Afleveringen
-
In this episode of the Secure and Simple Podcast, we delve into the secrets of becoming a subject matter expert and thriving as a consultant. Our special guest, Tudor Galos, shares his transition from a marketing role at Microsoft to establishing his AI and GDPR consultancy. We explore the power of providing valuable content, maintaining positive client experiences, and navigating the growing field of AI governance. Packed with insights on marketing strategies, building trust, and dominating your niche, this episode is a must-watch for cybersecurity (and other) consultants.
Links from the episode:
(00:00) - Interview with Tudor Galos(01:11) - Transition from Corporate to Entrepreneurship(03:40) - Offering Free Consultations to Build a Brand(07:48) - Focusing on Small and Medium-Sized Clients(12:20) - Building Trust and Securing Clients(20:45) - The Importance of Specialization(24:37) - Expanding into AI Governance(35:05) - Pricing Strategies for Consultants(37:45) - The Future of Consulting in the AI Era(42:23) - Advice for Aspiring Consultants(44:42) - Resources for Consultants
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertize to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account -
In this episode of the Secure and Simple Podcast, host Dejan Kosutic speaks with Bevan Lane, CEO of InfoSec Advisory Group. Bevan shares his journey from starting as an independent contractor to building a successful cybersecurity consultancy with offices in South Africa and London, and clients across five continents. Learn about his approach to scaling the business, including hiring passionate young talent, leveraging automation, and adapting to industry changes. Bevan also discusses the importance of balancing work and family life and provides valuable advice for aspiring consultants. Stay tuned for insights on the future of cybersecurity consulting and more.
Links from the episode:
(00:00) - Interview with Bevan Lane(03:11) - Hiring and Training the Right People(06:26) - Mentorship and Structured Training(09:34) - Challenges of Retaining Talent(10:55) - CEO's Role and Company Growth Strategy(14:22) - Impact of AI on Consulting and Auditing(17:49) - Finding and Partnering with Clients(22:45) - Leveraging LinkedIn for Business Growth(27:02) - Challenges in Consultancy(30:29) - Balancing Work and Personal Life(35:23) - Future of Consulting and Auditing(40:27) - Advice for Aspiring Consultants(42:54) - Resources for Consultants
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertise to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account -
Zijn er afleveringen die ontbreken?
-
In this episode of the Secure and Simple Podcast, host Dejan Kosutic interviews Philippe Cornette, an interim CISO and founding partner at DigiSôter consultancy, to discuss the challenges and opportunities in cybersecurity consulting. They delve into the importance of aligning cybersecurity projects with business value, the evolving nature of cybersecurity frameworks like NIS2, and the critical skills consultants need to succeed. Philippe shares his journey from working as an employee for over two decades to becoming a consultant and offers valuable insights into how consultants can make a significant impact in this ever-changing field.
Links from the episode:
(00:00) - Interview with Philippe Cornette(03:33) - The Role of a Chief Troubleshoot Officer(05:15) - Understanding NIS2 Directive(09:35) - Aligning Business with Cybersecurity(13:38) - The Importance of Business Risk Analysis(15:44) - Challenges in IT and OT Convergence(17:02) - Consultant's Role in Cybersecurity Projects(26:41) - Expertise and Change Management in Cybersecurity(29:22) - Navigating EU Regulations(33:04) - Consulting Opportunities in Cybersecurity(36:05) - The Future of Consulting with AI(41:40) - CISO as a Service Explained(47:35) - Competing in the Consulting Market(56:23) - Resources for Consultants
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertize to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account -
In this episode of the Secure and Simple Podcast, host Dejan Kosutic welcomes Cristos Velasco, an independent consultant and associate professor specializing in cyber law, cybercrime, cybersecurity, and AI. They discuss the new EU electronic evidence package published in August 2023 and its enforcement in 2026, diving into the regulation, the directive, and its implications for law enforcement and service providers. Cristos shares his journey into consultancy, the significance of electronic evidence and digital forensics, and the challenges presented by rapidly changing technologies and legislation. They also explore the benefits for companies preparing for these new regulations and offer advice for aspiring consultants in the cybersecurity field.
Links from the episode:
(00:00) - Interview with Cristos Velasco(01:05) - Cristos Velasco's Career Journey(03:10) - Understanding Electronic Evidence(06:11) - Challenges in Preserving Blockchain Evidence(09:01) - Upcoming EU Electronic Evidence Package(11:55) - Preparing for the New EU Package(18:48) - Digital Forensics vs. Electronic Evidence(20:57) - Freezing Digital Evidence: Importance and Challenges(22:35) - Legal Complexities in Data Retention and Preservation(24:35) - Technical and Organizational Aspects of Evidence Preservation(31:51) - Chain of Custody in Digital Evidence(38:40) - Consulting and Training in Cybersecurity(45:02) - Resources for Consultants
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertize to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account -
In this episode of the Secure and Simple Podcast, host Dejan Kosutic welcomes independent cybersecurity consultant and Cyber JA podcast host, Richea Perry. Richea shares his journey from facing job loss during COVID-19 to becoming a successful consultant by leveraging online courses on platforms like Udemy. He discusses the importance of building a personal brand, creating valuable content, and how networking on LinkedIn and other platforms can lead to consulting opportunities. Richea also provides insights into the use of AI in course creation, effective communication skills, and the future of online education in cybersecurity. Tune in to learn best practices for building a portfolio of online courses and using them to support your consulting practice.
Links from the episode:
(00:00) - Interview with Richea Perry(01:10) - Journey to Becoming a Consultant(04:15) - Transition from Technical to Consulting(06:25) - Starting with Udemy Courses(10:43) - Developing Course Content(20:18) - Using AI in Course Creation(23:24) - Recording Courses Efficiently(26:25) - Editing Tools(28:13) - Promoting Your Courses(31:50) - Monetizing and Business Model(34:40) - Choosing the Right Platform(36:35) - Future of Online Training and AI(41:04) - Essential Skills for Consultants(45:22) - Final Recommendations (48:28) - Additional Resources for Consultants
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertize to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account -
In this episode of the Secure and Simple Podcast, host Dejan Kosutic interviews Punit Bhatia, founder of FIT4Privacy Consulting Company, author of 4 books on GDPR, and host of the FIT4Privacy podcast. Punit shares his journey from working at a bank to becoming a leading consultant in privacy and AI governance. He discusses the importance of content marketing, personal branding, and consistency in building a consultancy business. Punit also provides insights into how creating expert materials, publishing books, speaking at events, and maintaining a presence on platforms like YouTube and LinkedIn have contributed to his success. Tune in to learn best practices for promoting your consultancy and establishing a strong professional network.
Links from the episode:
(00:00) - Interview with Punit Bhatia(01:02) - Starting a Consulting Career: Punit's Journey(03:47) - The Freedom of Being an Independent Consultant(04:36) - Building an International Clientele(07:33) - Visibility and Content Marketing Strategies(13:02) - Effective Use of Social Media Channels(18:14) - The Podcast Journey(23:21) - Leveraging Content for Business(25:49) - The Role of Books in Brand Building(27:39) - The Importance of Consistency(34:53) - Expanding Expertise to AI(36:45) - Future of AI and Privacy Standards(39:56) - Final Thoughts and Recommendations(41:13) - Useful Resources for Consultants
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertize to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account -
In this insightful episode of the Secure and Simple Podcast, host Dejan Kosutic discusses the evolving landscape of standards with Tom Wheat, UK Country Manager at PJR. They delve into the importance of ISO 27001 as the benchmark for global information security, the internal processes within certification bodies, and the value certification bodies can add beyond just issuing certificates. The discussion also covers the role of consultants, the competitive certification market, the impacts of AI, and key recommendations for consultants preparing clients for certification. Tune in for valuable insights on ensuring continuous improvement, compliance, and the future of cybersecurity certification.
Links from the episode:
(00:00) - Interview with Tom Wheat(02:10) - Tom's Journey: From Consultant to Certification Manager(05:36) - The Importance of ISO 27001(07:51) - Trends in Certification and Compliance(13:52) - Behind the Scenes of Certification Bodies(22:18) - The Value of Certification Bodies(24:55) - Auditors and Best Practices(28:07) - Consultants in the Certification Process(30:14) - Handling Non-Conformities and Appeals(32:41) - Competing in the Certification Market(36:42) - The Future of Certification Bodies(39:13) - AI and the Future of Compliance(43:13) - Top Recommendations for Consultants(45:22) - Conclusion and Resources
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertize to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account -
This episode features Luigi Viscione, CEO and Founder of Micsar, a seasoned consultant with a decade of experience in IT security and data protection. Luigi discusses the intersection of privacy and cybersecurity, the challenges and benefits of being a consultant, as well as the importance of integrating multiple security frameworks like GDPR and ISO 27001. Gain insights on how to streamline processes, secure client buy-in, and manage large-scale implementations effectively. Don't miss Luigi's experiences on the future of AI in consultancy and how it can influence the cybersecurity landscape.
Links from the episode:
(00:00) - Interview with Luigi Viscione(01:27) - Starting a Consulting Business(03:10) - Combining Cybersecurity and Privacy(05:16) - Implementing ISO 27001 and GDPR(07:07) - Integrated Risk Management(10:47) - Handling Security Incidents(12:27) - Client Reactions to Integrated Approaches(16:23) - Gaining Senior Management Support(28:41) - Balancing Implementation and Maintenance(33:31) - Managing Multiple Frameworks(40:28) - Future of AI in Consulting(47:14) - Consultancy Evolution and Key Takeaways(50:24) - Conclusion and Resources
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertize to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account -
In this episode of the Secure and Simple Podcast, host Dejan Kosutic is joined by Rene Matthiassen, a senior security consultant and partner at Front Door Security. With 30 years of experience in cybersecurity frameworks, Rene discusses the importance of tailored security frameworks, particularly ISO 27001, and how they benefit companies and suppliers under NIS2 scope. They delve into Rene’s journey from network engineering to consulting, the process behind developing security standards, and practical steps for managing cybersecurity among suppliers. The conversation also touches on the increasing importance of operational technology security frameworks like IEC 62443 and provides a forecast for the evolution of cybersecurity compliance in the digital decade.
Links from the episode:
(00:00) - Interview with René Matthiassen(00:19) - Meet Our Guest: Rene Matthiassen(02:35) - Transitioning from Technical to Governance(04:38) - Developing ISO 27001 Standards(06:15) - The Democratic Process of Standardization(07:53) - Transposing NIS2 in Denmark(11:10) - ISO 27001 and NIS2: A Symbiotic Relationship(18:07) - Supply Chain Security and Compliance(24:25) - Handling Supplier Disruptions(26:56) - Creating Effective Security Contracts(30:10) - Supplier's Perspective on Compliance(36:40) - Navigating the Competitive Consulting Market(39:39) - Operational Technology Security Standards(42:26) - Future of Cybersecurity Compliance(46:34) - Conclusion and Resources for Consultants
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertize to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account -
In this episode of Secure and Simple Podcast, host Dejan Kosutic interviews Carlos Cruz, founder of Metanoia and ISO 9001 & ISO 14001 expert at Advisera. Carlos shares his journey in the consulting business, starting from the 1990s, and provides valuable insights on the do's and don'ts of building a successful consulting career. Learn how Carlos used writing, training, and strategic connections to grow his business, and how the consulting landscape has changed over the decades. The discussion also touches on the role of AI in consulting and offers practical advice for new consultants. Don't miss this opportunity to learn from Carlos's extensive experience in the consulting field.
Links from the episode:
(00:00) - Audio 1001 Interview Carlos Cruz(00:19) - Meet Carlos Cruz: A Veteran Consultant(01:42) - Starting a Consulting Business in the 1990s(03:20) - The Importance of Writing and Blogging(06:07) - Connecting Quality Management with Strategy(12:01) - Differentiation and Client Satisfaction(28:12) - Promoting Imperfect Competition(29:59) - Understanding Customer Perception(31:41) - Finding Your Niche as a Consultant(33:43) - Working with Japanese Companies(37:44) - Lessons from Bad Consultants(44:23) - The Role of Training and Auditing(48:25) - The Evolution of Consulting(51:15) - Future of Consulting with AI(54:34) - Top Tips for Consultants(58:34) - Conclusion and Resources
- Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software
- White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits
- Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertize to potential clients: https://advisera.co/Consultant-Courses
- Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account
