Risk Management

Defense in Depth discuss 'what are you defending?'

Cydea’s founder, Robin Oldham, is featured on this week’s Defense in Depth podcast discussing asset valuation. Citing our blog post, Robin’s comments were picked up by David Spark and featured on the show. "What are we defending? is a question that gets asked nowhere nearly enough. Ask it early. Ask if often." Both co-host Allan Alford and this week’s guest Bobby Ford agreed. “The first thing you have to do is identify critical activities.

More Defense in Depth discuss 'what are you defending?'...

Security Watercooler: Focus during the distractions: security awareness at home, with ThinkCyber's Tim Ward

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints. Check out more about the concept here. Today Robin Oldham was joined by ThinkCyber‘s Tim Ward to discuss the security training and awareness. Here are the summary notes from the call: 90% of attacks start with the human user, and technical controls are never 100%.

More Security Watercooler: Focus during the distractions: security awareness at home, with ThinkCyber's Tim Ward...

Security Watercooler: Cyber Risk Universe, with CISO Mentor's Phil Huggins

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints. Check out more about the concept here. Today Robin Oldham was joined by CISO Mentor‘s Phil Huggins to discuss the cyber risk universe. Here are the summary notes from the call: Phil and Robin have been working on a project ‘Open Information Security Risk Universe’ that is available, in part and as a PDF, on GitHub here: https://github.

More Security Watercooler: Cyber Risk Universe, with CISO Mentor's Phil Huggins...

We need your help to develop a better way to measure and manage cyber risk

At Cydea we believe in risk management should be consistent in its approach, informed by the data you have, and automated where possible. It’s part of our belief in positive security. Annual risk assessment workshops and ‘five-by-five’ risk matrices are no longer good enough. They don’t invite unacceptably wide margin for error and do not keep pace with modern business. We think it is time to do something about that. And we would like your help!

More We need your help to develop a better way to measure and manage cyber risk...

What are you defending?

In our opinion, most cyber security consultants spent most of their time talking about how things go wrong. One of our mottos at Cydea is “Let’s make things go right.” One way of doing that - and an important principle that guides us - is by understanding as much as possible about how each organisation works. We don’t start by asking “Are you defending against all these possible attacks?” Rather, we start with: “What are you defending?

More What are you defending?...