Last week, I had the privilege of presenting along Denise Beardon (Head of Information Security Engagement at Pinsent Masons) at the SANS European Security Awareness Summit. Towards the end of 2017 Christian Toon (CISO at Pinsent Masons) asked if I could come onboard as an interim consultant to kick-start their information security engagement stream of work whilst he was […]
IISP Talking Head Piece – Security Culture
Over the last few years the discussion around security culture has come to the fore and having worked in and around this area for a while I welcome it; particularly when, one of the simplest ways to reduce risk to organisations is to have a security conscious workforce. However, it is not as simple as […]
Smashing Your Stack but for None of the Fun or Profit – The Importance of Wellbeing
I’ve been meaning to write about this topic for a while and have finally found some time. It’s an important one, why? Well, because it is about our wellbeing. Most of you will know about the paper that Aleph One wrote back in 1996 entitled “Smashing the Stack for Fun and Profit”. That was about stack buffer […]
The Security Culture Conference 2016
A couple of weeks ago I was back in beautiful Oslo (One of my favourite cities – I could definitely live there!) for the Security Culture Conference. Last year we had around 25 people for the inaugural conference which was held on an island just outside the city – see my write up on that here. This […]
SteelCon 2015
Last week I presented my “Popping the Bubble” talk at Steel Con – The North’s Premier Hacker Con – https://www.steelcon.info/ – I think it went down quite well and there was some spirited discussion after the talk. Robin (@digininja) and the crew put on a great conference at an amazing price of only £20 – The goodie […]
The Security Culture Conference 2015
So the Security Culture conference happened! On an Island…no really…it was on an island…look… The journey there took about twenty minutes on a ferry and a small boat to get to the island called Lille Herbern. The venue was actually a restaurant – the only one on the island. The day began with Roar Thon’s […]
Build a Security Culture (Fundamentals)
My good friend Kai Roer has written an easy to digest book on security culture. Anyone who has been in security for a while will know of Kai and his work on security awareness and culture. He was very kind give me a mention in the book, cheers Kai! It’s a short and accessible book and you […]
Phishy cyber-criminals ‘go corporate’ with social engineering
I met Doug Drinkwater from SC Magazine at 44Con he asked if I would comment on an article he was writing about phishing. My comments can be found in the article here Thanks Doug for reaching out to me!.
Tools Don’t Change Behaviour People Do
What makes an information security awareness programme effective? As in most cases the answer is “it depends”. Let me elaborate; if your goal is simply to obtain that magic compliance tick then maybe you’ll use some form of computer based training (CBT) coupled with some quizzes and possibly a few videos on your intranet page […]
Bring The Lightning!
It’s back! BSides London is back and this year along with a couple of ex-rookie speakers from 2013 – Anne Wood (@fairycakepixie) and Diarmaid McManus (@MadcapOcelot) as well as Glyn Wintle (@glynwintle) I’m running the Lightning Track. What’s the Lightning Track you ask? Well it’s the unscheduled track – No CfP and no pre-registration. So if you […]