Shows
Talking Cyber SecurityEpisode 95 - Security Awareness - What works?In this episode, Richard has a deep dive into Security Awareness. What works? What doesn't?2025-07-0622 minTalking Cyber SecurityEpisode 94 - DLP Revisited Part 2In Episode 94, Richard concludes his in depth discussion about Data Loss Protection...or was that Data Loss Prevention. DLP by any other name.2025-06-0825 minTalking Cyber SecurityEpisode 93 - Data Loss Protection - revisitedRichard revisits the very important Cyber field of Data Loss Protection.2025-05-0430 minTalking Cyber SecurityEpisode 92 - Day 2 - Gartner Risk and Security Conference (Sydney)Richard completes his summary of the March 2025 Gartner Risk and Security Conference held in Sydney Australia.2025-03-2910 minTalking Cyber SecurityEpisode 91 - Day 1 of Gartner's Risk and Security Conference (Sydney)Richard describes Day 1 of Gartner's Sydney and Risk Conference held recently in Sydney.2025-03-1415 minTalking Cyber SecurityEpisode 90 - Introduction to Crisis and Incident ManagementIn this episode, Richard introduces basic concepts of Crisis and Incident Management. This is the first of a few episodes where Crisis and Incident Management will be discussed.2025-03-0113 minTalking Cyber SecurityEpisode 89 - Lessons I have learnt along the wayIn this episode, Richard discusses 10 lessons and approaches that will help you survive in cyber security.2025-01-2717 minTalking Cyber SecurityEpisode 88 - 2024 Talking Cyber Security RecapIn this episode, Richard covers the top 25 lessons derived from the 2024 Talking Cyber Security podcast.2025-01-0513 minTalking Cyber SecurityEpisode 87 - Leaning Forward - From 2024's stories to 2025's goalsIn this episode, Richard does a bit of a reflection of 2024, and prompts your thinking for the upcoming year.2024-12-2221 minTalking Cyber SecurityEpisode 86 - A bit of everything!In this episode, Richard covers various topics including CyberCon Melbourne 2024, 2 new starters in the Cyber industry, some cyber personalities and plans for 2025. Please excuse the sound quality - it's good but not as good as it usually is. Thanks for listening!2024-12-0811 minTalking Cyber SecurityEpisode 85 - BSides Melbourne 2024Richard describes his experiences of Day 1 at Melbourne BSides 2024.2024-11-1711 minTalking Cyber SecurityEpisode 84 - Q & A - Part 2Richard continues answering commonly asked security questions.2024-11-0419 minTalking Cyber SecurityEpisode 83 - Security Q & A - Part 1In this episode, Richard starts to answer many common security questions. More questions to come in future episodes.2024-10-2718 minTalking Cyber SecurityEpisode 82 - AISA CyberCon 2024In this episode, Richard mentions last episode's Essential 3 basic hygiene practices as well as touching on the upcoming AISA CyberCon 2024 Conference.2024-10-1919 minTalking Cyber SecurityEpisode 81 - Back to basicsIn this episode, Richard discusses 3 basic security hygiene activities that you're probably not doing as a diligent security staff member.2024-09-2812 minTalking Cyber SecurityEpisode 80 - Part 2 - Interviewing for less experienced security rolesIn this episode, Richard finishes his discussion regarding questions and answers to expect when interviewing for less experienced security roles.2024-09-1424 minTalking Cyber SecurityEpisode 79 - Part 1 - Interviewing for less experienced cyber rolesIn this episode, Richard discusses the types of questions you can expect in interviews if you are applying for "junior" roles.2024-09-0122 minTalking Cyber SecurityEpisode 78 - Be ready for the phone screening callIn this episode, Richard discusses with a friend the merits of doing 'phone screening' before the official interview process commences. It is amazing what can be gleaned during the screening process.2024-08-1427 minTalking Cyber SecurityEpisode 77 - Know your presentation styleIn this episode, Richard discusses the various presentation styles he has witnessed. Are you a newsreader? Are you a Storyteller? A Ted Talker or a Data Diver?2024-07-2719 minTalking Cyber SecurityEpisode 76 - Melbourne CISO 2024In this episode, Richard covers the recent Corinium Intelligence's Melbourne CISO 2024 and briefly mentions the recent world-wide IT outage.2024-07-2020 minTalking Cyber SecurityEpisode 75 - We all need a bit of patching from time to time.In this episode, Richard asks us all to consider personal patches we could apply to ourselves to improve our own performance.2024-07-1325 minTalking Cyber SecurityEpisode 73 - Your personal Balanced ScorecardMany of us use business "balanced scorecards", but have you ever thought of a personal scorecard for the work you do in Security? Richard tries to piece one together.2024-06-1010 minTalking Cyber SecurityEpisode 71 - Cracking the CISO Code - Revelations from the Interview RoomListen to Richard as he dissects CISO Interview questions and answers.2024-05-2025 minTalking Cyber SecurityEpisode 70 - The Imposter in the Mirror: Reflecting on Self-Perception in CybersecurityIn this episode, Richard discusses Imposter Syndrome and the Kruger-Denning Effect with respect to the cyber security industry.2024-05-0819 minTalking Cyber SecurityEpisode 69 - Artificial Intelligence RevisitedRichard revisits the current capabilities of AI voice capabilities. He runs the same dialogue against 3 AI voice tools to determine whether they have improved since his last AI voice experiment 11 months ago.2024-04-2811 minTalking Cyber SecurityEpisode 67 - Credential Stuffing - Part 3Richard and his guest Olly Stimpson (CyberArk) complete their discussion on credential stuffing.2024-04-2021 minTalking Cyber SecurityEpisode 67 - Credential Stuffing - Part 2Richard continues his discussion with Olly Stimpson from CyberArk around the protection measures available for credential stuffing.2024-04-1422 minTalking Cyber SecurityEpisode 66 - Credential Stuffing - Part 1In this episode, Richard discusses 'credential stuffing' with Olly Stimpson from CyberArk.2024-04-0824 minTalking Cyber SecurityEpisode 65 - Artificial IntelligenceIn this episode, Richard introduces the basics of Artificial Intelligence and has a good look at the EU Artificial Act introduced in March 2024.2024-04-0118 minTalking Cyber SecurityEpisode 64 - The Essential 8In this episode, Richard discusses the ASD's Essential 8 controls.2024-03-2014 minTalking Cyber SecurityEpisode 63 - Data Loss Protection Part 2Richard wraps up his discussion on DLP.2024-03-1023 minTalking Cyber SecurityEpisode 62 - DLP Part 1In Part 1, of a 2-part episode, Richard discusses all things Data Loss Protection (DLP).2024-03-0322 minTalking Cyber SecurityEpisode 61 - Recap Episodes 41 - 52In this episode, Richard provides the highlights of episodes 41 to 52.2024-02-2412 minTalking Cyber SecurityEpisode 60 - Recap Episodes 31 - 40Richard continues recapping his first 50 episodes. 2024-02-1805 minTalking Cyber SecurityEpisode 59 - Recap Episodes 21 - 30Richard reviews episodes 21 to 30 of Talking Cyber Security.2024-02-1109 minTalking Cyber SecurityEpisode 58 - Recap Episodes 11-20Richard summarizes the main points within each episode between 11 and 20.2024-02-0414 minTalking Cyber SecurityEpisode 57 - Recap Episodes 1-10Richard discusses the key points from the first 10 episodes of the 'Talking Cyber Security' podcast.2024-01-2920 minTalking Cyber SecurityEpisode 56 - Questions CISOs get askedIn this episode, Richard answers questions some CISOs get asked.2024-01-2119 minTalking Cyber SecurityEpisode 54 - Life as a Security Engineer with "John" - Part 2Richard and John continue to discuss Life as a Security Engineer.2024-01-0623 minTalking Cyber SecurityEpisode 53 - Life as a Security Engineer with "John" - Part 1In the first of a 3 part series, Richard finds out what the "Life of a Security Engineer" is like by interviewing his friend John.2023-12-3125 minTalking Cyber SecurityEpisode 52 - Louay Ghashash (Spartans Security) - Part 3/3Richard and Louay complete their discussion about all things security.2023-12-2328 minTalking Cyber SecurityEpisode 51 - Louay Ghashash - Part 2Richard and Louay Ghashash from Spartans Security continue their discussion and cover topics such as SOCs, 3rd party questionnaires, ISO 27001, risk based approaches, an analysis of security frameworks (NIST, Essential 8, ASD 35, ISO 27001) and other matters.2023-12-1625 minTalking Cyber SecurityEpisode 50 - Louay Ghashash - Spartans Security - Part 1Richard is Talking Cyber Security with Louay Ghashash from Spartans Security.2023-12-1022 minTalking Cyber SecurityEpisode 49 - Dr Marcus ThompsonIn this episode of Talking Cyber Security, Richard goes out and about and attends a cyber security get together with Retired Major General Dr Marcus Thompson.2023-12-0319 minTalking Cyber SecurityEpisode 47 - Australian Cyber Security StrategyRichard discusses the Australian Cyber Security Strategy.2023-11-2624 minTalking Cyber SecurityEpisode 46 - Board DashboardsIn this episode, Richard discusses Board Reporting, with emphasis on a Board Dashboard. 4 examples of his Board Dashboard are available to anyone. Listen to the episode to hear where to get your copy. 2023-11-1917 min
OccTokEpisode Six - Dr. Richard Heron, Heron Health ConsultingOn this episode of OccTok, Enterprise Health president, Jeff Donnell, talks to Dr. Richard Heron who owns Heron Health Consulting and advises organizations on work and health issues. Dr. Heron shares his experiences working in the occupational health field in various industries throughout his career.
2023-11-091h 01Talking Cyber SecurityEpisode 44 - Jason Murrell - Part 2Richard continues his cyber discussion with Jason Murrell.2023-11-0321 minTalking Cyber SecurityEpisode 43 - Jason MurrellIn this episode, Richard interviews Security advocate and presenter, Jason Murrell at a recent ADAPT Security event in Melbourne.2023-10-2824 minTalking Cyber SecurityEpisode 41 - AISA's CyberCon 2023 - Part 1In this episode, Richard describes Day 1 of the 3 day AISA's Cyber Conference 2023. Stay tuned for the next episode which covers days 2 and 3.2023-10-2220 minTalking Cyber SecurityEpisode 40 - S.O.A.P. incl ADAPT Security Edge ConferenceRichard's 'Security Out and About Podcast' episode where he covers the ADAPT Security Edge Conference in Melbourne.2023-10-1417 min
The Game Design Round Table#301 Design and Controls with Richard LemarchandDirk is joined by returning guest host Soren Johnson in today's episode in the Design Talk series. Dirk and Soren speak with Richard Lemarchand, distinguished game designer and now-professor most well-known for his work on the Uncharted series. Richard details his journey through his game design career, and the skills and processes he learned along the way. Special consideration is given to control design, and the importance of them on game feel and playability.2023-10-101h 01Talking Cyber SecurityEpisode 39 - Part 2 - Daisy Wong - Security Culture and Awareness LeadRichard completes his interview with Security Culture and Awareness Lead Daisy Wong. The discussion covers many topics. By all means -
Join 'The Australian CISO' LinkedIn group for upcoming downloads of information.
Feel free to join 'The Australian CISO Community' WhatsApp group to share ideas with people willing to help us all.
2023-10-0624 minTalking Cyber SecurityEpisode 36 - Nigel Phair - Part 1 - Melbourne BSidesIn Part 1, listen to Richard and Nigel 'free flow' with their conversation about Security which covers a variety of topics including BSides, CREST, Nigel's journey through Security, Board involvement, and Risk Management.2023-09-1619 minTalking Cyber SecurityEpisode 35 - BSides Melbourne 2023 WalkthroughDay 1 and Day 2 walk through of the magnificent BSides Melbourne 2023 hosted by SEEK.2023-09-1223 minTalking Cyber SecurityBSides Melbourne 2023 - Lukasz GogolkiewiczDay 1 of BSides Melbourne 2023 with Lukasz Gogolkiewicz from SEEK.2023-09-0918 minTalking Cyber SecurityEpisode 33 - S.O.A.P. !In this Security, Out and About Podcast, Richard covers Performance Appraisals, BSides, Passwords, the Optus Breach and unashamedly name drops a number of people. 2023-09-0322 minTalking Cyber SecurityEpisode 32 - Who was Kevin Mitnick?Richard describes some of Kevin Mitnick's life. Unfortunately, we lost the world's greatest social engineer in July 2023.2023-08-2714 minTalking Cyber SecurityEpisode 31 - General Security discussionsIn General Security Discussions, Richard covers security jobs, AI, dashboards, induction, CISO discussions and BSides Melbourne 2023.2023-08-2024 minTalking Cyber SecurityEpisode 30 - Interview - Tom Bull e2CyberRichard interviews Tom Bull - Principal Consultant at e2Cyber. We get to know Tom a little while Tom provides some tips about hire to nail that next job.2023-08-1212 minTalking Cyber SecurityEpisode 29 - Get yourself to CyberCon 2023!Richard tries to help Security newcomers and more experienced security personnel select sessions to attend at this great Conference. 2023-08-0622 minTalking Cyber SecurityEpisode 28 - Part A - General talk, In the News and Out and AboutRichard mentions a slightly new format of the podcast, the passing of Kevin Mitnick, the "Tribe" and urges people to take advantage of the 'early bird' pricing for CyberCon 2023.2023-07-3014 minTalking Cyber SecurityEpisode 27 - Part B - Cyber Crime Statistics Australia 2023In this episode, Richard summarises the lengthy 113 page "Cybercrime in Australia 2023" Statistics Report from The Australian Institute of Criminology. Admittedly he uses his friend Chat-GPT to help him2023-07-2310 minTalking Cyber SecurityEpisode 27 - Part A - General talk, Out and About and In the NewsIn this episode, Richard comments on the recent 'CISO Melbourne 2023' Conference run by Corinium Intelligence. He discusses some presentations and 'name drops' quite a bit! Richard gives the Conference a 'thumbs up'! Alas, he was not technically capable of uploading photos from this event. He'll work it out one day...2023-07-2219 minTalking Cyber SecurityEpisode 26 - Part B - Interview - Darren ArnottDarren Arnott, Head of Cyber Security and Operations at Trusted Impact and author, speaks to Richard about all things security. Darren has also written a fascinating book titled, "No regard for the truth".https://darrenarnott.com/2023-07-1611 minTalking Cyber SecurityEpisode 26 - Part A - General talk, Out and About and In the NewsRichard mentions his latest bike riding escapades, AC3, Sentinel One, CISO Melbourne 20234, CyberCon '23, Microsoft patching and safety within risk management.2023-07-1613 minTalking Cyber SecurityEpisode 25 - Part B - Cybercrime Statistics - Australia 2023The Australian Government has just released its "Cybercrime in Australia 2023" statistics report. See link below.It will be covered in depth in a future episode.https://www.aic.gov.au/sites/default/files/2023-07/sr43_cybercrime_in_australia_2023_v2.pdf2023-07-0903 minTalking Cyber SecurityEpisode 25 - Part A - General talk, Out and About and In the NewsRichard has an interesting security interaction in a Hospital and briefly mentions an interesting article related to security from The Age / Sydney Morning Herald July 8 2023.https://12ft.io/proxy?q=https%3A%2F%2Fwww.theage.com.au%2Fpolitics%2Ffederal%2Fthe-nightmare-cybersecurity-scenario-being-war-gamed-by-government-20230703-p5dlbk.html2023-07-0908 minTalking Cyber SecurityEpisode 24 - Part B - Showing value as a CISORichard discusses an easy way to show value to the Board.2023-07-0310 minTalking Cyber SecurityEpisode 24 - Part A - General talk, Out and About and In the NewsDiscussion of the upcoming CISO Melbourne 2023 Conference as well as general Security talk.2023-07-0114 minTalking Cyber SecurityEpisode 23 - Part B - Want to become a CISO? Be careful what you wish for!Hear the great aspects and pitfalls of being a CISO.2023-06-2622 minTalking Cyber SecurityEpisode 23 - Part A - General talk, Out and About and In the NewsGeneral Security Talk including Proofpoint's 2023 Voice of the Survey.www.proofpoint.comtheaustralianciso@gmail.com2023-06-2513 min
The 12 Minutes of Workplace Health PodcastConvincing and converting senior leaders with Dr Richard HeronIn this episode of The 12 Minutes of Workplace Health Podcast, Harry Bliss, Co-founder of Champion Health, talks with Dr Richard Heron, former Vice President of health at BP, about the future of workplace health, wellbeing strategies, and engaging senior leadership teams in wellbeing. The discussion focuses on the challenge of converting senior leadership teams to prioritise wellbeing and how Richard has achieved success in this during his career.
2023-06-2014 minTalking Cyber SecurityEpisode 22 - Part B - CyberCon 2023Richard talks about what to expect at the MUST ATTEND Cyber Conference 2023. theaustralianciso@gmail.comhttps://cyberconference.com.au/https://www.aisa.org.au/2023-06-1812 minTalking Cyber SecurityEpisode 22 - Part A - General talk, Out and About and In the NewsJoin Richard as we hear general Security talk and what's been happening in the world of Security. Richard has one interesting story concerning an insider who thought he'd join the ransomware bandwagon... 2023-06-1810 minTalking Cyber SecurityEpisode 21 - Part B - Board Reporting and Questions to ask in your first 30 daysRichard briefly touches on Board Reporting before getting stuck right into the questions YOU need to ask your new company in the first 30 days.2023-06-1218 minTalking Cyber SecurityEpisode 21 - Part A - General talk, Out and About and In the NewsJoin Richard as we hear general Security talk and what's been happening in the world of Security.2023-06-1113 minTalking Cyber SecurityEpisode 20 - Part B - Quick WinsRichard addresses a listener's request to provide them with 5 quick wins once you start in a new Security role. Richard provides 5 and a few more... 2023-06-0420 minTalking Cyber SecurityEpisode 20 - Part AIn Part A, Richard discusses Security in general, includes his "Out and About" section and emails he has received. Watch out for Part B - which discusses Quick Wins in a Security environment.2023-06-0413 minTalking Cyber SecurityEpisode 19 - Risk Management and a little about AI.Richard discusses Risk Management and how most of us have probably been applying it incorrectly. In other news, Richard's back from interstate talking with customers and security people. And of course, Richard announces a surprise during the podcast.2023-05-2822 minTalking Cyber SecurityEpisode 18 - 10 things you've got to do NOW!This is a wake up call to CISOs, Head of Security and Security Managers. The podcast contains a rundown of some really important tasks you really need to consider...NOW!2023-05-2127 minTalking Cyber SecurityEpisode 17 - CISO PerspectivesHow would you answer these 3 questions -
How do you determine whether a CISO is doing a good job?
What 5 questions would you ask a CISO at an interview and how would you answer them?
What advice would you give a CISO?
Listen as Richard relays an associate's answers to these 3 questions. The ending will surprise you!2023-05-1419 minTalking Cyber SecurityEpisode 16 - Even more interviews!Ever been yelled at during an interview? Richard has! Listen to these stories and see how many you can relate to.AISAs submission to the Government here.2023-05-0725 minTalking Cyber SecurityEpisode 15 - World Password Day - 4 MayThis is just a short episode highlighting the importance of passwords including some resources to help you.2023-05-0308 minTalking Cyber SecurityEpisode 14 - More about interviewsRichard discusses some interesting interview situations he has been involved in. There are lessons for all in these stories.2023-04-3021 minTalking Cyber SecurityEpisode 13 - CISO Interviews Part 2Hear the common questions asked at a CISO or Head of Security interview with suggested answers. Hopefully these hints will help you get that job!2023-04-2420 minTalking Cyber SecurityEpisode 12 - CISO Interviews - Part 1In Part 1 of "CISO Interviews", this episode provides guidelines for applying for CISO/ Head of Security roles. Following these guidelines will optimise your chances of being interviewed for a CISO or Head of Security position. Tune in to Part 2 to help you prepare for the interview!2023-04-1722 minTalking Cyber SecurityEpisode 11 - 10 years on. What have we learnt from the 2013 Target US breach?In December 2013, Target US experienced a significant data breach. 70 million customer records and 40 million credit and debit records were exfiltrated. Richard walks through the findings from 2013, and asks listeners to consider whether they have addressed the vulnerabilities that gave rose to the 2013 breach. TheAustralianCISO@gmail.com2023-04-1220 minTalking Cyber SecurityEpisode 10 - Security Scorecard. How good is this software!In this episode, Richard talks about -
Uber’s 3 data breaches in the last 6 months,
an “Admin Admin” exposure,
how Microsoft Co-Pilot is likely to explode over the next 12 months,
how 'Security Scorecard' could significantly help your 3rd party assessments as well as your own environment.
Richard Heron - TheAustralianCISO@gmail.com2023-04-0716 minTalking Cyber SecurityEpisode 9 - Interview with Veronica HallListen to Richard interview Veronica Hall as she recounts her journey from Engineer to Audit to Security while assisting listeners on their journey through Security.2023-04-0217 minTalking Cyber SecurityA quick note about Interviews on this podcastJust a quick note from Richard acknowledging that any statements made on the Podcast by the people being interviewed (or by Richard) are their own opinion. They do not necessarily represent the opinion of the companies that the interviewees or Richard are employed by.2023-04-0201 minTalking Cyber SecurityEpisode 8 - Ring, ring, why don't you give me a call?In this episode, Richard provides -
detailed advice how to map out your security career to achieve your goal(s) quicker and
provides criteria to help you analyse potential roles against your set goal(s).
This episode is a must for ambitious security personnel. At the end of the episode he summarises both approaches.2023-03-2819 minTalking Cyber SecurityEpisode 7 - 3rd Party Questionnaires and a PII StandardIn this episode, Richard discusses the merits of 3rd Party Questionnaires and has a "call to action" regarding a Personally Identifiable Information Data Security Standard (well...legislation really). Richard also gives listeners a "heads up" on a future episode regarding 2 phone calls he recently received...the analysis of which will help you realise whether you are on the 'right path'. 2023-03-2617 minTalking Cyber SecurityEpisode 6 – Updates, Breaches and ‘out and about’In this episode, Richard tries out his new microphone and provides his viewpoint on the ongoing breaches that are occurring in Australia. He discusses the transition from ‘name and shame’ (which occurred in the past) to the present day support for organisations and security teams that have incurred a security breach. Richard also discusses a cyber meeting he attended and provides the key points discussed. A quick analysis of the first 5 episodes of The Australian CISO is discussed. Some of the countries where people listen to this podcast are quite amazing… 2023-03-1919 minTalking Cyber SecurityEpisode 5 - The Conference - 2 interviewsEpisode 5 is a continuation of Episode 4. 2 attendees are interviewed. One CISO and one aspiring CISO.2023-03-1318 min
Nighttime on Still WatersThe Christmas HeronSend us a textIt’s Christmas Eve and the perfect time for a canal-side story. Have you ever heard of the Christmas Heron? No? Well, there’s probably a very good reason for that, but I will tell it to you anyway. So, curl up in your special armchair by the stove and I will tell you all about the Christmas Heron.Journal entry: 24th December, Saturday (Christmas Eve).“Christmas Eve dawns with a silvered light. The canal is mirror calm.A choir of rook song. A lone s...2022-12-2445 min