In this week’s episode, Anna is joined again by Vijay Krishnan, the Chief Information Security Officer at UniSuper. In this episode, Vijay shares his insights as a CISO into what questions he dreads being asked the most, and what questions he wished board members asked. He also discusses the security of critical infrastructure changes that have come through and how he interprets new regulatory requirements, and how to integrate those into existing strategy and roadmap.

Vijay leads UniSuper's Information Security including Security Operations, Security Governance, Risk & Compliance, Security Strategy, Architecture & Design, Identity & Access Management, and Enterprise Observability. He leads a multi-year security program to reduce UniSuper security risk, thus protecting UniSuper members. Vijay has extensive experience negotiating clear and concise security and technology outcomes in regulatory, policy, and outsourcing agreements delivering value-creation opportunities. He has considerable, diverse national and international experience with extensive executive and Board level exposure. Previously he was leading Information security at Transurban, accountable for IT and OT security including accountability for PCI DSS compliance.

Links:

Vijay LinkedIn

For the full episode transcript, please visit our website.

In this week’s episode, Anna is joined by Vijay Krishnan, the Chief Information Security Officer at UniSuper. In this episode, Vijay shares his journey working in cyber, including his time working at UniSuper with Anna, the value that one can bring when beginning a new role in an organisation, and his advice on engaging a board on cyber.

Vijay leads UniSuper's Information Security including Security Operations, Security Governance, Risk & Compliance, Security Strategy, Architecture & Design, Identity & Access Management, and Enterprise Observability. He leads a multi-year security program to reduce UniSuper security risk, thus protecting UniSuper members. Vijay has extensive experience negotiating clear and concise security and technology outcomes in regulatory, policy, and outsourcing agreements delivering value-creation opportunities. He has considerable, diverse national and international experience with extensive executive and Board level exposure. Previously he was leading Information security at Transurban, accountable for IT and OT security including accountability for PCI DSS compliance.

Links:

Vijay LinkedIn

For the full episode transcript, please visit our website.

Over several episodes, Anna and Claire will take turns sharing a chapter from their book, The Secure Board, in audiobook form, so you can hear how to be confident that your organisation is cyber safe.

In this episode, Anna shares the book's fifth chapter, Element 5, where Anna and Claire discuss understanding the role of the CISO, and if you need one.

Previous episodes:

Episode 64: Introduction to The Secure Board

Episode 70: Element 1 of The Secure Board

Episode 72: Element 2 of The Secure Board

Episode 73: Element 3 of The Secure Board

Episode 74: Element 4 of The Secure Board

In this week’s episode, Anna is joined again by Cosi Robinson, the Cyber Security Analyst within the Security Operations team and part of the Information Security team at UniSuper. In this sequel episode, Cosi continues sharing her unique experience of having her identity compromised, along with changing to a career in cyber security.

In her prior role as the Cyber Resilience & Education Analyst, Cosi assisted in developing creative ways to ensure cyber security was front of mind through communication and training to help educate, influence, and engage UniSuper employees about cyber security risks and their responsibilities relating to cyber security policies, standards, and controls. Cosi developed and ran phishing simulation campaigns, and training and analyzed and reported the statistics and success rates. She also monitored and identified top human risks and behaviours that required education to mitigate them and protect UniSuper. Cosi now works in the Security Operations team as the Cyber Security Analyst and performs the analysis of phishing emails reported. She is transitioning into this role to develop and further enhance her skills and expertise. She completed her Certificate IV in Cyber Security and previously worked as the Executive Assistant supporting the Chief Information Security Officer and Information Security team at UniSuper. In prior years, she has worked as an Executive Assistant at top ASX organisations.

Links:

Cosi LinkedIn

Part 1

For the full episode transcript, please visit our website.

In this week’s episode, Anna is joined by Cosi Robinson, the Cyber Security Analyst within the Security Operations team and part of the Information Security team at UniSuper. In this episode, Cosi shares her unique experience of having her identity compromised by a company that supplied a service to her.

In her prior role as the Cyber Resilience & Education Analyst, Cosi assisted in developing creative ways to ensure cyber security was front of mind through communication and training to help educate, influence, and engage UniSuper employees about cyber security risks and their responsibilities relating to cyber security policies, standards, and controls. Cosi developed and ran phishing simulation campaigns, and training and analyzed and reported the statistics and success rates. She also monitored and identified top human risks and behaviours that required education to mitigate them and protect UniSuper. Cosi now works in the Security Operations team as the Cyber Security Analyst and performs the analysis of phishing emails reported. She is transitioning into this role to develop and further enhance her skills and expertise. She completed her Certificate IV in Cyber Security and previously worked as the Executive Assistant supporting the Chief Information Security Officer and Information Security team at UniSuper. In prior years, she has worked as an Executive Assistant at top ASX organisations.

Links:

Cosi LinkedIn

For the full episode transcript, please visit our website. 

Over several episodes, Anna and Claire will take turns sharing a chapter from their book, The Secure Board, in audiobook form, so you can hear how to be confident that your organisation is cyber safe.

In this episode, Anna shares the book's fourth chapter, Element 4, where Anna and Claire discuss meaningful metrics, measurement, and reporting.

Previous episodes:

Episode 64: Introduction to The Secure Board

Episode 70: Element 1 of The Secure Board

Episode 72: Element 2 of The Secure Board

Episode 73: Element 3 of The Secure Board

Click here to discover the Top 3 questions we are asked by Boards and how we answer them.

Over several episodes, Anna and Claire will take turns sharing a chapter from their book, The Secure Board, in audiobook form, so you can hear how to be confident that your organisation is cyber safe.

In this episode, Claire shares the book's third chapter, Element 3, where Anna and Claire discuss creating a cyber safe business with a cyber security strategy.

Previous episodes:

Episode 64: Introduction to The Secure Board

Episode 70: Element 1 of The Secure Board

Episode 72: Element 2 of The Secure Board

Click here to discover the Top 3 questions we are asked by Boards and how we answer them.

Myth: You’ll never keep up with the pace of cyber risk. Fact: Planning provides a path forward.

In this episode, Claire discusses the importance of preparation before a cyber incident occurs. 

Click here to listen, or wherever you enjoy your podcasts.

To learn more about our Cyber Security Board Education online course click here. 

Click here to discover the Top 3 questions we are asked by Boards and how we answer them.