True security isn't a checklist and treating it like a bureaucratic exercise will leave your business exposed.

In this episode of the Insight Exchange, we map the evolution and future of cybersecurity with David Lacey.

David Lacey FBCS, CITP is an Information Security Hall of Famer, with a career spanning over three decades. His pioneering work formed the foundations of what became ISO 27001.

While regulatory compliance is often seen as a necessary bureaucratic evil, Lacey argues that real defence required abandoning outdated network perimeters and shifting focus to the application and data levels.

From the wild west days of corporate espionage via floppy disk to the escalating threats posed by artificial intelligence, we explore why the industry must continuously adapt.

Key Takeaways:

• The Origins of ISO 27001: How the world's leading security standard was born out of a desperate lack of proven, quantifiable risk management practices in the 1990s.
• De-perimeterisation: Why the era of network-level security is over, and why organisations must shift their defensive perimeters directly to the data.
• Compliance vs Real Security: Why ticking regulatory boxes won't stop hackers, and how to build the bespoke defences your systems need.
• AI as a Threat Channel: How artificial intelligence is accelerating automated attacks, and why the industry must adopt inclusive, agile governance to keep pace.
• The Power of Professionalism: Why accreditations are vital for building trust across globally connected supply chains.

Hosted on Acast. See acast.com/privacy for more information.