The Human Risk Podcast15 Tammi 2024

Sarah Armstrong-Smith on The Cyber Attacker Mindset

What’s the most effective way to manage cyber risk? The obvious answer is to have more sophisticated security systems. My guest on this episode thinks the answer is humans.

That’s because behind every cyber attack, there is a human, and the biggest point of vulnerability within an organisation is its humans. If we can better understand humans and how they behave, we can be more effective at managing cyber risk.

That’s the view of my guest on this episode, Sarah Armstrong-Smith. She’s the Chief Security Advisor at Microsoft and a leading expert in the cybersecurity space.

She's also the author of a brilliant new book called Understanding the Cyber Attacker Mindset, in which she explores the human dynamics behind cyber attacks. In other words, why do the people who launch cyberattacks do so? If we can understand that, we can start to focus on the root cause of the problem.

In our discussion, we explore:

The crucial role human behaviour plays in cybersecurity;
The emotional and psychological aspects that can affect an organization's digital defences.
Why organisations need a cybersecurity strategy that is people-focused and considers the motivations of cyber attackers.
The importance of recognizing the internal cultural dynamics within an organization that may inadvertently aid cyber attackers;
How cognitive diversity can reinforce cyber defences.
How societal and cultural influences contribute to the ecosystem of cybercrime.
Why victim-blaming when it comes to cyber attacks is counter-productive
How phishing campaigns that punish those who fail tests are a bad idea;
The Seven Sins of Cyber Crime;
The benefits of fostering a supportive workplace culture.

And much much more.

To learn more and to pre-order Sarah’s new book ‘Understand the Cyber Attacker Mindset: Build a Strategic Security Programme to Counteract Threats’: https://www.amazon.co.uk/Understand-Cyber-Attacker-Mindset-Counteract/dp/1398614289#

You can find Sarah:

On LinkedIn: https://www.linkedin.com/in/sarah-armstrong-smith

On Twitter/X: https://twitter.com/SarahASmith75

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(368)

Christian Hunt on Human Risk: what is it & how can we mitigate it?

What is Human Risk? What does 'Bringing Behavioural Science to Ethics & Compliance' mean in practice? On this episode, I'm cross-casting an episode of the Ethical Experts podcast that explores Human R...

2 Loka 202047min

Rob Chesnut on how companies can help their employees to work with Integrity

How can organizations ensure they are ethical? We all understand the principle, but what does it mean in practice? As Ethics becomes a more significant factor in how employees, customers and regulat...

29 Syys 20201h

Christian Hunt on what COVID has taught us about Human Behaviour

What, if anything, have we learned about human behaviour from COVID? That's what I'm exploring in this episode. Six months ago, my friend Mark Heywood invited me onto the first episode of Behind The S...

26 Syys 202034min

Jérôme Tagger on Preventable Surprises - effecting change through influence

Why are there so many entirely preventable financial disasters? And why don't the people behind the companies that suffer them, prevent them from happening?That's what my guest Jérôme Tagger and I exp...

24 Syys 202057min

Dr Johannes Lohse on Active vs Passive Risk: how doing nothing can also cause risk.

When we think of risk, it is usually in the context of 'risk-taking'; in other words, an active decision to do something. But it is equally possible to take risk by doing nothing; passive risk. What...

17 Syys 202057min

Dr Andrew Ishak on Communication in High-Pressure Situations

As academic establishments continue to adjust from face to face teaching to being primarily online experiences, how are academics adjusting? That's the start point for my discussion in this episode w...

9 Syys 20201h

Travis Waugh on delivering more effective training

What do you think of when you read the phrase 'Compliance Training'? Something dull that you're either forced to give (if you're in Compliance) or endure (if you're not)? If so, you're not alone. Bu...

4 Syys 20201h 3min

Professor Olivier Sibony on Why we all make Mistakes and how to avoid them.

Why do even the smartest and most savvy business people make mistakes? It's not because they're stupid. Instead, it's because of the way our brains work. That's what Professor Olivier Sibony, my guest...

1 Syys 20201h