CSCP S3EP24 - Ollie Whitehouse - Vulnerabilities - SBOM and the evolution of the Cyber ned

<p></p> <p> </p> <p class="p1">Ollie Whitehouse is the founder BinaryFirefly a boutique British cyber advisory firm with a career spanning over 25 years in applied cyber attack and defence. Ollie's portfolio of advisory positions today includes science advisory positions for UK Government as a member of the Science Advisory Councils for the Home Office and Police, Industry 100 within the National Cyber Security Centre and various Non-Executive Directorships. His operational tenures include over ten and half years at NCC Group where he was Group CTO until the end of 2022, BlackBerry and Symantec. Ollie has given oral evidence to the UK Parliament Joint Committee on the National Security Strategy twice in 2017 and 2022 on matters related to cyber security.</p> <p class="p1"> </p> <p>The episode is brought to you by Phoenix Security; get in control of your vulnerabilities from code to cloud with the power of Phoenix. ACT Now on the vulnerabilities that matter most and reduce your exposure to modern attacks. See it for yourself. Go to <a href='https://www.phoenix.security'>https://www.phoenix.security</a> for a free 14-day licence.</p> <p class="p1"> </p> <p class="p2"> </p> <p class="p1">2:00 - Career and dot com</p> <p class="p1">3:00 - Pen-testing and philosophy </p> <p class="p1">5:00 - Business and Cybersecurity and role of the cyber NED</p> <p class="p1">9:00 - CISO</p> <p class="p1">10:00 - Executive understanding </p> <p class="p1">12:00 - Cybersecurity technicalities - Pen tests and regulation</p> <p class="p1">16:00 - Cybersecurity and regulation in the USA</p> <p class="p1">19:00 - SBOM, Digital Software supply chain</p> <p class="p1">22:00 - Regulators, Board and how they think </p> <p class="p1">26:00 - Assets, different opinions based on generation</p> <p class="p1">30:00 - Non exec hands-on startups vs later stage </p> <p class="p1">35:00 - policy and frameworks, and assessing, quantifying the net value of a control</p> <p class="p1">40:00 - Software vs infrastructure breach why more on software </p> <