Skip to main content
The [InfoSec] Stack

The [InfoSec] Stack

By Cleura

We discuss, analyze, and educate in the field of information security. Our aim is to touch on all subjects, from regulatory compliance and new laws to current cases, leadership, and business culture.
Available on
Apple Podcasts Logo
Castbox Logo
Google Podcasts Logo
Overcast Logo
Pocket Casts Logo
Spotify Logo
Currently playing episode

The fall of Privacy Shield and the EDPB FAQ

The [InfoSec] StackSep 21, 2020

00:00
41:18
It's not all bad

It's not all bad

Not everything can be pitch black and negative around us. Today we are ending this season of The InfoSec Stack with some positive news and trends.

Pod Sweet Pod: https://cleura.com/podcast

Jun 20, 202225:19
The FISA-problem in a nutshell
Jun 06, 202215:09
Bengt Johansson & Estonian digitalisation
May 30, 202212:41
Google’s IP anonymisation is a useless protection
May 23, 202210:57
A Swedish pharmacy whispered to Facebook
May 16, 202214:18
Workchronicles

Workchronicles

Today we just have some fun and talk about our favourite comic strips from https://workchronicles.com/

Pod sweet pod: https://cleura.com/podcast

May 09, 202205:59
Von der Leyen VS Biden
May 02, 202208:32
GDPR is a business opportunity

GDPR is a business opportunity

We often hear that GDPR stands in the way of starting up a business and it's time to address that ridiculous claim.

Pod Sweet Pod: https://citynetwork.eu/podcast

Mar 28, 202206:04
The Swedish Customs Authorities and the €30K fine for using Google Photos
Mar 21, 202207:24
Ukraine
Mar 14, 202216:08
Mea Culpa
Mar 07, 202206:54
Incompetence
Feb 28, 202207:36
Fonts vs Analytics in relation to GDPR
Feb 21, 202209:44
Transferring data to a third country
Feb 14, 202231:32
Let's talk some more about GDPR
Feb 07, 202238:15
How an app is Ops:ed
Jan 31, 202233:26
Happy new year!
Dec 20, 202114:19
What is an app?

What is an app?

We are trying to be highly educational by popular demand and explain how an app works. We can't stress enough how important it is, especially for us who make IT-related decisions, to understand how things work in the digital world.

https://citynetwork.eu/podcast

Dec 13, 202128:51
What is The EU Cybersecurity Act?
Dec 06, 202136:12
Betting on European suppliers instead of on the hyperscalers
Nov 29, 202130:07
From the archives: A question to all taxpayers
Nov 22, 202125:06
From head to toe - Episode 2

From head to toe - Episode 2

Today we're talking about how to succeed with your leadership when implementing change.

https://citynetwork.eu/podcast
https://citynetwork.se/podcast

Nov 15, 202130:11
From head to toe - Episode 1

From head to toe - Episode 1

Following our most recent mini-series about the technical sides of digital transformation, we now need to talk about the people responsible for making the change happen.

https://citynetwork.eu/podcast
https://citynetwork.se/podcast

Nov 08, 202127:33
From Start To Finish - Episode 3

From Start To Finish - Episode 3

The time has come to end the mini series "From Start To Finish" on the topic of digital transformation. At least for this time around. Now that we have learnt how to become digital from a technical point of view, we need to talk about efficiency and what the digitalization, and the entire change is supposed to lead to.

https://citynetwork.eu/podcast
https://citynetwork.se/podcast

Nov 01, 202123:50
From Start To Finish - Episode 2

From Start To Finish - Episode 2

In English: https://citynetwork.eu/podcast
In Swedish: https://citynetwork.se/podcast

We continue our mini series "From start to finish" and our take on Digital Transformation. Today we clarify what Front end, Back end and API's mean.

Oct 25, 202130:28
From Start To Finish - Episode 1

From Start To Finish - Episode 1

In English: https://citynetwork.eu/podcast
In Swedish: https://citynetwork.se/podcast

We are kicking off a miniseries called "From Start To Finish," in which we try to make sense of specific topics concerning the cloud industry. It's a miniseries in three episodes, and we start with the subject of Digital Transformation and where it all began.

Oct 18, 202121:53
Welcome back to another season of The [InfoSec] Stack!

Welcome back to another season of The [InfoSec] Stack!

ENG: https://citynetwork.eu/podcast
SWE: https://citynetwork.se/podcast

We're back in business after some well-deserved vacation!

In today's episode, we round up what has happened in the world of GDPR during the summer. We also discuss the differences between American and UK ownership of a company or service after Brexit.

Oct 11, 202130:44
Summer reading tips

Summer reading tips

https://citynetwork.eu/podcast

Thank you for joining us during another season of The Infosec Stack! It is now time for us to take some time off and recharge our batteries. In the mean time, enjoy these summer reading tips and we'll see you again soon!

https://en.wikipedia.org/wiki/Factfulness:_Ten_Reasons_We%27re_Wrong_About_the_World_%E2%80%93_and_Why_Things_Are_Better_Than_You_Think

https://en.wikipedia.org/wiki/Astrophysics_for_People_in_a_Hurry

https://www.goodreads.com/en/book/show/42117336-you-are-worth-it

Jul 05, 202113:41
There are no unicorns!

There are no unicorns!

https://citynetwork.eu/podcast

Today we're focusing on the EU Cloud Code of Conduct. Repeat after us: There are no unicorns! Despite what some may want you to believe..  

https://www.codeofconduct.cloud/

https://eucoc.cloud/en/home.html

Jun 28, 202121:25
A question to all taxpayers

A question to all taxpayers

https://citynetwork.eu/podcast

Is it possible to go through the digitalization without the three large, american hyperscalers? This is todays topic in The InfoSec Stack.


Jun 21, 202125:06
From the archives: Here is what you need to do if you just can't live without Microsoft 365

From the archives: Here is what you need to do if you just can't live without Microsoft 365

Originally published 23 November 2020.
https://citynetwork.eu/podcast


With the GDPR and the legal situation we have regarding data protection within the EU, we often talk about how difficult, if not impossible, it is to use some of the world's largest cloud services. The recent dilemma of the invalidation of the important, legal, mechanism - Privacy Shield - makes it all the more difficult.

But what if one refuses to believe that there are any good alternatives? What if one firmly believes that the digital transformation can not be carried out with any other provider?

Well, then one should probably, first and foremost, realise how much one is depending on one single supplier and think about how healthy that might be. First and far most from a business continuity perspective but also when it comes to ones' data subjects' personal integrity.

But let's not be so negative all the time. We have really given this some thought and here are some tips for European companies who wants to, or just needs to, keep using Microsoft 365.

Jun 14, 202121:53
Some good things about the IT industry

Some good things about the IT industry

https://citynetwork.eu/podcast

We have been talking a lot about the negative aspects of the IT industry lately. It's always easier to be negative and criticise so we made ourselves come up with a couple of positive aspects in this weeks episode.

Jun 07, 202123:21
From the archives: BCD culture and information security

From the archives: BCD culture and information security

Originally published 28 September 2020.
https://citynetwork.eu/podcast

Today we're discussing group culture, specifically how a Blame, Complain, and Defend-culture impacts information security. If you are one of those who thinks that information security is all about technical measures - tune in to this and listen to a different opinion.  

https://www.youtube.com/channel/UCMctd-YoxlHTTjSU6-qkHJQ

https://www.tbriankight.com/

May 31, 202131:12
Kim's quest

Kim's quest

https://citynetwork.eu/podcast

Kim embarks on a quest in the spirit of digitalisation. The question is, can, and if so, how can a digital meeting be made equivalent to a physical encounter between people. Is he just old and incapable of understanding and absorbing what the youngsters seem to have down to an art, or is there a point in finding other ways?

May 24, 202112:40
What has become of the it-industry?

What has become of the it-industry?

https://citynetwork.eu/podcast

Today we're discussing how skewed the it industry has become.

May 17, 202131:46
We met with Johan Magnusson, Assoc. Prof. at the Dept. of Applied IT, University of Gothenburg

We met with Johan Magnusson, Assoc. Prof. at the Dept. of Applied IT, University of Gothenburg

https://citynetwork.eu/podcast

We recently interviewed Johan Magnusson, - Associate Professor, division director and researcher in balancing of efficiency and innovation in the governance of digitalization. This is a summary of that interview which we conducted in Swedish.

About Johan

Johan Magnusson is Associate Professor at the Department of Applied IT, University of Gothenburg, head of the Informatics division and director of SCDI Gothenburg. He earned his PhD in Business Administration (Accounting) at Gothenburg University in 2012 following his Licentiate degree in Informatics in 2005.

Johans research concerns the balancing of efficiency and innovation in the governance of digitalization. He works closely with primarily executives to offer insights into how governance can be designed to enhance digital capabilities in large organizations, both in his research as well as in executive education. He is also highly active in the industrial community, with recurring keynotes and media appearances intended to increase the utilization of research findings. He is principal investigator in the Digital Government research consortium, where the researchers work with a research-based model for digital maturity in supporting the digitalization of the public sector.

More information about Johan, his research, keynotes, and projects can be found here: https://scdi.se/researchers/johan-magnusson/ (info in english)

May 10, 202121:25
A question about data request reports from Microsoft Trust Center

A question about data request reports from Microsoft Trust Center

https://citynetwork.eu/podcast

One of our audience members asked us if the number of requests for customer data, presented by Microsoft, can be trusted when gag orders are at play. Here is our take on the matter.

Microsoft's U.S. National Security Orders Report: https://www.microsoft.com/en-us/corporate-responsibility/us-national-security-orders-report?activetab=pivot_1%3aprimaryr2

Microsoft Law enforcement request report: https://www.microsoft.com/en-us/corporate-responsibility/law-enforcement-requests-report

Fisa court on Wikipedia: https://en.wikipedia.org/wiki/United_States_Foreign_Intelligence_Surveillance_Court#:~:text=The%20United%20States%20Foreign%20Intelligence,United%20States%20by%20federal%20law

Our interview with André Catry: https://anchor.fm/the-infosec-stack/episodes/Summarising-our-chat-with-Andr-Catry-et5vom/a-a50ncqt

May 03, 202113:13
Rerun: The fall of Privacy Shield and the EDPB FAQ
Apr 26, 202141:18
Rerun: Best of luck with the Standard Contractual Clauses - The Privacy Shield saga continues
Apr 19, 202146:49
How to measure group development

How to measure group development

https://citynetwork.eu/podcast

This week we're talking about group development and how to measure it. As the nice people we are, we brought along Andrea, one of newest employees who started working for City Network on the same day we recorded this episode.

Apr 12, 202133:29
How big is your arena?

How big is your arena?

https://citynetwork.eu/podcast

Today we're talking about behaviours, facades, and arenas. This episode is all about culture, values and unwritten rules and at the end, we tie it all together by explaining what all of this has to do with information security.

https://en.wikipedia.org/wiki/Johari_window

Apr 05, 202125:44
Looking forward to the next episode

Looking forward to the next episode

https://citynetwork.eu/podcast

We weren't able to publish this weeks episode but we look forward to the next.

Mar 29, 202100:48
Summarising our chat with André Catry

Summarising our chat with André Catry

https://citynetwork.eu/podcast

He is one of Sweden's most prominent IT-security professionals, former world champion in hacking, and an author. The [InfoSec] Stack had the pleasure of chatting with André Catry to learn more about him and his thoughts on GDPR, FISA 702, espionage, digitalisation, digital sovereignty, and much more.

The interview was done in Swedish and we are summarising it in English.

Mar 22, 202129:34
Regulations does not stop innovation, and business culture

Regulations does not stop innovation, and business culture

https://citynetwork.eu/podcast

Today we're talking about regulations, and business culture. We mention monopolies in digitalisation, digital immaturity, and wether it's time to put our foot down.

We also talk about decision making and how that process works. The question is what a compass, knife, sweater, rope and water has to do with business culture?

Let's go!

Mar 15, 202134:18
Answering your questions and discussing differences in legal practice

Answering your questions and discussing differences in legal practice

Today we're answering questions about Google Analytics, have some follow-up on a Swedish news story and discuss legal practice in the US compared to elsewhere.

Mar 08, 202129:26
BRAVIN(G)

BRAVIN(G)

https://citynetwork.eu/podcast

Today we have reached the final letter in our 7 part bonus series about The Seven Elements of Trust.

https://daretolead.brenebrown.com

Mar 03, 202108:48
Google Analytics after the Schrems II ruling

Google Analytics after the Schrems II ruling

https://citynetwork.eu/podcast

Today we share some ideas on what you need to do in order to be able to use Google Analytics in a time when GDPR is in effect, and the Schrems II ruling has been filed. In short, you CAN continue to use Google Analytics but it requires you to take a number of actions to use it legally - in terms of regulatory compliance.

https://www.reuschlaw.de/en/news/dsk-adopts-minimum-requirements-for-the-use-of-google-analytics/

https://de.wikipedia.org/wiki/Konferenz_der_unabh%C3%A4ngigen_Datenschutzbeh%C3%B6rden_des_Bundes_und_der_L%C3%A4nder

https://www.datenschutzkonferenz-online.de/media/dskb/20200526_beschluss_hinweise_zum_einsatz_von_google_analytics.pdf

Mar 01, 202118:15
Everything you've always wanted to know about certifications

Everything you've always wanted to know about certifications

https://citynetwork.eu/podcast

Today we're diving deep into the world of information security certifications such as ISO, SOC, BSI C5 and other acronyms. We're explaining the different frameworks that we're familiar with and talk about what they are for, how they work and what you need to think about - both as a supplier and as a customer.

Feb 22, 202128:37
What is Infrastructure as a Service - IaaS

What is Infrastructure as a Service - IaaS

https://citynetwork.eu/podcast

We recently explained different types of cloud services, the benefits of using multiple providers, the economy of cloud services and a lot of other aspects that makes cloud services so great.

Today we're digging a little deeper to explain Infrastructure as a Service - IaaS.

Feb 15, 202126:03
A history lesson about City Network

A history lesson about City Network

https://citynetwork.eu/podcast

Today we bring you a history lesson about the company we work for, City Network. Why we do the things we do, why we provide the services we do, and why we are passionate about regulatory compliance in the cloud.

What started as a web hosting company, mainly aimed at individuals and small businesses, in 2002, has become something entirely different almost 20 years later.

Today we explain how we got to where we are today!

Feb 08, 202132:24