CSCP S03EP24 - Ollie Whitehouse - Vulnerabilities - SBOM and the evolution of the Cyber ned

Cyber Security & Cloud Podcast

English - March 06, 2023 21:20 - 46 minutes - 94.3 MB
Technology News Tech News Homepage Download Google Podcasts Overcast Castro Pocket Casts RSS feed

Previous Episode: CSCP S03EP23 - Chris Hughes - Demystifying Application Security Programs

Next Episode: CSCP S03EP 27 - Nathan - From music to cybersecurity - the appsec symphony

Ollie Whitehouse is the founder BinaryFirefly a boutique British cyber advisory firm with a career spanning over 25 years in applied cyber attack and defence. Ollie's portfolio of advisory positions today includes science advisory positions for UK Government as a member of the Science Advisory Councils for the Home Office and Police, Industry 100 within the National Cyber Security Centre and various Non-Executive Directorships. His operational tenures include over ten and half years at NCC Group where he was Group CTO until the end of 2022, BlackBerry and Symantec. Ollie has given oral evidence to the UK Parliament Joint Committee on the National Security Strategy twice in 2017 and 2022 on matters related to cyber security.

The episode is brought to you by Phoenix Security; get in control of your vulnerabilities from code to cloud with the power of Phoenix. ACT Now on the vulnerabilities that matter most and reduce your exposure to modern attacks. See it for yourself. Go to https://www.phoenix.security for a free 14-day licence.

2:00 - Career and dot com

3:00 - Pen-testing and philosophy

5:00 - Business and Cybersecurity and role of the cyber NED

9:00 - CISO

10:00 - Executive understanding

12:00 - Cybersecurity technicalities - Pen tests and regulation

16:00 - Cybersecurity and regulation in the USA

19:00 - SBOM, Digital Software supply chain

22:00 - Regulators, Board and how they think

26:00 - Assets, different opinions based on generation

30:00 - Non exec hands-on startups vs later stage

35:00 - policy and frameworks, and assessing, quantifying the net value of a control