Samm MacLeod's guest appearances

Samm MacLeod

The Security Collective Podcast

Kathleen Smith

Lloyd Evans

Simon Jones

Paul Chapman

Brett King

Ben Jones

Graeme Cowan

susie jones

Vijay Krishnan

Caroline Wong

Brendan Smith

Stuart Harrison

Aaron Bailey

Gabe Gumbs

Karen Worstell

OwlTail

It’s our last episode for the season, and we are joined by a very good friend of Claire’s and of the podcast, Samm MacLeod. Samm and Claire discuss what's been happening since we caught up with her 12 months ago in season eight, when Samm generously shared her CISO journey through burnout and recent sabbatical. She's now back CISO-ing, and this time they covered digital transformations and security transformations. Samm MacLeod is an experienced Information Security Executive with experience across multiple industry verticals including tech, financial services, and critical infrastructure. Having led several cybersecurity transformation programs, Samm helps organisations imbed effective security practices through cyber security strategy, security operating models, and risk management frameworks.  Samm’s experience with boards, audit &amp; risk committees, and executives allows her to bring a unique set of experiences and perspective to the management of technology and cyber risk and the delivery of security best practice. She is currently an appointed Netskope Security Board Advisor and has previously held non-executive positions on a critical infrastructure board (AEMO Cybersecurity Board), securitisation &amp; financial services board (MEPM) and Information Security education and research board  (Deakin Executive Board). Based on the Bellarine Peninsula, Samm is an industry speaker and writer, and an advocate for diversity in cyber. Links: Samm LinkedIn For the full episode transcript, please visit our website. The Security Collective podcast is proudly brought to you in partnership with LastPass, the leading password manager.

It’s our last episode for the season, and we are joined by a very good friend of Claire’s and of the podcast, Samm MacLeod. Samm and Claire discuss what's been happening since we caught up with her 12 months ago in season eight, when Samm generously shared her CISO journey through burnout and recent sabbatical. She's now back CISO-ing, and this time they covered digital transformations and security transformations. Samm MacLeod is an experienced Information Security Executive with experience across multiple industry verticals including tech, financial services, and critical infrastructure. Having led several cybersecurity transformation programs, Samm helps organisations imbed effective security practices through cyber security strategy, security operating models, and risk management frameworks.  Samm’s experience with boards, audit &amp; risk committees, and executives allows her to bring a unique set of experiences and perspective to the management of technology and cyber risk and the delivery of security best practice. She is currently an appointed Netskope Security Board Advisor and has previously held non-executive positions on a critical infrastructure board (AEMO Cybersecurity Board), securitisation &amp; financial services board (MEPM) and Information Security education and research board  (Deakin Executive Board). Based on the Bellarine Peninsula, Samm is an industry speaker and writer, and an advocate for diversity in cyber. Links: <a href="https://www.linkedin.com/in/samanthamacleod/" rel="noopener nofollow" target="_blank">Samm LinkedIn</a> For the full episode transcript, please visit our <a href="https://www.thesecuritycollective.com/podcast/s11e10" rel="noopener nofollow" target="_blank">website</a>. The Security Collective podcast is proudly brought to you in partnership with <a href="http://www.lastpass.com/" rel="noopener nofollow" target="_blank">LastPass</a>, the leading password manager.

113. Transforming with Samm MacLeod

Samm MacLeod is an experienced CISO and Information Security Leader with experience across Financial Services, Retail, High Tech, Utilities and the Energy sectors. With more than 20 years’ experience in technology risk management, security, and governance, Samm is an accomplished professional holding positions on executive boards relating to critical infrastructure (AEMO Industry Board), and Information Security education and research (Deakin Executive Board).     She has extensive experience developing Information Security Strategies and Operating Models; has built effective award winning security teams (winner ‘AISA Cybersecurity Team on the Year’, 2019). Having run a number of large Cybersecurity programs, Samm has experience helping business to imbed effective security practices.     Samm’s subject matter expertise comes from an Honours degree in Technology and a number of Professional certifications.  She is an industry advisor in Information Security, Speaker, and advocate for Women in Technology.     In this episode Samm and I discuss why it is important to have effective Security Operating Models. We cover how they can be different to an org chart, why it's important to be flexible when creating one, how to measure its effectiveness, and why sometimes outsourcing their creation can be best for your business.   Links:   LinkedIn   Time Stamps:  00:47  How do you define security operating models? 01:04 “It's the component that will help drive the security team to operational excellence” 01:43  Why it’s important to anchor your security operating model to a strategy 02:56  The risk of thinking a operating model is the same as an org chart 04:58 “…so they go hand in hand, but they are different” 05:14  What's the minimum you would need in an operating model to make it function against the strategy? 07:28  Other than not being effectively implement, what else could make an operating model fail? 11:17  “make sure failures are dealt with quickly, because there will always be some” 11:23  What to do if you realise the operating model is not working? 13:37  How do you measure if an operating model has been successful? 15:20 “a good operating model breaks down those barriers” 15:54  Why outsourcing the operating model can ensure it’s delivered effectively, efficiently and within budget. 20:07 “…you've got to weigh up a few of those things and figure out which way is the best way for you” 

Samm MacLeod is an experienced CISO and Information Security Leader with experience across Financial Services, Retail, High Tech, Utilities and the Energy sectors. With more than 20 years’ experience in technology risk management, security, and governance, Samm is an accomplished professional holding positions on executive boards relating to critical infrastructure (AEMO Industry Board), and Information Security education and research (Deakin Executive Board).    She has extensive experience developing Information Security Strategies and Operating Models; has built effective award winning security teams (winner ‘AISA Cybersecurity Team on the Year’, 2019). Having run a number of large Cybersecurity programs, Samm has experience helping business to imbed effective security practices.     Samm’s subject matter expertise comes from an Honours degree in Technology and a number of Professional certifications.  She is an industry advisor in Information Security, Speaker, and advocate for Women in Technology.     In this episode Samm and I discuss why it is important to have effective Security Operating Models. We cover how they can be different to an org chart, why it's important to be flexible when creating one, how to measure its effectiveness, and why sometimes outsourcing their creation can be best for your business.   Links:   <a href="https://www.linkedin.com/in/samanthamacleod/" rel="noopener nofollow" target="_blank">LinkedIn</a>   Time Stamps: <ul> <li>00:47  How do you define security operating models?</li> <li>01:04 “It's the component that will help drive the security team to operational excellence”</li> <li>01:43  Why it’s important to anchor your security operating model to a strategy</li> <li>02:56  The risk of thinking a operating model is the same as an org chart</li> <li>04:58 “…so they go hand in hand, but they are different”</li> <li>05:14  What's the minimum you would need in an operating model to make it function against the strategy?</li> <li>07:28  Other than not being effectively implement, what else could make an operating model fail?</li> <li>11:17  “make sure failures are dealt with quickly, because there will always be some”</li> <li>11:23  What to do if you realise the operating model is not working?</li> <li>13:37  How do you measure if an operating model has been successful?</li> <li>15:20 “a good operating model breaks down those barriers”</li> <li>15:54  Why outsourcing the operating model can ensure it’s delivered effectively, efficiently and within budget.</li> <li>20:07 “…you've got to weigh up a few of those things and figure out which way is the best way for you”</li> </ul>

46. Effective security operating models with Samm Macleod

Samm MacLeod is the CISO at AGL, Australia's leading energy company offering electricity, gas, solar and renewable energy services to homes and businesses. Samantha is an accomplished professional with more than 20 years’ experience supporting business strategies through technology enablement, risk management, security, and governance. In her role as CISO at AGL, Samantha is accountable for aligning Cybersecurity strategy with business strategic initiatives and integrating security practices across the organization. During this episode, Samantha will bring light to the obstacles you may face when sourcing for security teams. Listen for her suggested immediate hiring needs and why you should strategically create employee longevity. Find out if the cybersecurity talent gap is really an industry crisis and how encouraging a diverse team of talented professionals may be the solution to a successful team.   Links:  Linkedin.com/in/samanthamacleod    Time Stamps:  00:32 - Samantha’s background, introduction, and journey to CISO 03:20 - Immediate hiring needs for a new security team 07:36 - Roles that must be outsourced or can be done in house 09:59 - Is there a lack of skill crisis? 10:24 - “I don’t think you need 25 years experience to make a difference in a security team” - Samantha MacLeod 15:41 - Are we losing in-house security professionals to micro business? 16:18 - “Step out of that mold and challenge the industry and status quo” - Samantha MacLeod 18:25 - Why women aren’t prevalent in this industry 22:07 - The role that diversity plays on a security team of professionals 24:51 - Overcoming obstacles when sourcing for teams 26:14 - “The hardest thing is finding the time to find the talent” - Samantha MacLeod 28:29 - Key lessons learned around cybersecurity teams 

Samm MacLeod is the CISO at AGL, Australia's leading energy company offering electricity, gas, solar and renewable energy services to homes and businesses. Samantha is an accomplished professional with more than 20 years’ experience supporting business strategies through technology enablement, risk management, security, and governance. In her role as CISO at AGL, Samantha is accountable for aligning Cybersecurity strategy with business strategic initiatives and integrating security practices across the organization. During this episode, Samantha will bring light to the obstacles you may face when sourcing for security teams. Listen for her suggested immediate hiring needs and why you should strategically create employee longevity. Find out if the cybersecurity talent gap is really an industry crisis and how encouraging a diverse team of talented professionals may be the solution to a successful team. Links: <ul> <li><a href="https://www.linkedin.com/in/samanthamacleod" rel="nofollow" target="_blank">Linkedin.com/in/samanthamacleod</a></li> </ul> Time Stamps: <ul> <li>00:32 - Samantha’s background, introduction, and journey to CISO</li> <li>03:20 - Immediate hiring needs for a new security team</li> <li>07:36 - Roles that must be outsourced or can be done in house</li> <li>09:59 - Is there a lack of skill crisis?</li> <li>10:24 - “I don’t think you need 25 years experience to make a difference in a security team” - Samantha MacLeod</li> <li>15:41 - Are we losing in-house security professionals to micro business?</li> <li>16:18 - “Step out of that mold and challenge the industry and status quo” - Samantha MacLeod</li> <li>18:25 - Why women aren’t prevalent in this industry</li> <li>22:07 - The role that diversity plays on a security team of professionals</li> <li>24:51 - Overcoming obstacles when sourcing for teams</li> <li>26:14 - “The hardest thing is finding the time to find the talent” - Samantha MacLeod</li> <li>28:29 - Key lessons learned around cybersecurity teams</li> </ul>