Claire Pales public
[search 0]
More
Download the App!
show episodes
 
The Security Collective is the podcast for leaders tasked with, and interested in, securing technology, people, processes and data for the protection of all. Join best-selling author Claire Pales, together with industry thought leaders who answer your questions about security leadership, trends, technologies, and more. 'The Security Collective' podcast - formerly 'The Secure CIO'
  continue reading
 
Loading …
show series
 
Today we are recapping some of the great episodes from season 11 'In Case You Missed' them! We have put together a snippet of the best parts from each guest for you, and if you like what you hear, click below to listen to the full episode, or head to wherever you enjoy our podcast, and check out the full back catalogue. Links: Marc Bown Stephen Ken…
  continue reading
 
It’s our last episode for the season, and we are joined by a very good friend of Claire’s and of the podcast, Samm MacLeod. Samm and Claire discuss what's been happening since we caught up with her 12 months ago in season eight, when Samm generously shared her CISO journey through burnout and recent sabbatical. She's now back CISO-ing, and this tim…
  continue reading
 
Jamie Newman has a refreshing take on security and joins Claire as they chat about understanding the security posture in diverse organisations, they discuss about third party contracts, how much money you should be spending on compliance and what meaningful metrics might look like. Jamie is an experienced IT Leader with more than 20 years experienc…
  continue reading
 
Paul Wenham joined Claire to talk about the what, how, and why he started Assurance Lab. They also cover the value of auditing, how compliance can be the foundation stone for startups and his new book, which he is making open source for others to contribute to; and talked about the fact that Assurance Lab is a B Corp, and why that is so important t…
  continue reading
 
Paul McCarty is a DevSecOps evangelist, and his recent chat with Claire was so great, we had to split it into 2 parts. In part 2 they discuss minimum viable security product, the Software Bill Of Materials (SBOMs) and making governance material consumable for senior audiences, no matter how unsexy policies might be. Paul is the founder of SecureSta…
  continue reading
 
Paul McCarty is a DevSecOps evangelist, and his recent chat with Claire was so great, we had to split it into 2-parts. In part 1 they talk about his DevSecOps Playbook, the challenges of security and engineering teams working together harmoniously, and how to apply the Essential 8 to the software development lifecycle. You can hear Claire really en…
  continue reading
 
Claire is joined by Yvette Lejins as they discuss what people centric security means to her, what boards need from their CISO communications and the very real risk of insider threat. Claire was also curious to ask a bit about Yvette’s transition from CISO at Jetstar in house to being residency CISO for a security vendor. Yvette joined Proofpoint fr…
  continue reading
 
Claire is joined by La Trobe scholar Naveen Chilamkurti as they cover some of the amazing work La Trobe is doing to welcome people into the cyber industry through great micro credentialing programmes. They discuss what micro credentials are, the value of this way of study, and how employers are valuing University qualifications such as micro creden…
  continue reading
 
We welcome back author Craig Ford as he and Claire dive a little deeper into his latest book 'Foresight' which has been nominated for an Aurelis Award in the young reader category. There is cybercrime, romance, spies and hacking and a few matrix references in there for the fans. Aside from the book, Craig and Claire discuss the ongoing challenges o…
  continue reading
 
Claire is joined by Stephen Kennedy as they cover the balance of engineers between security and functionality. They talk about secure coding expectations, and also the role compliance plays in software development. Stephen shares his experience moving from being an engineer into C-level leadership and the security lens of which he then had to look …
  continue reading
 
The first episode for this season we welcome Marc Bown the CISO and Enterprise Technology lead at Immutable, a web3 gaming scale up. Claire and Marc discuss the culture versus tech debate, exactly what web3 gaming is, and Marc shared his thoughts on what we as a security industry are still trying to get right. Prior to Immutable, Marc helped found …
  continue reading
 
We've taken some clips of wisdom from five of our guests this season and brought them together in a neat package for you. This season in partnership with LastPass, we focused heavily on third party risk and supply chain security. For the full episode transcript, please visit our website. The Security Collective podcast is proudly brought to you in …
  continue reading
 
Following the success of our recent webinar, Claire is again joined by Alla Valente, this time they discuss the role of procurement, talk about supply chain risk as an enterprise wide risk and discuss who might own this risk. They covered how businesses are struggling to give third parties limited access to data and systems, and the flow on effects…
  continue reading
 
Claire is joined by Paul Barrett as they talk about cyber culture in local government, how the governance model for cyber is changing for the better, and Paul shares why he sees audits as a gift. It is great hearing Paul's view on cyber and getting a glimpse into being a CIO and local government. Paul Barrett is an experienced an IT professional wi…
  continue reading
 
Claire is joined by Grant Chisnall a crisis trainer, advisor and podcaster, who has a passion for leadership communication and decision making. In this episode they covered a lot of ground including the escalation from incident response to crisis management, and talk about business collaboration before an incident, and how to plan for resilience wh…
  continue reading
 
To celebrate the 100th episode and recently hitting 30,000 downloads, Claire wanted to honour some of the guests that have given their time and thought leadership so generously. So here's a little trip down memory lane, which we hope that you enjoy. For the full episode transcript, please visit our website. The Security Collective podcast is proudl…
  continue reading
 
In part 2 of Claire’s webinar with Alla Valente and Vijay Krishnan they cover software supply chain, how to navigate fourth party risk and talked about offshore supply chain risks such as privacy and data sovereignty, as well as some great audience questions. they cover software supply chain, how to navigate fourth party risk and talked about offsh…
  continue reading
 
Earlier this week Claire hosted a live webinar with Alla Valente and Vijay Krishnan as they shared their insights on supply chain security versus third party risk. In part 1 Vijay covers APRA's CPS234 and the need for effective security controls, not just compliant ones. We also cover the role of legal and procurement in the third party assurance p…
  continue reading
 
Join us Tuesday 19 July 2022 at 10:30am (AEST) as we are going live for The Security Collective podcast in partnership with LastPass. We've invited Vijay Krishnan from UniSuper and Alla Valente from Forrester to join Claire in a conversation about supply chain security. You can learn more on our website Register for the event here…
  continue reading
 
Claire chats with former Toyota Australia CIO Ellis Brover, as he shares his thoughts on incident response through the lens of the CIO. They discuss how security maturity can dictate reporting lines, how organisations should seek to test the reality of systems being shut down because of an incident, and really how moral support goes a long way duri…
  continue reading
 
Claire chats with Jeremy Herbert, the CIO of Premier Technology Solutions. They covered how small businesses were affected during COVID, and what organisations of all sizes need to consider when it comes to the partners they need to manage cyber risk. On the podcast, we don't often cover cyber risk for organisations as small as maybe just a handful…
  continue reading
 
We are back with our 10th season of the podcast, and to kick it off Claire is joined by Susie Jones from Cynch Security. Susie and Claire discuss supply chain risk, small business cyber fitness and the recent changes to security legislation. Susie also shared her thoughts on the role of government in securing all businesses. Susie Jones is an exper…
  continue reading
 
This season on The Security Collective podcast we have invited guests to speak specifically about how we can change the behaviours of our staff when it comes to their cybersecurity habits and actions. This is a mashup episode where Claire wanted to cover some really important points that some of the guests made, and encourage you to go back and lis…
  continue reading
 
Closing out the theme of this season Claire is joined by Chris McNaughton and they discuss how data protection and security awareness are linked, the challenges of insider threat, and how leaders across your business can promote more secure behaviours. Chris is a Director of SECMON1. Chris’ career commenced in law enforcement, where he was a recogn…
  continue reading
 
Claire is joined by Ian Yip, Founder and CEO of Avertro, the cyber-why company. They discuss cyber culture at the board level and talk about the impact of security leadership on the culture within cyber teams. Ian talks about the value of using the business's language in your cybersecurity discussions at the board level, and about bringing meaningf…
  continue reading
 
Olivia Grandjean-Thomsen is passionate about designing and implementing internal and external communication and stakeholder engagement strategies for the private, public and not-for-profit sectors. Olivia joins Claire and shares what good long-term communications planning can look like, how to measure cybersecurity communications programmes, and th…
  continue reading
 
Claire talks with Kate Monckton, a Partner in Cyber Risk at Deloitte, about the difference between cyber and privacy, and why we should never apologise for cyber or privacy being boring. Kate joined Deloitte in February 2022 as a Partner in Cyber Risk. Prior to this she spent over ten years as part of the Security Senior Leadership team at nbn. Bef…
  continue reading
 
In Claire’s chat with Cyber Security Fellow Amy Ertan, whose research focus is on the security implications of emerging technologies as well as themes relating to the human aspects of cybersecurity, they talk about her recent findings post COVID lockdowns. Amy shares the impact of COVID on security behaviours and her research into how psychological…
  continue reading
 
It is always a pleasure to speak to passionate cybersecurity leaders and Erica Hardinge from ANZ is no exception. Erica and Claire talked in this episode about SIT and the work they do to bring the security awareness industry together on a regular basis. They discussed the magnitude of her role to influence the behaviours of tens of thousands of st…
  continue reading
 
This is the episode to share with your colleagues, friends and family as Claire talks to Susan McLean, Australia’s leading expert in the area of cyber safety. Susan was a member of Victoria Police for 27 years and the first Victoria Police officer appointed to a position involving cybersafety and young people where she established and managed the V…
  continue reading
 
Claire talks with Christie Wilson, the Cyber Resilience Manager at UniSuper, where she helps employees understand cyber security threats and how to take the right steps to protect themselves. They cover how hard it is to measure cyber behaviour change through metrics and also the lessons Christie has learned in nurturing security champions at UniSu…
  continue reading
 
In part 2 of Claire’s chat Lloyd Evans from LastPass, they talk about the hybrid work setting, communicating the cyber messages to the board, share questions from the audience, and Claire asks the age-old question, are password managers secure? Lloyd Evans leads LastPass business across JAPAC (inc India). When he’s not training for his next ultra-m…
  continue reading
 
Opening this season is part 1 of the webinar recording Claire co-hosted with Lloyd Evans from LastPass as they discuss human behaviours and the impact of culture and values on cybersecurity. Lloyd Evans leads LastPass business across JAPAC (inc India). When he’s not training for his next ultra-marathon, Lloyd and the global LastPass teams are helpi…
  continue reading
 
In part 2 of Claire’s chat with Samm they discuss her sabbatical, starting a new business, and the operating model changes she has seen since returning to the security industry. Samm is responsible for driving The Security Collective’s Interim CISO and Virtual CISO business. She also supports our clients with cyber security strategy, security opera…
  continue reading
 
To conclude our season of returning guests, Claire is joined by our very own partner, Samm MacLeod, for a two part podcast. In part 1 they discuss Samm’s career break, what she has noticed since returning to the cyber industry, the SOCI Act and reporting to the board. Samm is responsible for driving The Security Collective’s Interim CISO and Virtua…
  continue reading
 
We welcome Brendan back to share what has changed since we last spoke. We discuss his new role as CISO for Cube Networks; outsourcing and cyber risk management; and the 3 key things he has seen change in cyber in the last six months. Brendan Smith had a vocational interest in security, across various internet technologies and cryptographic systems,…
  continue reading
 
Michelle Price is the CEO of AustCyber, the Australian Cyber Security Growth Network Ltd, part of the Australian Government’s Industry Growth Centres Initiative. She joins the podcast again to discuss reducing organisational risk, ransomware, cyber as critical infrastructure, and 'purple teaming'. Michelle has an extensive career and held several G…
  continue reading
 
It has been several years since Dan Maslin last joined Claire on the podcast. Dan shares what has changed since their last chat, they discuss cybersecurity awareness, the benefits of a deputy security leader, and the Security of Critical Infrastructure Bill. Dan Maslin is the CISO for Monash University, the largest university in Australia. In addit…
  continue reading
 
After the success of Nick’s first episode, we welcome him back to discuss what has changed since we spoke a few years ago. We chat about the cyber job market, how things have changed through COVID, how ‘good cybersecurity is boring’, shadow IT, and Nick’s thoughts on the future of cybersecurity. Nick Ellsmore has started, built, merged, acquired an…
  continue reading
 
A multi-episode guest on the podcast, we welcome back Anna to discuss how boards have adjusted during COVID - from governing cyber risk; technology and audit risk committees; to encouraging resilience and collaboration. Anna also shares what work looks like since leaving her corporate career. Anna is a Director of The Secure Board, a Non-Executive …
  continue reading
 
When Laura Staples was last on the podcast she shared that Laminex were undertaking the biggest work from home experiment ever. Laura joins us again to share how things have played out over the last 18 months. Laura is the Head of People & Performance at Laminex Australia and has spent the last 15 years pushing the boundaries in organisations with …
  continue reading
 
One of our original podcast guests, Craig Searle, returns to discuss how cyber has changed in the few years since we spoke - from navigating the pandemic; awareness of supply chain security issues; to achieving diversity in the workplace. Craig Searle is the co-founder of Australian cybersecurity consultancy, Hivint, and the security collaboration …
  continue reading
 
After joining the podcast as a guest in Episode 64 ‘The 14 day Security Challenge - Paul De Arajo is back as we continue our chat about the role of marketing and communications in cybersecurity risk management. Paul joined NBN during COVID-19 in 2020 delivering security influence programs to protect NBN’s people and assets from personnel, physical …
  continue reading
 
Today is R U OK? day and it seems fitting we revisit my previous episode with Graeme Cowan. Last year, I was fortunate to meet with Graeme Cowan and ask him about his story, ask him about R U OK? day, and talk to him about some resilience activities that cybersecurity leaders can do, given the burnout that can occur in our industry. As a mental hea…
  continue reading
 
Vaughan Shanks is a Co-Founder and the CEO of Cydarm Technologies, since the company was founded in 2017. Prior to Cydarm, Vaughan worked as a software engineer in a range of Federal Government positions, working with organisations in Defence, intelligence, and law enforcement, in both a Public Service and private sector capacity, in Australia and …
  continue reading
 
Jacinta Whelan is an author, thought leader and popular speaker on the concept of Interim Executives, Portfolio Careers and future ways of working. A partner with Watermark Executive Search leading the Melbourne office, she has over 25 years’ experience starting and leading Interim businesses in Hong Kong, New York and Australia. Jacinta advises co…
  continue reading
 
Aaron Bailey is one of Australia's leading Cyber Security experts and is the driving force behind The Missing Link's Security team. Aaron is the Chief Information Security Officer at The Missing Link, and kick started their Cyber Security business. Today Aaron and his team has become the trusted advisor to some of Australia's largest companies and …
  continue reading
 
Loading …

Quick Reference Guide