Saturday, 22 December 2018

Restricted Intelligence Blog Series

I've known the good folk at Restricted Intelligence for a while now, I was in their offices recently as they had invited me in to provide a consultants perspective around information security awareness programmes.

During the visit they asked if I would write a blog series with some tips on how to increase the chances of running a perfect security awareness campaign.

Here are the links to the posts:

Part 1 - Understand your environment

Part 2 - Trust issues

Part 3 - Is you platform ready


Saturday, 8 December 2018

SANS European Security Awareness Summit

Last week, I had the privilege of presenting along Denise Beardon (Head of Information Security Engagement at Pinsent Masons) at the SANS European Security Awareness Summit.

Towards the end of 2017 Christian Toon (CISO at Pinsent Masons) asked if I could come onboard as an interim consultant to kick-start their information security engagement stream of work whilst he was searching for a permanent member of staff.

That permanent member of staff turned out to be Denise, we got along like a house on fire and together ran a firm wide security culture study to establish a baseline to measure behavioural change; the premise being that any security awareness, behaviour and culture programme must be built on solid foundations.

At the time I don't believe any other law firm in the UK had developed and run anything similar.

Denise and I got talking and decided we should do a talk together and the most obvious place was the Summit, so we submitted and were accepted!

This is a direct link to our presentation:

"Establishing a Baseline to Measure Behavioural Change"

Here's the link the landing page for the Summit archives