticity attracts talent. Camouflage repels it." "You can’t outsource risk." "It’s not business as usual anymore." "Cyber warfare is a wake-up call to society." "We need to back our own businesses or we’ll keep losing them overseas." ⏱️ Chapters 00:00 — Introduction to Cyber Warfare Training 09:12 — Human Capability vs. Tech Dependency 16:30 — Cyber Warfare: Thinking Like Your Adversary 20:54 — Finding Hidden Talent Through Real-World Testing 24:39 — The Startup Reality: Lessons from the Frontline 29:39 — Hiring for Mission, Not Just Skill 31:15 — Building Functional SOCs Across Diverse Industries 36:00 — The Importance of Certainty and Clarity in Operations 40:07 — Rising Geopolitical Threats and What They Mean for Australia 44:05 — Where Australia’s Cyber Ecosystem Must Step Up 48:00 — Final Thoughts: Innovation, Sovereignty, and the Call to Action 🔗 Resources 🌐 FIFTH DOMAIN Website - www.fifthdomain.pro…

Future Secured - Shaping a Future-Proof Digital Society

1
Inside Australia’s Cyber Crisis: The Data, The Gaps, The Wake-Up Call - Future Secured EP 33 25:24

6 weeks тому25:24

25:24

In this special episode of Future Secured, Tom Finnigan and Jason Murrell unpack the newly released Australian Cyber Network State of the Industry 2024 report, a landmark deep dive into the shape, size and urgency of Australia’s cyber security sector. 📥 Download the full ACN report: https://stateoftheindustry.auscybernetwork.au Jason, who also chairs the Australian Cyber Network, walks through the key insights: the eye-watering rise in ransomware, the growing, but still under-resourced, cyber workforce, gender diversity gaps, sovereign capability challenges, and the widening disconnect between government strategy and ground truth. More than just numbers, this conversation is a candid, behind-the-scenes look at what’s working, what’s broken, and where Australia must act now to avoid being left behind. 🧠 Key Takeaways 🛑 69% of Australian businesses were hit by ransomware in 2024, and 84% paid 💰 The average ransom paid was $1.35 million 👥 The cyber workforce hit 137,000 people, but demand still far outpaces supply 👩‍💻 Female participation jumped from 17% to 25%—a promising trend 🎓 Security science enrolments surged 186%, but readiness remains unclear 🇦🇺 97% of Australian cyber companies are locally owned, yet most startup funding comes from overseas 📉 Regional gaps remain: WA generated $500M in cyber GVA but has only 17 local firms 📢 Cyber security strategy lacks transparency, inclusion, and public engagement 🧯 Cyber readiness must become as normalised as OH&S or fire safety in every workplace 🗣️ Sound Bites "Cybersecurity isn’t just a tech issue. It’s a kitchen table issue." "You wouldn’t trust a pilot who’s never flown a sim. But we do in cyber." "Culture eats strategy for breakfast—especially when it’s hidden behind closed doors." "The ecosystem is fragile. Founders don’t want handouts—they want a fair shot." "We can’t secure the nation in secret. We need public benchmarks and open engagement." ⏱️ Chapters 00:00 — Welcome & Intro 01:37 — What the 2024 ACN Report Reveals 03:00 — Ransomware Stats & SME Underreporting 07:35 — Cyber Workforce Growth & Diversity Breakdown 11:57 — Education, Enrolment & Skills Readiness 13:22 — Startups, Funding & Sovereign Capability 15:49 — State-by-State Capacity & WA's Undersupply 17:57 — Policy, Strategy & Transparency Gaps 22:29 — The Path Forward: Culture, Urgency, and Basic Hygiene 27:00 — Download the Full Report + Call to Action 🔗 Resources 📥 Download the full ACN report: https://stateoftheindustry.auscybernetwork.au…

Future Secured - Shaping a Future-Proof Digital Society

1
🎙️ Future Secured Episode 32: Empowering the Next Gen with Cyber Skills 45:15

7 weeks тому45:15

45:15

Guest: Ikram Akbar, Founder & CEO, Hackers Jack Hosts: Tom Finnigan & Jason Murrell In this episode of Future Secured, we sit down with Ikram Akbar, the visionary founder of Hackersjack, an edtech platform combining cyber security, psychology, and pedagogy to teach kids how to stay safe online. From rejecting a PhD to building a mission-driven startup, Ikram shares the human story behind his purpose: protecting children through proactive digital education. 🔐 He reveals why most cyber education efforts fail by working in silos and how his spiral curriculum, structured from kindergarten to Year 12, creates long-term resilience in kids. 🇺🇸🇦🇺 Ikram also unpacks the startup grind, why Australia needs cultural reform to support cyber innovation and why the US market became essential for traction. From AI threats and deepfakes to the emotional toll of internet exposure, this episode is a powerful call to action for parents, educators, and cybersecurity founders alike. 🔑 Key Takeaways Hackersjack was born from a personal parenting moment and scaled through deep research across tech, education, and psychology. Cyber education must be age-specific, emotionally aware, and rooted in practical engagement. The stigma around cyber security makes it unappealing to kids – Hackersjack flips that by making it fun and relatable. Parents must become co-educators in digital safety – starting with open conversations, not control. Australia’s startup ecosystem is risk-averse – US investors are more culturally aligned to back cyber education innovation. Cultural awareness and mental health are deeply intertwined with digital safety. The ultimate goal: build a cyber-resilient generation by embedding digital hygiene early in schools. 🗣️ Sound Bites “Kids spend so much time online.” “Cybersecurity suffers from a stigma.” “Start talking to your kids.” “You need to think about the USA from day one.” “Culture eats strategy for breakfast.” 🕰️ Chapters 00:00 — Introduction to Hackersjack 02:10 — The Genesis of Hackersjack 05:55 — Challenges in Cyber Education 09:35 — Parental Guidance in Cyber Safety 14:15 — The Role of Community in Cyber Education 17:13 — Navigating the US Market 22:16 — Lessons for Australian Entrepreneurs 24:35 — Navigating Cybersecurity Challenges in Australia 26:02 — Cultural Shifts and Mental Health Awareness 27:37 — Addressing Cyberbullying and Digital Safety in Schools 30:11 — Building Cybersecurity Awareness from a Young Age 33:34 — The Role of AI in Cybersecurity Education 36:29 — Fostering Open Communication Between Parents and Children 39:09 — Creating a Safe Digital Environment for Kids 42:07 — Bridging Generational Gaps in Digital Literacy 👤 About the Guest Ikram Akbar is the founder and CEO of Hackersjack, a platform revolutionising child-focused cyber security education. With a background in mathematics, statistics, and computing, Ikram’s work spans startups, AI, and blockchain, but his mission remains rooted in one goal: equipping children to thrive safely in a digital world.…

Future Secured - Shaping a Future-Proof Digital Society

1
Episode 31: “Culture, Compliance & Cyber Wake-Up Calls” Featuring Ian Yip – Founder & CEO, Avertro 43:58

8 weeks тому43:58

43:58

In this episode of Future Secured , Tom Finnigan and Jason Murrell sit down with Ian Yip, founder of Avertro — a platform that bridges the gap between cybersecurity operations and executive governance. Together, they explore: Why cybersecurity still isn't treated as a business priority. The rise of “reasonable steps” as a legal standard for boards. How Singapore is outpacing Australia in national cyber readiness. What founders need to know before launching in the U.S. Why RSA is more than a conference — it’s a battleground for visibility. This is a candid and insightful discussion about cyber leadership, regulation, government shortfalls, and the culture shifts needed to secure Australia’s digital future. 🔑 Key Takeaways: Cybersecurity is a business advantage — if it’s built from day one. Regulation is often the only driver of security investment. “Reasonable steps” is fast becoming a legal and board-level standard. Government funding sends cultural signals — and right now, cyber isn’t a vote-winner. National cyber drills (like Singapore's) show what's possible without big budgets. Startups must be assertive, focused, and physically present in the U.S. to win market trust. RSA is overwhelming — but the right prep unlocks outsized value. 📢 Sound Bites: "Money talks — we all know that." "Cybersecurity is just one of many risks competing for board attention." "We were missing that in cyber." "You have to show up to be taken seriously." "We need to lead the way in this region." ⏱ Chapters: 00:00 – Welcome & Ian’s Background 02:52 – Building Avertro from the Boardroom Up 06:02 – Why “Reasonable Steps” Now Matter 09:04 – Cybersecurity as Legal & Leadership Risk 14:52 – Culture, Policy & the Missing Federal Budget Signal 20:00 – What Singapore Got Right: A National Cyber Drill 26:00 – What Australia Still Gets Wrong: Siloed Government 29:30 – RSA Prep: How to Get the Most from San Francisco 36:00 – Breaking into the U.S. Market as an Aussie Startup 42:00 – Community, Credibility, and the Power of Showing Up 📌 Connect With Us: 💬 Join the conversation on LinkedIn 🎥 Subscribe to our YouTube for more insights 🌏 Learn more at murfin.au…

Future Secured - Shaping a Future-Proof Digital Society

1
🎙️ Future Secured Episode 30: Every Company Has a Red Team. You Just Might Not Own Yours. 54:11

9 weeks тому54:11

54:11

Red teaming isn’t new, but it is still wildly misunderstood. In this episode of Future Secured, we’re joined by Remy Coll, Founder of Redacted, to unpack what red teaming really means, why most organisations still don’t use it effectively, and how it could be the difference between surviving a breach and being blindsided by one. Despite the buzz around cyber testing, many businesses continue to rely solely on penetration testing, missing the bigger picture. Red teaming goes further—testing not just your tech, but your people, processes and response capabilities under real-world pressure. As Remy puts it, “Every company has a red team. You just might not own yours.” From SOC empowerment and business continuity to the growing need for cyber education in vulnerable communities, this episode challenges our assumptions about what it really takes to be cyber ready. Key Takeaways: Red teaming tests people, processes, and tech, not just IT systems. Most businesses have never tested their response plans in real conditions. Great security is found at the nexus of process, technology, and people. Crisis response skills—like those used in medicine or defence—translate well into cyber. Cross-skilling from diverse sectors can strengthen cyber teams. Red teaming uncovers unnecessary spend on ineffective tools and licenses. Every business needs to know what’s reasonable in their security obligations. Vulnerable groups—like the elderly and survivors of abuse—need better cyber education. Sound Bites: 💬 “Every company has a red team. You just might not own yours.” 💬 “No plan survives the first shot. So take the shot yourself.” 💬 “Protection is only part of the story—response is where you win or lose.” 💬 “The only way to know your plan works is to test it.” 💬 “We need to bring cyber down to the people who need it most.” Chapters: 00:00 – Welcome and Introduction 03:00 – Remy’s Cyber Journey and Starting Redacted 06:30 – The Culture of Red Teaming vs. Pen Testing 10:00 – Real-World Response: Testing Plans Before an Attack 14:00 – Empowering SOCs to Act Fast 17:00 – Cross-Skilling and Crisis Skills in Cyber 21:00 – Red Teaming and Supply Chain Security 28:00 – What’s Reasonable? Cyber Accountability in the Law 34:00 – Metrics, Frameworks and the Real Gaps 43:00 – Building Red Team Capability Internally 46:00 – Protecting the Vulnerable: A Broader Cyber Mission…

Future Secured - Shaping a Future-Proof Digital Society

1
Cracking the Code: Human Factors in Cyber Incident Response - Future Secured Episode 21 47:00

14 weeks тому47:00

47:00

In this episode of Future Secured, hosts Tom Finnigan and Jason Murrell are joined by Kylie Watson, Head of Security – APJ MEA (Asia Pacific, Japan, Middle East and Africa) DXC Technology's, to explore the human side of cyber security and incident response. With over 30 years of experience spanning military service and consulting, Kylie shares her unique perspective on managing high-pressure incidents, addressing biases in decision-making, and fortifying critical infrastructure in the face of cyber warfare. From the challenges faced by SMEs to the pressing need for diversity in cybersecurity, this episode offers actionable insights for navigating the ever-changing digital landscape. Takeaways: Kylie Watson’s journey: Military background and decades of cyber security expertise. Human factors: Understanding biases and their impact on decision-making in cyber incidents. Foundations of cyber security: Basic practices are still under-implemented across industries. Critical threats: Cybercrime and warfare demand protection of critical infrastructure. SME focus: Practical guidance for small and medium businesses to build resilience. VUCA model: Leveraging frameworks for decision-making under pressure. Diversity matters: Female representation enriches cyber security perspectives. Awareness is key: Training and preparation are essential to prevent and respond effectively. Sound Bites: "Cyber is a war game." "Human biases play a huge role in how we handle cyber incidents." "Small businesses often underestimate the real impact of cyber threats." Chapters: 00:00 - Introduction to Cyber Security and Kylie's Journey 09:24 - High-Pressure Incident Response in Cyber Security 14:30 - Foundational Cybersecurity Practices 18:04 - The Fifth Frontier of War: Cybersecurity and National Security 23:32 - Human Biases in Cyber Incident Management 23:59 - Understanding Cybersecurity Threats for SMEs 24:56 - Decision-Making Under Pressure: The VUCA Model 30:25 - Increasing Female Representation in Cybersecurity 39:49 - Practical Cyber Security Tips for Small Businesses…

Future Secured - Shaping a Future-Proof Digital Society

1
What Keeps A Cyber Startup Alive When The Odds Are Stacked Against It? Future Secured Ep 23 43:58

14 weeks тому43:58

43:58

"Startups die when people stop believing," says Vaughan Shanks, Co-Founder and CEO of Cydarm Technologies. In the engaging latest of Future Secured, hosted by Tom Finnigan and Jason Murrell, Vaughan opens up about the lessons he’s learned navigating the complex cyber security startup landscape. From the early days of fascination with public key cryptography to leading one of Australia’s most innovative cyber security companies, Vaughan shares his insights into resilience, growth, and the belief that sustains startups. Key discussion points include: - Resilience in entrepreneurship: "It’s often darkest before the dawn." Scaling with strategy: Delivering value instead of just adding headcount. - Navigating today’s funding dynamics: What’s changed in the post-COVID landscape. - Political impact on cybersecurity: How regulations and government support shape the industry. - Cydarm’s vision for 2025: Growth focused on expanding the customer base and refining their mission. - Whether you’re a cyber security professional, an entrepreneur, or someone interested in the intersection of technology and resilience, this episode is full of actionable advice and industry insights. Takeaways: - Vaughan’s early fascination with public key cryptography set the course for his career. - Transitioning from government to entrepreneurship shaped his unique leadership perspective. - Startups thrive on resilience and belief—both internal and from stakeholders. - Scaling a startup means prioritising value over just increasing headcount. Post-COVID funding dynamics have reshaped opportunities in cybersecurity. - The political landscape significantly impacts cybersecurity startups in Australia. - Cydarm’s focus for 2025 is sustainable growth and expanding its customer base. Sound Bites: "Startups die when people stop believing." "It’s often darkest before the dawn." "Scaling isn’t about headcount—it’s about delivering value." "We need more support from government to compete globally." "Resilience isn’t optional—it’s foundational for entrepreneurs." Chapters: 00:00 Introduction to Vaughan Shanks & Cydarm Technologies 02:53 Early Inspirations in Cybersecurity 05:56 Professional Experience and Transition to Entrepreneurship 08:59 Founding Cydarm: Lessons Learned 12:03 Resilience, Belief, and the Lifeblood of Startups 15:01 Sales, Marketing, and Building a Brand 17:54 Scaling Smartly: Growth Beyond Headcount 22:34 The Importance of Commitment and Mental Resilience 27:32 Sidearm’s Growth and Market Positioning 33:22 Cybersecurity’s Political Landscape and Funding Challenges 39:32 Strategic Goals for Cydarm in 2025…

Future Secured - Shaping a Future-Proof Digital Society

1
Inside Australia’s Cyber Frontline with LTGEN Michelle McGuinness - Future Secured EP 26 33:01

14 weeks тому33:01

33:01

LTGEN Michelle McGuinness, Australia’s National Cyber Security Coordinator, joins hosts Tom Finnigan and Jason Murrell and reflects on her first year in the role, sharing insights on the evolving cyber threat landscape, major legislative changes, and government-industry collaboration to strengthen Australia’s cyber defences. The conversation highlights the importance of culture in cyber security, the challenges of engaging small and medium businesses, and why information sharing and national coordination must improve. McGuinness also discusses the Cyber Security Act, the need for practical support for businesses, and how building a resilient workforce with diverse talent is key to long-term national security. With cyber threats evolving rapidly, the message is clear—Australia must move from playing catch-up to leading the charge. Takeaways: ✔️ Cyber security is a national priority, not just an IT issue. ✔️ The Cyber Security Act is a major step forward in Australia’s cyber defences. ✔️ Cultural change is needed—cyber security must be as instinctive as workplace safety. ✔️ Small businesses are highly targeted—they need better tools and education. ✔️ Information sharing between sectors must improve to reduce national risk. ✔️ Workforce shortages are a growing challenge—diverse talent is key to solving them. ✔️ Public awareness campaigns are crucial—without engagement, policies won’t work. ✔️ Cyber security must be integrated into business decisions, not just compliance checklists. ✔️ Future strategies must focus on equipping businesses with real, actionable resources. Sound Bites: 📢 “Cyber security is not just an IT problem—it’s a national security issue.” 📢 “The Cyber Security Act is a game-changer for Australia’s resilience.” 📢 “A vulnerability to one is a threat to all—we must act together.” 📢 “Small businesses are on the frontlines, and they need better support.” 📢 “We need to build a cyber security culture as strong as workplace safety.” 📢 “Diversity in cyber isn’t just about fairness—it’s about capability.” Chapters: 00:00 – Introduction: Australia’s Cyber Security Landscape 02:35 – A Year in the Role: What’s Changed? 06:12 – The Cyber Security Act: Why It Matters 09:08 – From Awareness to Action: Changing the Culture 12:45 – Challenges for Small Businesses in Cyber Defence 15:30 – Why Information Sharing Must Improve 18:22 – Addressing the Workforce Shortage in Cyber Security 21:15 – Diversity in Cyber Security: More Than a Buzzword 24:30 – Looking Ahead: Priorities for Australia’s Cyber Future 27:10 – Final Thoughts: What Needs to Happen Next…

Future Secured - Shaping a Future-Proof Digital Society

1
From Compliance to Customer Experience: Strategies from a Top Australian CISO - Future Secured EP 8 44:06

16 weeks тому44:06

44:06

Are you ready to peek behind the curtain of one of Australia's largest retail giants and discover how they're battling cyber threats daily? In this explosive episode of Future Secured, Jason and I interview Nigel Hedges, the mastermind behind Chemist Warehouse's cyber security strategy. Ever wondered how industry leaders stay one step ahead of cyber criminals? Curious about AI's role in cyber security? Nigel has surprising insights on the tech that's reshaping our digital defences. And if you've ever grappled with the tug-of-war between ironclad security and seamless customer experience, Nigel's practical wisdom is delivered through enganging stories. Whether you're a seasoned CISO or an aspiring cyber security leader, this episode is packed with actionable strategies to fortify your organisation's digital serfaces. Don't miss this chance to arm yourself with insider knowledge from one of Australia's top cybersecurity minds. Tune in now and future-proof your leadership skills in an increasingly volatile digital landscape. Takeaways: Leadership plays a crucial role in shaping a secure digital future. Collaboration among CISOs is essential for sharing knowledge and experiences. Sovereign capability in cyber security involves bringing infrastructure and data back in-house. Australian startups should focus on areas like GRC to provide innovative solutions. AI has the potential to automate certain cyber security tasks, but a human-in-the-loop approach is still necessary. A risk-driven approach is more effective than a compliance-driven approach in cyber security. Balancing compliance and customer experience is a challenge in cyber security. Practicality and minimal friction are important in the customer experience. Vulnerability management is crucial in addressing cyber attacks. Cyber Security awareness and education should be emphasised, especially in schools. Building relationships with vendors and using their insights can inform cyber security strategies. Analogies related to house security and cyber risk quantification can help convey cyber security concepts. Focusing on the fundamentals, integrating security controls, and building resiliency are key in addressing cyber threats. Introduction and Background (00:00) Nigel Hedges, the CISO at Chemist Warehouse, opens up about his career in the IT industry, highlighting his experiences and the lessons learned along the way. Collaboration Among CISOs (03:12) "Collaboration among CISOs is essential for sharing knowledge and experiences," says Nigel, emphasising the power of collective intelligence in enhancing cybersecurity strategies. Sovereign Capability in Cybersecurity (06:03) Nigel discusses the concept of sovereign capability, advocating for Australian startups to bring infrastructure and data management back in-house. He believes this focus on Governance, Risk, and Compliance (GRC) will drive innovation and security. Focus on GRC in Australian Startups (09:28) "Australian startups should focus on areas like GRC to provide innovative solutions," Nigel asserts, outlining the potential for local firms to lead the way in cyber security. The Impact of AI in Cyber Security (13:47) "AI has the potential to automate certain cyber security tasks, but a human-in-the-loop approach is still necessary," Nigel notes, discussing the balance between automation and human oversight. Balancing Compliance and Customer Experience ( 20:52) Nigel touches on the challenge of balancing compliance requirements with delivering a seamless customer experience. He advocates for a risk-driven approach over a compliance-first mentality. Sound Bites: "Cybersecurity controls and processes are like brakes on a car where it's not designed specifically to slow the car down, but to give confidence to go faster.…

Future Secured - Shaping a Future-Proof Digital Society

1
Unlocking Cyber Security's Hidden Weapon: Why Culture Eats Strategy for Breakfast - Future Secured 9 45:33

16 weeks тому45:33

45:33

"Deleting protects you. Reporting protects everyone." - Daisy Wong, Security Culture Expert. In episode nine of Future Secured, hosts Tom Finnigan and Jason Murrell sit down with Daisy Wong, Security Culture and Awareness Lead at Flybuys, to uncover the often-overlooked human side of cyber security. 🌟 Daisy shares her insights on creating a great culture within cyber security organisations, emphasising the importance of diversity and inclusion. This conversation is packed with actionable strategies and powerful anecdotes to help you transform your cyber security approach. In episode nine of Future Secured, hosts Tom Finnigan and Jason Murrell sit down with Daisy Wong, Security Culture and Awareness Lead at Flybuys, to uncover the often-overlooked human side of cyber security. 🌟 Daisy shares her insights on creating a great culture within cyber security organisations, emphasising the importance of diversity and inclusion. This conversation is packed with actionable strategies and powerful anecdotes to help you transform your cybersecurity approach. Daisy Wong discusses her background and experiences in the cyber industry, sharing her passion for helping people understand cyber security. She highlights the benefits of using storytelling and case studies to drive behavioural change, creating a positive cybersecurity culture. The episode delves into the challenges of diversity and culture in the cybersecurity field, exploring the need for collaboration between the security team and other departments. Daisy emphasises the significance of focusing on human risk management in cybersecurity, stressing that humans can be the strongest asset if given the time, effort, and investment. Key Insights: - Culture Eats Strategy for Breakfast: Learn why integrating organisational culture is crucial for effective cyber security. - The Power of Storytelling: Discover how narratives and case studies can drive behavioural change and strengthen your security posture. - Red Flags in Office Culture: Identify warning signs that could be compromising your organisation's cybersecurity efforts. - Human Risk Management: Explore why investing in people might be your strongest cyber security asset. - Balancing Act: Uncover the secret to effectively allocating resources between technology, processes, and people. - Diversity in Cyber Security: Learn why creating an inclusive environment is essential for industry growth and innovation. - Making Security Relatable: Master the art of using analogies to make cybersecurity concepts accessible to all. Sound Bites: "Culture eats strategy for breakfast." "Humans are the weakest link. I actually think if you put the time, effort, and investment, they can be your strongest asset." "Don't put all your eggs in one basket. Security isn't just about investing in your SOC or the latest technology; it's also about the basics and the people who run your business." "Investing in human risk management is crucial in cybersecurity; humans can be the strongest asset in protecting organisations." Chapters: 00:00 - Introduction: The Critical Role of Integrating Organisational Culture into Cybersecurity 04:27 - Creating a Great Culture within Cybersecurity Organizations 06:21 - Using Storytelling and Case Studies to Drive Behavioral Change 09:49 - Identifying Red Flags in Office Culture 24:31 - The Importance of Human Risk Management 26:30 - Balancing Investments: Technology, Processes, and People 29:12 - Creating an Inclusive and Accessible Cybersecurity Industry 31:17 - Making Cybersecurity Approachable Through Storytelling 32:47 - The Importance of Understanding Human Behavior in Cybersecurity Takeaways: - Integrating organisational culture is crucial for effective cybersecurity. Creating a great culture within cy…

Future Secured - Shaping a Future-Proof Digital Society

1
Unlocking Cyber Security for SMEs: Insights from Tesserent's Mark Jones - Future Secured Ep 10 45:48

16 weeks тому45:48

45:48

In episode 10 of Future Secured, hosts Tom Finnigan and Jason Murrell sit down with Mark Jones, Senior Partner at Tesserent, to delve into the intricate world of cyber security and the challenges businesses face today. They kick off by discussing the merger between Tesserent and Thales, which has opened up new avenues for cyber security initiatives in Australia. Mark shares his expert insights on the Australian Cyber Security Strategy, highlighting the importance of collaboration between government and industry, and the pressing need for standardisation in cyber security practices. One of the key focuses of the conversation is the vital support required for small and medium-sized businesses (SMEs) in their cyber security efforts. Mark emphasises the need for SMEs to understand their cyber security risks and implement appropriate controls, shedding light on the profound impact a cyber attack can have on SMEs and the broader ecosystem. The discussion explores the role of AI in cyber security. Mark outlines Tesserent's comprehensive approach to AI, including advisory services, secure design and implementation, and assurance. He also stresses the critical importance of rehearsing incident response plans and the necessity of ongoing training and awareness. Finally, Mark provides a glimpse into the future of cybersecurity, touching on supply chain risk, compliance, and the innovative projects in the pipeline for Tesserent and Thales. Key Insights: - The Merger's Impact: Discover how the merger between Tesserent and Thales is transforming Australia's cybersecurity landscape. - Strategic Collaboration: Learn why collaboration between government and industry is crucial for tackling cybersecurity challenges. - Standardisation Needs: Understand the importance of standardising cybersecurity practices to help businesses prioritise their efforts. - SME Cybersecurity: Explore the unique challenges faced by SMEs and why supporting them is essential for a robust cybersecurity ecosystem. - AI in Cybersecurity: Get insights into how AI is revolutionising cybersecurity and Tesserent's strategic approach to harnessing its power. - Incident Response: Learn why rehearsing incident response plans and continuous training are key to effective cybersecurity. - Future Trends: Uncover the upcoming trends in cybersecurity, including supply chain risk and compliance. Sound Bites: "This has been one of the best mergers, transitions, acquisitions that I've been part of." "Building up plans and playbooks and exercising those has been something that's got a lot of interest." "The offensive side of things around maturing that capability from just vulnerability scanning right up to much more adversary simulations and red teaming activities is something that's always there." "They've got the same problems as big companies do just at a smaller scale." "The knock on effect of a business going out of business has all their partners and other people in the crosshairs as well." "Focus on the technology and the changes that are happening there and understand if that, the old confidentiality, integrity, availability equation if that was kind of impacted relative to the technology that's supporting your business and the business processes, what does that look like?" Chapters: 00:00 - Introduction and Background 02:38 - The Merger Between Tesserent and Thales 08:31 - The Australian Cybersecurity Strategy 10:36 - Collaboration Between Government and Industry 21:19 - Supporting Small and Medium-Sized Businesses 23:04 - Challenges and Support for SMEs in Cybersecurity 24:22 - The Impact of Cyber Attacks on SMEs and the Broader Ecosystem 26:15 - The Role of AI in Cybersecurity 29:48 - Tesserent's Approach to AI in Cybersecurity 35:33 - The Importance of Rehearsing Incident Response Plans…

Future Secured - Shaping a Future-Proof Digital Society

1
Future Secured Podcast EP1- Unpacking Australia's Cyber Security Strategy - Laying Cyber Foundations 43:15

29 weeks тому43:15

43:15

In this premiere episode of the Future Secured Podcast, co-hosts Tom Finnigan and Jason Murrell, along with special guest Dan Maslin, discuss Australia's ambitious 2030 cyber security strategy. The trio discusses the pivotal role of Chief Information Security Officers (CISOs) and the critical importance of cybersecurity across various organisations. They explore essential strategy components, particularly focusing on the needs of small and medium-sized businesses, and highlight the necessity of innovation and collaborative efforts within the industry. The conversation also examines the significant support required from the government, including incentives for startups and the vital practice of sharing cybersecurity experiences and lessons learned. Key themes such as the integration of AI in cybersecurity, the importance of cultural openness, the imperative of early cybersecurity education, and the broader roles of government and businesses in this strategy are discussed, offering a comprehensive overview of the challenges and solutions in securing Australia's digital future. A summary of the discussion: - Australia has set an ambitious 2030 cyber security strategy to position itself as a global leader in the field. - The role of a Chief Information Security Officer (CISO) varies depending on the organisation, but it generally involves leadership, strategy, and ensuring compliance with relevant legislation. - The strategy should focus on supporting small and medium-sized businesses (SMBs) and addressing their unique cybersecurity challenges. - Incentives and support from the government are crucial for fostering innovation and growth in the cybersecurity startup ecosystem. - Sharing experiences and lessons learned in cybersecurity can help organisations and the industry as a whole improve their security practices. AI is being used in cybersecurity to detect and analyse patterns and behaviors in emails, saving time and increasing detection rates. - Cultural openness and sharing can help accelerate progress in cybersecurity by encouraging collaboration and knowledge sharing. - Early education on cybersecurity is crucial to instil good habits and behaviours from a young age. - Implementing the cybersecurity strategy faces challenges such as enforceability and the need for governance and accountability. - Both government and businesses have a role to play in addressing cybersecurity, with the government leading by example and businesses taking ownership and investing in cybersecurity measures. "We need to become innovative and pick a lane to become an expert in as a country." "Sharing war stories and lessons learned from cyber attacks can be powerful for improving cybersecurity." "We need to leverage shareable content and social media platforms to raise awareness about cybersecurity." "Looking at emails and actually detecting a lot more that previously would have taken manual activity from an analyst to sort of go through the history and look at behaviors within communication styles and those types of things, and really saving a lot of time and really increasing the detection rates." "But it is actually being used in the background to reduce those manual activities." "Do we maybe need to encourage this culture of openness and sharing to get everyone kind of moving forward a bit quicker?"…

Future Secured - Shaping a Future-Proof Digital Society

1
GRC Essentials in Cyber security: Strengthening Australian Businesses - Future Secured EP2 35:03

29 weeks тому35:03