Ryan Pullen

Join Ryan Pullen, in a talk designed to arm business leaders with essential knowledge and strategies they need to defend their organisations against cyber threats. In “Mapping the Minefield,” business leaders will learn about:

Introduction to Cyber Threats: Understand the different types of cyber attack, including phishing, ransomware, and DDoS, and how these threats can infiltrate your business.

Exploration of the Anatomy of an Attack: Explore the stages of specific cyber-attacks—from reconnaissance and weaponisation to the execution of harmful objectives. Ryan will use real world scenarios and stories to help the audience gain a deep understanding of how these attacks are executed and why.

Delve Into Specific Threats Facing Businesses Today Including:

• Voice Impersonation Scams
• Social Media Vulnerabilities:

o Account Takeover

o Fake Advertisements

o Information Harvesting

• Business Email Compromise (BEC): 

o Ransomware Attacks through Phishing / Spear phishing

• Wi-Fi Eavesdropping
• Deepfake Technology

Cyber Security Best Practices: Gain insights on:

• How attacks can take place and what you can do about it
• Essential security measures like multi-factor authentication and regular software updates
• Open source information and social media

This presentation is tailored for business owners, and anyone keen on strengthening their organisation’s cyber defences.

Abstract: In today’s interconnected world, cyber security is a critical concern for businesses across all industries. This talk is designed for business leaders seeking to understand and address the evolving cyber threats that can impact their organisations. The presentation will provide valuable insights into the cyber landscape, the costs of inaction, and actionable strategies to enhance cyber resilience.

Outline:

Introduction

• Setting the stage: The importance of cybersecurity in modern business.
• Audience engagement: Highlighting the relevance of cybersecurity for business leaders.

The Business Impact of Cyber Attacks

• Exploring the financial, operational, and reputational consequences of cyber breaches.
• Understanding the broader implications beyond the IT department.

Understanding the Cyber Landscape

• Overview of current cyber threats and trends affecting businesses.
• Key statistics and real-world examples to illustrate the impact of cyber breaches.

Building Cyber Resilience

• Practical strategies to enhance cybersecurity posture.
  • Employee awareness and training.
  • Effective risk management practices.

Collaboration with IT Security

• The importance of leadership involvement in cybersecurity initiatives.
• Strategies for fostering collaboration between business leaders and IT security teams.

The Role of Leadership

• Highlighting the leadership’s role in promoting a cybersecurity-aware culture.

In today’s rapidly evolving digital landscape, the struggle for robust cyber security is more pressing than ever. Our speaker, Ryan Pullen, aims to shed light on this ever-changing and never-ending battlefield. 

Drawing upon the thought-provoking concepts presented in Simon Sinek’s ‘The Infinite Game,’ the talk will explore how organisations must adopt a long-term, sustainable approach to cybersecurity – and how that starts with our people.

Ryan will explore:

• Human behaviours and emotional intelligence
• Performance Vs Trust when working in cyber security
• The hiring process and the qualities of the ideal team player
• How to maintain productivity and retention in teams under pressure

 This presentation is a must-attend for decision-makers and professionals who aspire to not just survive, but thrive in this ongoing chase of cat and mouse. It offers valuable insights into strategy, team dynamics, and the never-ending journey towards optimal cybersecurity.

In this talk, Ryan draws from his firsthand experiences of establishing a SOC team to illuminate the pitfalls of complacency and the power of data-driven strategies to overcome it. He discovered that honing alert fidelity metrics was key to enhancing both the accuracy of alerts and the team’s culture. By elevating the alerting risk ratio from 2/10 to 2/1, he witnessed a surge in team engagement, a reduction in underestimation of new alerts’ risks, and a marked improvement in the team’s work ethic and productivity.

The talk promises to dissect how diminishing alert noise is instrumental in sculpting an efficient team. 

Ryan will explore:

• A contextual introduction on Alerting and Detection within a SOC, including definitions and their importance for SOC efficiency.
• The imperative for High-Fidelity Alerts, including the cost implications of false positives and the profound influence of alert fidelity on incident management.
• The principles of Detection Engineering, outlining the creation of detection rules and the pivotal role of AI and machine learning.
• Alert Triage and Prioritisation methodologies, including the importance of automation and orchestration.
• The integration of alerting within the broader security infrastructure and ensuring seamless tool and platform integration.
• Evaluating Alerting Effectiveness through KPIs, refining alerts, and the feedback from incident response to detection engineering.
• Real-world examples that underscore the transformative power of high-fidelity alerts.
• The future landscape of SOC alerting with emerging technologies and the promising horizon of AI and machine learning enhancements.
• A conclusion underscoring the need for ongoing investment in high-fidelity alert systems, the power of community collaboration, and the critical role of leadership in fostering high-fidelity detection efforts.

This presentation is a must-attend for decision-makers and cybersecurity professionals who aspire to not just survive, but thrive within a SOC department.