Most businesses will have a plethora of insurances - employer liability, public liability and indemnity, for example - but what about cyber insurance? It is a relatively new area of insurance, although the risk has existed almost since we started using computers and mobile devices.  According to the UK Government Cyber Security Breaches report, 39% of UK businesses have identified at least one cyber attack in the past 12 months, making cyber insurance more crucial than ever.  Nobody knows more about risk than people that work in insurance, so I have invited Matt Clark, expert in international risk management and insurance, to join me for this new episode. We discuss how cyber insurance has evolved from solely protecting breaches to covering risks and how insurance companies calculate premiums based on threats in cyberspace.  Further, we cover the expectations of both the company and insurer in the case of a breach and the rising cost of cyber insurance.   Listen to this episode on your favourite podcasting platform.   If you are a new listener to Razorwire, we would love to hear from you. For more information about us or if you have any questions you would like us to discuss on the podcast email [email protected].   In this episode, we covered the following topics:  An overview of cyber insurance and how it has evolved since it was first introduced Who really needs to have cyber insurance?  How cyber insurance companies calculate your insurance premiums The challenge of promoting awareness of cyber insurance in companies Do the expectations of the company and the insurer differ in the event of a breach? Is cyber insurance becoming more expensive and what value do you get for your money?    GUEST BIO      Matt Clark  Matt Clark has over 30 years’ experience in international risk management and insurance. He specialises in science and technology businesses, including those working in IT, communications tech, life science and healthcare and emerging tech. Matt is a Chartered Insurance Risk Manager with experience in the US, Middle East & Far East.  Connect with Your host James Rees  Hello, I am James Rees, the host of Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult. Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights. With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers. Listen to this episode on your favourite podcasting platform and for more information about us or if you have any questions you would like us to discuss on the podcast email [email protected].  If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our...

Sun Tzu wrote that if you know your enemy and yourself then you need not fear the outcome of all your battles. In this episode, we discuss the enemy, how they work, how the larger gangs are set up and the dangers of large, organised cybercrime gangs vs the smaller gangs. We also take a look at how they chose a target and why.   And for this, we have been joined by two new guests today - Richard Cassidy, Cyber Security Consultant and Victor Acin, leader of the Kraken Labs unit at Outpost24. Further, Richard and Victor shared an analysis of ongoing cyber attacks from a psychological perspective and a history of ransomware attacks.    You can listen to this episode on your favourite podcasting platform.   If you are a new listener to Razorwire, we would love to hear from you. For more information about us or if you have any questions you would like us to discuss on the podcast email [email protected].  In this episode, we covered the following topics:  What kind of cybercriminals are there, and what are their motives? An analysis of ongoing cyber attacks from a psychological perspective History of ransomware attacks  Changing mindsets of cyber criminals and their attack methods  GUEST BIOS -    Richard Cassidy Richard Cassidy has been consulting businesses on cybersecurity strategies and programs for more than two decades. During his career Richard has been heavily engaged in the design and implementation of infrastructure & cyber security solutions, helping organizations in evolving security, compliance, risk management, data assurance, automation, orchestration and breach response practices.  Richard has led major breach investigations across CNI (Critical National Infrastructure), Finance, Military and Educational institutions over the past decade, with specific expertise in financial fraud investigations on SWIFT payment networks. Richard is an active industry contributor, regularly delivering speaker sessions at events including SANS, BlackHat, IP Expo, InfoSec, FS-ISAC and security seminars EMEA-wide. Victor Acin Victor Acin has been working in threat intelligence since 2016 and is now leading the Kraken Labs unit at Outpost24, performing tasks related to the generation of threat intelligence (mainly reverse engineering of malicious samples and research of global actors), and the development of the department's internal products, such as the malware analysis sandbox. In addition, he has also worked as an ethical hacker, performing penetration tests against web applications, external and internal infrastructure, and mobile devices.    Connect with Your host James Rees  Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cybersecurity professionals who dedicate their careers to making a hacker’s life that much more difficult. Our guests bring you experience and expertise from a range of disciplines and different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights. With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.  Listen to this episode on your favourite podcasting...

We're back with another episode of the Razorwire Podcast! In our new episode, we're going to talk about women in cyber security. As part of this, I've invited three fantastic women on this podcast who are leaders in their fields. Firstly, we have Megan Brown, our guest host for this episode. Megan is currently Head of International Sales at LogicGate.  Megan’s guests today may be familiar to you from previous episodes: Stefania Chaplin, a solutions architect at GitHub, and Claire Davies, CISO at Arriva Group.  They discuss how they got into the cyber security space, the challenges they faced, what the differences are for women working in a traditionally male industry today compared to when they began their careers, and the role their mentors played in their journey, as well as how we see the industry and the landscape changing for women in tech.  Megan, Stefania and Claire share their perspective on how jobs and expectations within cyber security are changing. They also tell us about the challenges of working in cyber security, how to overcome them and what brings the most joy to their work. The episode provides a glimpse into a cyber security from a female perspective, and I hope you enjoy it. Check out this episode on your favourite podcasting platform to join the conversation with these incredible women. If you are a new listener to Razorwire, we would love to hear from you. For more information about us or if you have any questions you would like us to discuss on the podcast email [email protected]. In this episode, we covered the following topics: The career journey of three women at different career stages and within different areas of cyber securityThe path that led them to their current positionHow have mentors or allies helped them in their careers?Compared to when they began, what changes have they seen in the industry?What changes are happening to the work culture in cyber security and jobs in general?What is the most challenging aspect of working in cyber security today, and what is the most enjoyable?  GUEST BIO-Claire Davies MBE– Director of Group Information Security, Arriva PLC UKClaire has over 30 years of experience in intelligence and security.  She cut her teeth within the UK military, where she enjoyed a globe-trotting career identifying, assessing, exploiting and ultimately defeating the threat to the security of assets posed by those engaged in terrorism, espionage, sabotage and subversion.  More recently, she leads a team of information security and data protection professionals within Arriva Group.  She is particularly passionate about creating momentum around increased awareness of the cyber threat across the industry, mentoring new recruits into the field (so she can retire) and helping to fly the flag in providing a safe and trusted public transport network.      Stephania Chaplain-a Solutions Architect within DevSecOpsStefania’s (aka @DevStefOps) experience as a Solutions Architect within DevSecOps, a Security Awareness, and Software Supply Chain Management company. She helped countless organisations understand and implement security throughout their SDLC. As a python developer at heart, Stefania enjoys optimising and improving operational efficiency by scripting and automating processes and creating integrations. She is a member of OWASP...

Welcome to another episode of Razorwire Podcast! In this episode, our guests are Oliver Rochford of Securonix, who you've met in earlier episodes, and Stefania Chaplain, a solutions architect, discussing the skills shortage, burnout in cyber careers, and remote working. Cybersecurity offers both rewards and challenges simultaneously. Security providers in their early careers struggle to find work, while recruiters struggle to find the proper role and qualification for their security needs as cybersecurity is a multifaceted field. We discussed how underappreciation of information security professionals leads to burnout and mental exhaustion. We asked our guests what they've done to avoid burnout in their careers during our interview. We discuss how working from home has allowed us to spend time with our families, but that permanent remote working has created a distance between our colleagues and us. This episode is relevant to those new to the infosec field or who have been in it for a long time. Take a listen to this episode and enjoy it. Listen to this episode on your favourite podcasting platform. If you are a new listener to Razorwire, we would love to hear from you. For more information about us or if you have any questions you would like us to discuss on the podcast email [email protected]. In this episode, we covered the following topics:Our guest's perspective on the skill shortage in information securityAn analysis of the reasons behind the shortage of skills in information securityThe cybersecurity recruitment process An overview of cybersecurity's layers and aspects The next generation knowledge gap and mentorship's role in filling itWhy infosec professionals burn outCybersecurity burnout: how to avoid itWorking from home and building relationships in information security The benefits of shifting roles to avoid burnout  Check out these other episodes:Ep 2: The Evolution Of Cyber Security & Trends To Watch ForEp 3 : The Future Of Security For Working From HomeEp 1 : Where Should A CISO Sit Within An Organisation? Connect with Your host James ReesHello, I am James Rees, the host of Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.Listen to this episode on your favourite podcasting platform and for more information about us or if you have any questions you would like us to discuss on the podcast email [email protected] you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.Linkedin: Razorthorn...

There is no doubt that the world has gone through massive changes over the past few years. We have faced pandemics, lockdowns, wars, supply chain issues and economic crises.   As the whole world moves online, large-scale innovations have been boosted. To infosec enthusiasts, this raises an interesting question: what is in store for the industry?  So in this episode, we're joined by Oliver Rochford of Securonix to have a debate on this question. As Oliver said, technology had been around for a while, but the crisis accelerated adoption and scalability.   Security is now not just confined to technology, now we are discussing the concept of the citizen developer.  We discussed how the infosec industry is witnessing a rise in entry from different skill sets, the struggle of cyber security providers and setting realistic expectations for the level of security that can be delivered.  Tune into this episode to discover our observations about the future of information and cyber security. Listen to this episode on your favourite podcasting platform.  If you are a new listener to Razorwire, we would love to hear from you. For more information about us or if you have any questions you would like us to discuss on the podcast email [email protected].   In this episode, we covered the following topics:   What direction is infosec heading in? Why is cyber security more important than ever since the pandemic? Why does it seem so hard for businesses to hire a security provider that fits their needs? Concept of “citizen developers” and the need for better tools in information security Is there a shortage of skilled and experienced people in infosec? Who is ultimately responsible for security in an organisation? Is there a limit to what cyber security can offer an organisation? A look at the struggles of people in the information security field and the positive aspects How AI and machine learning can help cyber security What are the benefits of storytelling skills in cyber security? What is the role of PR in cyber security crisis management? Our final thoughts on the direction cyber security is heading in.    GUEST BIO-  Oliver Rochford  –  has worked in cyber security as a penetration tester, consultant and  industry analyst for over 20 years  Oliver has worked in cyber security as a penetration tester, consultant, researcher, and industry analyst for over 20 years. Interviewed, cited, and quoted by media, think tanks, and academia, he has written for SecurityWeek, CSO Online and Dark Reading. While working at Gartner, he co-named the Security Orchestration, Automation and Response (SOAR) market, worked on the SIEM Magic Quadrant, and also covered the European MSSP Market. Prior to joining Securonix, Oliver worked for Qualys, Verizon, Gartner and Tenable. Oliver is a Senior Director and Security Evangelist at Securonix.    Connect with Your host James Rees  Hello, I am James Rees, the host of Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult. Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned...

Welcome to part two of our episode on Machine Learning, AI and Cyber Security. In part one, we discussed what it will be like for us as security professionals when we have access to AI tools, what we are doing with them now and how we could use them in future.  In part two, we are re-joined by our guests Oliver Rochford of Securonix and Jonathan Care, a mentor of mine who specialises in cyber security and fraud detection.  We continue the conversation but this time we discuss what will happen when malicious actors use the same tools and technologies that we use for security for their own purposes. It’s only a matter of time before they twist AI against us for nefarious ends.  Although the technology is still evolving, and malicious actors are still learning how to manipulate it, we discuss the threats we’re currently facing as organisations along with the best ways to defend against AI tools in the hands of the enemy.   Tune into this episode to join our discussion and let us know what you think.  Listen to this episode on your favourite podcasting platform.  If you are a new listener to Razorwire, we would love to hear from you. For more information about us or if you have any questions you would like us to discuss on the podcast email [email protected].  In this episode, we covered the following topics: What access do malicious actors currently have to AI tools? What exactly can they use AI technology for? The case of Oracle poisoning How AI can be used to improve the precision of a cyber attack The funding requirements needed to build and manipulate AI technology How hackers can use AI for making deep fakes to bypass security Challenges of data labelling to use AI better Discussion about insider risk How data collection on hacking targets can be made easier through the use of machine learning The importance of accelerating defensive innovation in AI   Related Episode  Listen to - Machine Learning, AI & Cyber Security Part 1 : Used for Good  GUEST BIO-  Oliver Rochford  –  worked in cyber security as a penetration tester, consultant and  industry analyst for over 20 years  Oliver has worked in cyber security as a penetration tester, consultant, researcher and industry analyst for over 20 years. Interviewed, cited and quoted by media, think tanks and academia, he has written for SecurityWeek, CSO Online and Dark Reading. While working at Gartner, he co-named the Security Orchestration, Automation and Response (SOAR) market, worked on the SIEM Magic Quadrant and covered the European MSSP Market. Prior to joining Securonix, Oliver worked for Qualys, Verizon, Gartner and Tenable. Oliver is a Senior Director and Security Evangelist at Securonix.  Jonathan Care An expert in the field of Cyber Security & Fraud Detection  Jonathan Care is a recognised expert in the field of Cyber Security and Fraud Detection. A former top-rated Gartner analyst, Care was responsible for defining the fraud market and leading Gartner’s Insider Threat and Risk research. He regularly advises cyber security industry leaders on strategic growth and has worked with key figures in industry and

Welcome to another episode of Razorwire Podcast! We are joined today by Oliver Rochford of Securonix and Jonathan Care, a mentor of mine who specialises in cyber security and fraud detection.   As AI and its application in cyber security are such a big topic, this podcast will be in two parts. We will discuss machine learning and artificial intelligence for information security in the first part of our discussion today.  The second one will be published soon and deals with artificial intelligence, machine learning and its potential dangers.   All of us are fascinated by the world of AI and begin to imagine the scene we've seen in the movies. But in this podcast episode, we will do some reality checking on AI. We discussed how far artificial intelligence has advanced, how it can be used for cyber security, its limitations and whether it can replace our jobs.   Find out how AI can be used in cyber security and why we shouldn't place high expectations on it in this episode. Listen to this episode on your favourite podcasting platform.  If you are a new listener to Razorwire, we would love to hear from you. For more information about us or if you have any questions you would like us to discuss on the podcast email [email protected].   In this episode, we covered the following topics:  Where does AI stand in terms of technology, business and governance? The advancement of artificial intelligence in technology, business and governance: how far has it come? The role of artificial intelligence in detecting cyber fraud Differences between using AI for general decision-making and detecting cybercrime What areas can AI can be applied to in cyber security An analysis of AI security's limitations  Will we be able to allow AI to take actions without first obtaining human approval? Are security AI systems capable of replacing cyber security providers someday or in the foreseeable future? In what ways can artificial intelligence and humans work together? Why AI must not be held to such high expectations    GUEST BIO-  Oliver Rochford  –  worked in cyber security as a penetration tester, consultant and  industry analyst for over 20 years  Oliver has worked in cyber security as a penetration tester, consultant, researcher, and industry analyst for over 20 years. Interviewed, cited and quoted by media, think tanks and academia, he has written for SecurityWeek, CSO Online and Dark Reading. While working at Gartner, he co-named the Security Orchestration, Automation and Response (SOAR) market, worked on the SIEM Magic Quadrant and also covered the European MSSP Market. Prior to joining Securonix, Oliver worked for Qualys, Verizon, Gartner and Tenable. Oliver is a Senior Director and Security Evangelist at Securonix.  Jonathan Care - expert in the field of cyber security & fraud detection Jonathan Care is a recognised expert in the field of cyber security and fraud detection. A former top-rated Gartner analyst, Care was responsible for defining the fraud market and leading Gartner’s Insider Threat and Risk research. He regularly advises cyber security industry leaders on strategic growth and has worked with key figures in industry and government across the globe. He is a lead contributor for Dark Reading, an industry-defining...