Innsiderisiko
mnemonic security podcast
01/25/22
•29m
About
Comments
Featured In
Insider threats | In Norwegian only
Where should organisations start to protect themselves from insider threats?
For this episode on insider risks, Robby is joined by Frode Skaarnes, COO at Lørn, a startup creating digital learning programs, with long experience from The Norwegian National Security Authority (NSM), as well as Kristian Haga from mnemonic’s Governance Risk and Compliance department.
They share from their experience working to help organisations minimise their risks of insider threats towards both the public and private sector, discuss how insiders often operate and why it’s especially important to separate between intentional and unintentional insiders.
Frode and Kristian also go into what organisations can do to pre-emptively minimise their own risks, and how working from home during the pandemic has impacted how we approach this risk.
Related reading:
https://nsm.no/regelverk-og-hjelp/rad-og-anbefalinger/grunnprinsipper-for-personellsikkerhet/introduksjon/
https://www.mnemonic.no/globalassets/security-report/we-need-to-talk-about-insider-threats.pdf
Producer: Paul Jæger
Previous Episode
Does your managed SOC suck?
January 10, 2022
•38m
Does your managed SOC suck?
Are you fighting today’s war with yesterday’s weaponry?
Morten Munck, Engagement Manager at the cybersecurity advisory company Improsec, joins Robby to discuss his much-shared article “Does your managed SOC suck?” with the top ten red flags suggesting that your managed SOC provider should step up their game.
Morten has a background from finance and telecommunication and holds a strong profile within Blue Teaming - particularly SIEM, SOC and detection engineering, and has long experience helping customers build and operate their SOCs.
During this episode, they discuss gathering the right telemetry, stale use-case catalogues, and how you know if it’s time to start looking elsewhere.
Related reading: https://improsec.com/cyber-blog/does-your-managed-soc-suck
Produced by Paul Jæger
Next Episode
Collecting and sharing threat intelligence
February 7, 2022
•35m
How does one of the world’s largest cybersecurity companies collect and share their Threat Intelligence?
For this episode, Ryan Olson, Vice President of Threat Intelligence (Unit 42) at Palo Alto Networks, joins Robby for a chat about Palo Alto Networks’ telemetry pool and how Threat Intelligence has evolved over the last decade.
His team, Unit 42, are responsible for collecting, analysing and producing intelligence for a large number of organisations worldwide, and Ryan shares what goes on in the Unit 42 team when an event like Log4shell occurs.
He also looks back at the major trends they observed in 2021, and what new adversary techniques and potential attack paths interests him the most these days.
Produced by Paul Jæger
If you like this episode you’ll love
Promoted