In this week's episode Dr. Crane talks to Yiannis Pavlosoglou about Resilient Systems.
From supply chain shortages to natural disruptions from changing weather patterns, it seems everything today needs to operate while under some type of duress or attack. But what do CISOs need to know to create resilient systems? And what can we learn from other CISOs who've already gone down this path?
NIST defines cyber resiliency as the ability to anticipate, withstand, recover from, and adapt to adverse conditions, stresses, attacks, or compromises on systems that use or are enabled by cyber resources. That's a mouthful, but what does it actually mean to have to build a resilient cyber program to drive the change management necessary to build that type of program, to put in place the governance processes and procedures necessary.
To discuss this and more, who better to talk with cyber resiliency and governance than Yiannis Pavlosoglou. Currently, the Founder and CEO at Kiberna, and most recently, the CISO for UBS in the UK.
In this episode:
00:00 — Welcome
02:42 — Introductions
03:35 — What Is Resilience?
04:08 — What Works?
05:37 — CISO as a Change Agent for Resiliency
07:07 — Challenges Driving A Resilient Organization Forward
08:47 — Where To Look To Build Resiliency
11:01 — Challenges To Building Resiliency
12:20 — The Role Of The CISO In Leading Cyber Resiliency
16:11 — Tools For Building Resiliency
18:29 — What To Do Once You Have A Set Of Risks To Tackle
19:45 — References
21:14 — Sign Off
Yiannis Pavlosoglou:
LinkedIn — https://uk.linkedin.com/in/yiannisp
Kiberna — https://www.kiberna.com
Links in this episode:
Operation Resilience for UK Financial Bodies — https://www.bankofengland.co.uk/prudential-regulation/publication/2018/building-the-uk-financial-sectors-operational-resilience-discussion-paper
FCA on Building Operation Resilience — https://www.fca.org.uk/publications/policy-statements/ps21-3-building-operational-resilience
CERT Resilience Management Model — https://resources.sei.cmu.edu/library/asset-view.cfm?assetid=30375
Thanks To Our Sponsors:
Heinz College CISO Certificate — https://www.heinz.cmu.edu/programs/executive-education/chief-information-security-officer-certificate
CISOWise vCISO — https://www.cisowise.com/
Heinz College:
https://www.facebook.com/heinzcollege
https://www.linkedin.com/school/carnegie-mellon-university---h.-john-heinz-iii-college/
Carnegie Mellon:
https://www.linkedin.com/school/carnegie-mellon-university
https://www.facebook.com/carnegiemellonu
Follow CISOWise on all podcast apps.
Website — https://www.cisowise.com/podcast
Show Notes & Transcript — https://www.cisowise.com/podcast/008-resilient-systems-with-yiannis-pavlosoglou
