Roald R.

Commented on Introduction to Luke from Stage Entertainment and...·Posted in02_welcome

Welcome Luke, always good to see more Dutch people joining the forum.

Commented on Adapting BCM Based on Cyber Security Presentation...·Posted in04_events

Unfortunately wasn't able to join live but great to see my quote was used to get a discussion. We introduced those business cards as IMP-cards (Incident Management Process). A credit card format with not only the contact details but also the steps to take. They are handed out to new employee during introduction meetings and can be stored in wallets or put on a key cord. Greetings Roald

Posted in 03_best-practices·

Roald R.

Adapting Information Security Policies Across Diverse European Markets

We work in Sweden, Denmark, Poland and The Netherlands (and Germany until April ). You have to adapt to these situations. For example Poland has been under the Iron curtain for decades. That's not something you can change easily. So you adapt to get the best success. Something a attacker would also do, adapt their tactics in a phishing campaign. Although is sometime about overcoming a problem and create 3 procedures to one Information Security Policy just to get to differences in. Not the most efficient way but it's the effect that counts.

0Comments

Commented on Best Practices for Practicing Cybersecurity Incide...·Posted in03_best-practices

Roald R.

Hi, I think it's not a question if you should test but how. Business Continuity (and Disaster Recovery) is a big part of the ISO27001 and NIS2. You have to get it in place otherwise you will not receive the ISO27001 certification. And it's not about having it in place. Testing them is a essential part. Step 1 is to do a risk assessment to find out you crown jewels. They need the best protection. Than do a workshop with stakeholders to identify what could happen if......... And create the playbooks yourselves. And than just plan some annual table tops where you run to the material again. And only for the important ones you should do a real time exercise on the production environment as you wouldn't be the first one discovering that the description on paper is not successful in a real-time situation. Roald

Commented on 🛡️Human Firewall Conference - Save Your Spot!·Posted in00_announcements

Roald R.

Only been to HuFiCon virtually, but I could imagine that doesn't count. This year will be the first time I will attend physically. Looking forward to learn from experts on today's threads but also how SoSafe is transforming this in the campaigns.

Commented on Introducing Roald Roos: Group CISO of Fellowmind a...·Posted in02_welcome

Roald R.

Hi Melissa G. The biggest challenge I face is the fact that we have offices in different countries of Europe. And every country has it's own culture and background. So getting things done needs a different approach per country. But having these different cultures also makes it interesting if you look at awareness for example. In The Netherlands people have a hard time taking orders (I can say it because I'm Dutch.) In other countries they exactly do what you tell them to do. And no, just riding for fun and to clear my head. To old already to do it competitively 🙂

Posted in 02_welcome·

Roald R.

Introducing Roald Roos: Group CISO of Fellowmind and Security Advocate

Hi all, My name is Roald Roos and I'm the Group CISO of Fellowmind. Although we have offices in Sweden, Finland, Denmark and Poland I'm working from our Head office in Amersfoort Netherlands. Working in the IT for many years and suddenly you are responsible for information security (for the last 6 or 7 years). Responsible for security on a day to day business but also working on implementing governance and certifications. I'm convinced that information security is not about systems but all about culture and awareness. So hope to catch up on the latest but also share my experience. In the weekend you can find me blowing of steam on my mountainbike in the forest. A different way of staying safe :)

3Comments

About

Title
Topics I'm Interested In