{"id":14962,"date":"2018-07-10T00:00:00","date_gmt":"2018-07-09T23:00:00","guid":{"rendered":"https:\/\/identifi-global.eu.applyflow.com\/interview-with-louise-dunne-auriga\/"},"modified":"2022-12-09T06:14:20","modified_gmt":"2022-12-09T06:14:20","slug":"interview-with-louise-dunne-auriga","status":"publish","type":"post","link":"https:\/\/www.identifiglobal.com\/news\/interview-with-louise-dunne-auriga\/","title":{"rendered":"Interview with Louise Dunne: Auriga"},"content":{"rendered":"

\n\t\"\"<\/p>\n

\n\t <\/div>\n
\n\tLouise Dunne<\/strong> is co-founder and CEO of Auriga Consulting<\/a> – cybersecurity advisors to high-level government departments, and strategic partners to identifi Global.<\/div>\n
\n\t <\/div>\n
\n\tLouise\u2019s lifelong experience in ethical security and assurance – she\u2019d rather not say \u2018cyber\u2019 – has given her a unique perspective on the industry and what it needs.<\/div>\n
\n\t <\/div>\n

\n\tidentifi: To start us off, Louise, how did you end up in cybersecurity?<\/h2>\n
\n\tLouise Dunne: <\/strong>I actually wanted to be a cop – I was a cadet and then a special constable – but early on I realised I wanted to do something that was in the orbit of police work, but on the ethics side. I started out with a company that\u2019s now known as Kroll Ontrack<\/a> – a data recovery firm, specialising in forensics analysis, working with the police and intelligence services. We\u2019d take devices that were seized and extract electronic evidence from them, and we had to go to court and tell them how.<\/div>\n
\n\t <\/div>\n
\n\tAlongside Adrian Palmer, I helped build Kroll Ontrack\u2019s global electronic evidence services, and then I moved on to start my first Company Evidex – which trained police officers on how to follow chain of custody procedures. I did a number of years with Information Risk Management in London, five years retraining and consultancy as a cyber professional, and then in 2012 I started Auriga.<\/div>\n
\n\t <\/div>\n

\n\tidentifi: So – why does Auriga exist?<\/h2>\n
\n\tLouise:<\/strong> It started when I was working on the National Offender Management System – putting together prisons and probations systems and services. It was a total merger – building, people, process, systems – with very strict data protection and security guidelines, and some soft skills challenges in getting the departments to work together culturally.<\/div>\n
\n\t <\/div>\n
\n\tI came in on the business side, Jamal was technical, Paul Boam was operational security. That dream team looked at how the delivery was going across the project and I remember saying to Jamal, \u201cwe could do this better.\u201d So we set up the company – although Paul left in the second year to take a PhD. Jamal and I kept on recruiting and growing.<\/div>\n
\n\t <\/div>\n

\n\tYou may like: Interview: Darren Argyle, former CISO Qantas Airlines<\/a><\/h3>\n
\n\tOur services follow a journey, which we break down into three stages. The first is strategic – boardroom and business transformation consultancy. The second is Risk Management, Governance and Compliance as well as technical architecture, design – and implementation. And the third stage is monitoring and SOC services. The only SME in the UK who have designed our own SOC using in-house developed IPR.<\/div>\n
\n\t <\/div>\n

\n\tidentifi: And you guys have just launched a new product – Cybergator?<\/h2>\n
\n\tLouise:<\/strong> Yes. CyberGator is a product in essence a decentralised SOC , pitched at SMEs who are spending around \u00a310k on IT per year. They don\u2019t want to pay more for advisory on cyber security in addition to that. I wanted to build something that was cost-effective, easy to use, could be used internally even by SMEs who outsource their IT, and could start at something sensible like \u00a310 a month.<\/div>\n
\n\t <\/div>\n

\n\tidentifi: Sticking with the SMEs – are they up to speed on cyber matters, or lagging behind?<\/h2>\n
\n\tLouise:<\/strong> Really lagging behind. A lot are trying to get their head around \u2018cyber\u2019 – a term which is a real bugbear for the industry, to be honest. It was made up by marketeers – and I can see why they did it – but it describes a market that\u2019s full of different skill sets, capabilities, business requirements and responsibilities. We prefer to say \u2018information assurance\u2019 or \u2018security\u2019 when we talk about our work – calling it what it is.<\/div>\n
\n\t <\/div>\n
\n\tBeyond that: budgets are a big factor. Legislation that\u2019s put upon them is a big factor – GDPR is a prime example. Most of them are worried about where they put their data and how they store it, and they know they\u2019re vulnerable in court proceedings if they don\u2019t have a watertight system there.<\/div>\n
\n\t <\/div>\n
\n\tThey\u2019re also aware that unethical hackers – the black hats – use small business\u2019 systems to commit crimes, because their infrastructure is often vulnerable. And these small businesses don\u2019t have time to patch – they don\u2019t always know what patching is and how to achieve it.  They know that the threat exists, but not exactly what it is or how to manage it.<\/div>\n
\n\t <\/div>\n

\n\tidentifi: And how does Auriga go about helping them?<\/h2>\n
\n\tLouise:<\/strong> I\u2019ll give you an example: it\u2019s about GDPR, of course. The whole industry has jumped on GDPR. It\u2019s such a cash cow, because people – especially SME leaders – are aware of it but don\u2019t understand it, so people can say, \u201cyou\u2019ve got to spend thousands of pounds on getting ready, because it\u2019s legislation\u201d and be believed.<\/div>\n
\n\t <\/div>\n
\n\tWe buck the industry trends. I tell people, \u201cstop panicking about it.\u201d If you have your ISO certifications in order – which means you have 9001<\/a> and 27001<\/a> – you\u2019re halfway there.<\/div>\n
\n\t <\/div>\n
\n\tBeyond that, our USP is security – that\u2019s all we do. We don\u2019t upsell into \u201chey, look at our cloud storage\u201d or \u201clook at our data room\u201d.<\/div>\n
\n\t <\/div>\n
\n\tWe\u2019re an SME ourselves, we\u2019re endorsed by government – there isn\u2019t a department in Westminster that we don\u2019t work with – and if we\u2019re good enough for homeland security, we\u2019re good enough for anyone.<\/div>\n
\n\t <\/div>\n

\n\tidentifi: How do you go about recruiting to keep up that standard?<\/h2>\n
\n\tLouise:<\/strong> Well – we don\u2019t use any other recruiters. Present company excepted, they\u2019re worse than the bloody estate agents. One firm we worked with sent over a CV to someone here who had no authority to recruit; HR got hold of that CV and rebuffed it.<\/div>\n
\n\t <\/div>\n
\n\tFive months later, we actually employed that person for eighteen months – but because there was a month left of some imagined six-month covenant when we hired him, the recruiter actually took us to court. Their name is PeopleSource. Bear in mind that when they sent that CV in we hadn\u2019t interviewed him, we hadn\u2019t responded, we hadn\u2019t signed anything – they\u2019d just seen a grey area they could jump on to make some money.\u200b<\/div>\n
\n\t <\/div>\n

\n\tidentifi: What\u2019s different about working with us? Apart from us not taking you to court, obviously…<\/h2>\n
\n\tLouise: <\/strong>We have an exclusive arrangement with identifi – a true partnership.<\/div>\n
\n\t <\/div>\n
\n\tI do a forecast per year for my recruitment against our growth and utilisation of delivery, and pay a static fee per month to identifi. That means I can forecast finance behind recruitment, rather than have lots of different levels to pay at different times. It\u2019s a retainer, effectively, for Pete – who actually placed me on the NOMS project, back in the day – so he\u2019s known Auriga since the very start. He knows me, my vision, and the direction for the company.<\/div>\n
\n\t <\/div>\n
\n\tPete\u2019s a dedicated account manager who supplies all our personnel for cyber security – and none for HR, sales, admin or finance. He knows our business inside out, so he\u2019s bloody efficient, and he can be upfront. If he doesn\u2019t think he can achieve something, he\u2019ll tell me, and it is written – I don\u2019t have to think about it again.<\/div>\n
\n\t <\/div>\n
\n\tWe take on about seven people a year – junior consultants, consultant senior leads and principals. Pete knows the sort of personnel I need for each level, he gets me the CVs, and we generally recruit seven out of ten of the people he sends me.<\/div>\n
\n\t <\/div>\n
\n\t <\/div>\n
\n\tOur thanks to Louise for her insight – and for not being afraid to speak her mind. To find out more about opportunities with Auriga (or any other role for that matter), take a look at our current jobs.<\/a> Or call 01908 886 048.<\/strong><\/div>\n
\n\t <\/div>\n

\n\t <\/h2>\n

\n\tShare this Article<\/h2>\n","protected":false},"excerpt":{"rendered":"

  Louise Dunne is co-founder and CEO of Auriga Consulting – cybersecurity advisors to high-level government departments, and strategic partners to identifi Global.   Louise\u2019s lifelong experience in ethical security and assurance – she\u2019d rather not say \u2018cyber\u2019 – has given her a unique perspective on the industry and what it needs.   identifi: To… Read More »Interview with Louise Dunne: Auriga<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":14174,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[38],"tags":[],"class_list":["post-14962","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-career-management"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/posts\/14962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/comments?post=14962"}],"version-history":[{"count":0,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/posts\/14962\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/media\/14174"}],"wp:attachment":[{"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/media?parent=14962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/categories?post=14962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/tags?post=14962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}