In this episode, we are joined by Bjarke Petersen, the founder of CyberSales and CyberMinds. Rumour has it that he has a third startup coming up.

Bjarke talks with many companies about cyber security, which makes him the perfect one to ask about the challenges many companies face and what they can do about them.

Two of the biggest challenges he talks about are:

- Budget

- Overview and prioritization

He also mentions a few tools that might be worth diving into.

These are:

- Passbol

- Bitwarden

- Wazuh

We hope you enjoy the episode.

In today's episode, I've invited my dear colleague, Jonas Klærke Hejlskov, into the studio. He's here to talk about 5 misconceptions about security awareness training we see all the time.

The misconceptions are:

1. A Few Big Events Are Enough for your security training

2. Grouping Training Topics By Category

3. Training Alone Makes You Secure

4. Training is a "Set It and Forget It" Process

5. Over-Customizing Training for Every Employee

I hope you enjoy.

PS: You can also read about the misconceptions right here:

https://www.cyberpilot.io/cyberpilot-blog/5-misconceptions-about-effective-security-awareness-training

We already talked with Kim Theilgaard once. And the response was, that you all want more.

In the first episode (episode 12 of the podcast), Kim mentioned the 20-50 questions they ask all companies to determine whether they are ready for cyber insurance.

In this episode, we dive a bit deeper into these questions which are focused on five different areas.

We don't have time to go through all questions but we do give an introduction to what is in those five areas.

Do you want to know what all the questions are, feel free to write Kim and he will send them to you.

His email is: kt@fairside.dk

-------

Besides the questions we couldn't help it but to quickly go through a breakdown like Crowdstrike - If a breakdown like that affects your business, does cyber insurances cover it? Well... It depends.... Listen how, in the episode.

Anthropology and cyber security might not be the first two words you would connect in an association game. But maybe they should.

We've invited Laura Lynggard Nielsen who works at Alexandra Instituttet as a Senior Security Anthropologist.

She uses methods from anthropology to uncover how organizations can create stronger cyber security.

You can learn a lot from looking at the social aspects of cyber security, as all your initiatives are impacted by and impact your organization's culture. In this episode, Laura talks about how to use anthropology and gives us a few examples of useful cases.

We've invited Kim Theilgaard on to our podcast.

Kim is partner at fairside. fairside help and advise companies in insurances. One of these insurances is cyber insurances which is becoming more and more popular.

In the episode Kim tells me about:

• What a cyber insurance is
• What it covers and what it doesn't cover
• What you need to have in place to get one
• What to consider before getting one

Cyber insurances is not a replacement for good cyber security but it can be... Yeah, an insurance. Just like your house, you still need to lock it.

We hope you enjoy the episode. If you want to check out Kim and fairside, you can find his LinkedIn right here: https://www.linkedin.com/in/kim-theilgaard/

In this episode, I'm joined by Sarah Aalborg - CISO at Tivoli, Keynote speaker, and soon-to-be author.

She's a cyber security expert and a behavioral science expert.

Which makes her the perfect guest for this podcast.

In the podcast, we talk about:

• Why Security Awareness might be dead as a term
• Why you need to think about behavior when you think about cybersecurity
• 3 things you can do to create stronger cybersecurity amongst your colleagues

I hope you enjoy the episode and make sure to follow Sarah on LinkedIn to make sure you don't miss all her wisdom:

https://www.linkedin.com/in/sarah-aalborg-bb348a1/

NIS2 is coming, but many people and companies don't know what it means for them.

Therefore, we've invited Sarah Hofmann into the studio to talk about:

• What NIS2 is
• Who it apply to
• What happens if you don't comply
• How you can get started working with the NIS2 requirements

In the episode we also mention a blog post, you can find it right here:

https://www.cyberpilot.io/cyberpilot-blog/what-is-the-nis2-and-how-will-it-impact-your-organisation

We also mention that we are creating a FREE course on NIS2 for management, the board, and IT. You can sign up to get access when it goes live here:

https://www.cyberpilot.io/early-bird-signup-nis2-course

We hope you enjoy the episode.

Why is a security culture important?

And how do you create one?

Julie has gone through a lot of research to answer those questions. And as she says at the beginning of the episode: "It's a cool topic".

In this episode, Julie will tell us all:

• Why aware employees are not enough to drive secure cyber behavior in your company
• Why you need to convince leadership before trying to change culture
• Why you need feedback from your co-workers to create the best culture

It's an important topic. And once again, it's not only up to IT.

You need your leaders and HR on board to create a strong cyber security -> so maybe pass on this episode to whoever needs to hear it ;)

Hope you enjoy. If you do, please rate the show in your streaming app and subscribe.