#304 Julie Nicholson: Cyber Security Is A Team Sport

They've taken the advice, they've put all the spend in.

Why do breaches still keep on happening, Julie? And I'm not saying we're buying it, but...

Yeah, no, I know.

Why do they keep on happening?

You know what? Nothing's ever going to be 100% in this day and age.

You've got, you know, the introduction of AI.

The attackers are now, you don't have to be fully skilled in coding and whatever you're gonna do to the next malware version you're gonna send out.

Don't need that anymore.

You've got AI that can do that for you.

It's scary what could be achievable by it, I think, but it's being ahead of that and being prepared of that, making sure that we talk about what can you have in place nothing's 100 i'm not going to sit here and say that we could ever protect anyone 100 anyone that does that is not telling the truth because it's something new is going to happen within a couple of days when there's a new zero there's a new bridge yeah

what's the biggest lesson that you've learned from helping customers through these cyber incidences

I think be prepared, be prepared.

You know, you hear some stories and it's heartbreaking when you see organisations, what they have to go through, because it's not just the business effect, it's the effect that it has on the people that are dealing with it, you know, impacting their home lives.

You know, it takes over, it can take over.

So

being prepared, I think having the business aware that what would you do when it happens? We put all these tools in place, it's great, but what are you going to do when it happens? Who's going to be involved? Which people are going to be involved? What process have you got? What's your next step? What's your communication? Sometimes people can't communicate.

If they're shut down and locked off, they can't communicate.

So my advice is just be prepared before anything.

Just consider that, especially at board level.

You know, just thinking about what would we do in the event of a breach? What is our plan? Where would we go from breach to back up and running? What are those steps and who would we involve? Have an instant response plan in place because some organisations that we've seen in the news didn't have it, haven't had it.

So that's a key message that I think I'd like people to learn.

Please try and just think about it and prepare for it.

Do

you think it's almost not if, but when now that you're going to probably get attacked? To some level, to

some level.

They've taken the advice, they've put all the spend in.

Why do breaches still keep on happening, Julie? And I'm not saying we're buying it, but...

Yeah, no, I know.

Why do they keep on happening?

You know what? Nothing's ever going to be 100% in this day and age.

You've got, you know, the introduction of AI.

The attackers are now, you don't have to be fully skilled in coding and whatever you're gonna do to the next malware version you're gonna send out.

Don't need that anymore.

You've got AI that can do that for you.

It's scary what could be achievable by it, I think, but it's being ahead of that and being prepared of that, making sure that we talk about what can you have in place nothing's 100 i'm not going to sit here and say that we could ever protect anyone 100 anyone that does that is not telling the truth because it's something new is going to happen within a couple of days when there's a new zero there's a new bridge yeah

what's the biggest lesson that you've learned from helping customers through these cyber incidences

I think be prepared, be prepared.

You know, you hear some stories and it's heartbreaking when you see organisations, what they have to go through, because it's not just the business effect, it's the effect that it has on the people that are dealing with it, you know, impacting their home lives.

You know, it takes over, it can take over.

So

being prepared, I think having the business aware that what would you do when it happens? We put all these tools in place, it's great, but what are you going to do when it happens? Who's going to be involved? Which people are going to be involved? What process have you got? What's your next step? What's your communication? Sometimes people can't communicate.

If they're shut down and locked off, they can't communicate.

So my advice is just be prepared before anything.

Just consider that, especially at board level.

You know, just thinking about what would we do in the event of a breach? What is our plan? Where would we go from breach to back up and running? What are those steps and who would we involve? Have an instant response plan in place because some organisations that we've seen in the news didn't have it, haven't had it.

So that's a key message that I think I'd like people to learn.

Please try and just think about it and prepare for it.

Do

you think it's almost not if, but when now that you're going to probably get attacked? To some level, to

some level.