THE INTRO
- We are excited to hear that Apple has increased their bug bounty for security researchers to $1M- We also look at the role research plays in our industry includingo The start of our industry in 1971o Who is doing research today- It’s great that we have an academic on the show today to talk to us about their research and how the cyber security community can get more engaged with academia
THE CHAT
is a qualitative researcher who uses creative engagement methods to explore everyday practices of information production, protection, circulation, curation and consumption within and between communities. She took up a full-time academic post in 2008 and prior to joining Royal Holloway University of London she worked for 18 years as an information security practitioner. Lizzie’s focus is the intersection between perceptions and narratives of individual and community security and technological security. Her research specialises in public and community service design and consumption. Lizzie is currently an EPSRC research fellow with a research programme in everyday security and digital service design.Professor Lizzie Coles Kemp 
We talk about- How Lizzie landed in Information Security in 1990 because she spoke Swedish and why she enjoys security- Why cybersecurity professionals are diverse and why it is important- How design thinking tools can be use in cybersecurity including storytelling, using different mediums - story boarding, lego, and forms of physical modelling to represent security to think through all the things that contribute to a secure interaction etc- The importance of bringing together different thinking and ways of solving the problem- Why we need to ask the question from different angles and ask the fundamental questions – why does it work (as well as what doesn’t work)- How do we actually use design thinking? Lizzie walks through an example on where engagement on security awareness training is low and how you could use design thinking to understand the everyday of those not engaging with the training. It allows us to take a step back.- An overview of the ‘You Shape Security’ program Lizzie had worked on with the NCSC- The need to work with and not work against and understand the benefit as well as the benefit gaps you need to resolve of a security measure (technology, policy, service).- How you can scale capacity of these kind of engagements as they are low fidelity- Why this sort of thinking is a great bridge to other parts of the organisationo Research has show security practitioners spend a lot of time interacting and communicating but the framing/language is alien to those outside of securityo Design tools are a useful bridge into the other world as they don’t use specialist language and why HR, Product Designers, CEOs, the board like these engagements as they help them to understand what is going on, on the front lineso They help to highlight the creativity and the positive (as well as the negative and the blockages). Security can be both negative AND positive- Lizzie touches briefly on her work in Sweden on the digitisation programs – how digitisation changes how decisions are made, where the processes happen and frees up spaces, so that we can have other interactions (there) so that we can start to work with people to understand better their information flows and the benefits they get.- Lizzie works us through how we can better engage with academia – to imagine different futures through design café, sprints and workshops in spaces that help us to build a more creative toolkit to think about different types of security challenges and the only way we can do this is by working together.o Lizzie would love to work together more not in solution mode but in imagining different futureso Lizzie talks about the great example of the security practice conference and how the teams from different areas came up with different ideas on how to go forward. These are the sort of activities that will spark new and interesting academia and security practice collaborations- Lizzie will be in Australia in September for 3 weeks and loves our open nature and willingness to embrace new ideas- Why Lizzie thinks Australia has such a fantastic capability around civil resilience around bush fires, food security and environmental and how Lizzie thinks Australia could lead the world in resilience thinking
THE DEBRIEF
- Our key takeaways from the chat includingo The potential of Australia when it comes to cyber resilienceo The need to identify (and work on) those benefit gaps when it comes to people’s view on a security control, policy or serviceo The way we can use design thinking to help us solve problems in cyber security

How to follow Lizzie:Email: Lizzie.Coles-Kemp@rhul.ac.uk
CREDITS
Guest: Professor Lizzie Coles KempHosts: Beverley Roche and Louisa VogelenzangProducer/Editor: Louisa VogelenzangSound Producer: Darcy Milne (Propodcastproduction.com)
RESEARCH
Where cybersecurity began – with a research project! https://www.cybersecurity-insiders.com/a-brief-history-of-cybersecurity/
The cybersecurity Cooporative research centre in Australia https://www.cybersecuritycrc.org.au
10 signs that you aren’t suited to a career in cyber security https://www.techrepublic.com/article/10-signs-you-arent-cut-out-to-be-a-cybersecurity-specialist/
NCSC ‘origins’ research into cybersecurity background that Lizzie mentioned https://www.ncsc.gov.uk/blog-post/origin-stories
Professor Lizzie Coles Kemp’s YouTube on ‘Digital security for all’ https://www.youtube.com/watch?v=tL-K0yM4PLA
NCSC ‘You Shape Security’ booklets that Lizzie mentioned https://www.ncsc.gov.uk/collection/you-shape-security
Digitizing Sweden (also mentioned by Lizzie:https://www.mckinsey.com/featured-insights/europe/digitizing-sweden-opportunities-and-priorities-in-five-ecosystems


CONTACT THE CYBERSECURITY CAFÉ
Join our LinkedIn Group https://www.linkedin.com/company/the-cybersecurity-café
Email us:
louisa@cybersecuritycafe.com.aubeverley@cybersecuritycafe.com.au
Visit our website: https://www.cybersecuritycafe.com.au
Want to be on the show? Send us your bio and an overview on what you want to chat about and we’ll be in touch asap.
We also welcome guest suggestions – in particular we’d love to hear from new voices in the industry who have new ideas to share about the human side of security.

<div>THE INTRO</div><div><br></div><div>- We are excited to hear that Apple has increased their bug bounty for security researchers to $1M</div><div>- We also look at the role research plays in our industry including</div><div>o The start of our industry in 1971</div><div>o Who is doing research today</div><div>- It’s great that we have an academic on the show today to talk to us about their research and how the cyber security community can get more engaged with academia</div><div><br></div><div>THE CHAT</div><div><br></div><div>is a qualitative researcher who uses creative engagement methods to explore everyday practices of information production, protection, circulation, curation and consumption within and between communities. She took up a full-time academic post in 2008 and prior to joining Royal Holloway University of London she worked for 18 years as an information security practitioner. Lizzie’s focus is the intersection between perceptions and narratives of individual and community security and technological security. Her research specialises in public and community service design and consumption. Lizzie is currently an EPSRC research fellow with a research programme in everyday security and digital service design.Professor Lizzie Coles Kemp </div><div><br></div><div>We talk about</div><div>- How Lizzie landed in Information Security in 1990 because she spoke Swedish and why she enjoys security</div><div>- Why cybersecurity professionals are diverse and why it is important</div><div>- How design thinking tools can be use in cybersecurity including storytelling, using different mediums - story boarding, lego, and forms of physical modelling to represent security to think through all the things that contribute to a secure interaction etc</div><div>- The importance of bringing together different thinking and ways of solving the problem</div><div>- Why we need to ask the question from different angles and ask the fundamental questions – why does it work (as well as what doesn’t work)</div><div>- How do we actually use design thinking? Lizzie walks through an example on where engagement on security awareness training is low and how you could use design thinking to understand the everyday of those not engaging with the training. It allows us to take a step back.</div><div>- An overview of the ‘You Shape Security’ program Lizzie had worked on with the NCSC</div><div>- The need to work with and not work against and understand the benefit as well as the benefit gaps you need to resolve of a security measure (technology, policy, service).</div><div>- How you can scale capacity of these kind of engagements as they are low fidelity</div><div>- Why this sort of thinking is a great bridge to other parts of the organisation</div><div>o Research has show security practitioners spend a lot of time interacting and communicating but the framing/language is alien to those outside of security</div><div>o Design tools are a useful bridge into the other world as they don’t use specialist language and why HR, Product Designers, CEOs, the board like these engagements as they help them to understand what is going on, on the front lines</div><div>o They help to highlight the creativity and the positive (as well as the negative and the blockages). Security can be both negative AND positive</div><div>- Lizzie touches briefly on her work in Sweden on the digitisation programs – how digitisation changes how decisions are made, where the processes happen and frees up spaces, so that we can have other interactions (there) so that we can start to work with people to understand better their information flows and the benefits they get.</div><div>- Lizzie works us through how we can better engage with academia – to imagine different futures through design café, sprints and workshops in spaces that help us to build a more creative toolkit to think about different types of security challenges and the only way we can do this is by working together.</div><div>o Lizzie would love to work together more not in solution mode but in imagining different futures</div><div>o Lizzie talks about the great example of the security practice conference and how the teams from different areas came up with different ideas on how to go forward. These are the sort of activities that will spark new and interesting academia and security practice collaborations</div><div>- Lizzie will be in Australia in September for 3 weeks and loves our open nature and willingness to embrace new ideas</div><div>- Why Lizzie thinks Australia has such a fantastic capability around civil resilience around bush fires, food security and environmental and how Lizzie thinks Australia could lead the world in resilience thinking</div><div><br></div><div>THE DEBRIEF</div><div><br></div><div>- Our key takeaways from the chat including</div><div>o The potential of Australia when it comes to cyber resilience</div><div>o The need to identify (and work on) those benefit gaps when it comes to people’s view on a security control, policy or service</div><div>o The way we can use design thinking to help us solve problems in cyber security</div><div><br></div><div><br></div><div>How to follow Lizzie:</div><div>Email: Lizzie.Coles-Kemp@rhul.ac.uk</div><div><br></div><div>CREDITS</div><div><br></div><div>Guest: Professor Lizzie Coles Kemp</div><div>Hosts: Beverley Roche and Louisa Vogelenzang</div><div>Producer/Editor: Louisa Vogelenzang</div><div>Sound Producer: Darcy Milne (Propodcastproduction.com)</div><div><br></div><div>RESEARCH</div><div><br></div><div>Where cybersecurity began – with a research project! <a href="https://www.cybersecurity-insiders.com/a-brief-history-of-cybersecurity/" target="_blank">https://www.cybersecurity-insiders.com/a-brief-history-of-cybersecurity/</a></div><div><br></div><div>The cybersecurity Cooporative research centre in Australia <a href="https://www.cybersecuritycrc.org.au/" target="_blank">https://www.cybersecuritycrc.org.au</a></div><div><br></div><div>10 signs that you aren’t suited to a career in cyber security <a href="https://www.techrepublic.com/article/10-signs-you-arent-cut-out-to-be-a-cybersecurity-specialist/" target="_blank">https://www.techrepublic.com/article/10-signs-you-arent-cut-out-to-be-a-cybersecurity-specialist/</a></div><div><br></div><div>NCSC ‘origins’ research into cybersecurity background that Lizzie mentioned <a href="https://www.ncsc.gov.uk/blog-post/origin-stories" target="_blank">https://www.ncsc.gov.uk/blog-post/origin-stories</a></div><div><br></div><div>Professor Lizzie Coles Kemp’s YouTube on ‘Digital security for all’ <a href="https://www.youtube.com/watch?v=tL-K0yM4PLA" target="_blank">https://www.youtube.com/watch?v=tL-K0yM4PLA</a></div><div><br></div><div>NCSC ‘You Shape Security’ booklets that Lizzie mentioned <a href="https://www.ncsc.gov.uk/collection/you-shape-security" target="_blank">https://www.ncsc.gov.uk/collection/you-shape-security</a></div><div><br></div><div>Digitizing Sweden (also mentioned by Lizzie:</div><div><a href="https://www.mckinsey.com/featured-insights/europe/digitizing-sweden-opportunities-and-priorities-in-five-ecosystems" target="_blank">https://www.mckinsey.com/featured-insights/europe/digitizing-sweden-opportunities-and-priorities-in-five-ecosystems</a></div><div><br></div><div><br></div><div><br></div><div>CONTACT THE CYBERSECURITY CAFÉ</div><div><br></div><div>Join our LinkedIn Group <a href="https://www.linkedin.com/company/the-cybersecurity-caf%25C3%25A9" target="_blank">https://www.linkedin.com/company/the-cybersecurity-café</a></div><div><br></div><div>Email us:</div><div><br></div><div><a target="_blank">louisa@cybersecuritycafe.com.au</a></div><div><a target="_blank">beverley@cybersecuritycafe.com.au</a></div><div><br></div><div>Visit our website: <a href="https://www.cybersecuritycafe.com.au/" target="_blank">https://www.cybersecuritycafe.com.au</a></div><div><br></div><div>Want to be on the show? Send us your bio and an overview on what you want to chat about and we’ll be in touch asap.</div><div><br></div><div>We also welcome guest suggestions – in particular we’d love to hear from new voices in the industry who have new ideas to share about the human side of security.</div>

Interested in staying safe online or a cyber security professional? Leading cyber security consultant and advisor, Beverley Roche talks to global experts, academics and researchers to provide insights on the issues impacting the cyber security profession and our connected life. If you're interested in updates on current professional practice or protecting your online experience against criminal or unauthorised access, this podcast will help you with tips to protect your online identity and data.

Bringing you the experts, the insights and the research impacting the cyber security profession today.

Cyber Security Café

<p>Interested in staying safe online or a cyber security professional? Leading cyber security consultant and advisor, Beverley Roche talks to global experts, academics and researchers to provide insights on the issues impacting the cyber security profession and our connected life. If you're interested in updates on current professional practice or protecting your online experience against criminal or unauthorised access, this podcast will help you with tips to protect your online identity and data.</p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>

THE INTRO
- We are excited to hear that Apple has increased their bug bounty for security researchers t...

How we can imagine different futures for cybersecurity using design thinking, how it helps us to build bridges with the business and why we should work more closely with academics with Professor Lizzie Coles Kemp

Advertisement