RESOURCES
As the Cynode CMO, I read and write lots of documentation and try and balance the technical aspects of it with readability. I spent over 20 years diagnosing and fixing technical problems, I even created a few problems myself. So, I can spot a techie at a hundred yards. When I first met Per-Olov my techie “spidey senses” were pinging. Per-Olov is one of our longest standing employees and was there right at the inception of Cynode, he has experience both of our company ethos and an even deeper experience of the cyber security industry, nationally and internationally. But Per-Olov is not just another hardcore firewall guy, he is also an excellent communicator, able to explain highly technical security concepts, but more importantly for us, Per-Olov is able to convey these concepts to any audience from junior engineers to seasoned CISOs and non-technical C-Level stakeholders. I was lucky enough to find some time to sit down and have a chat with Per-Olov to get some insights into what makes him tick.
I began my career in IT in 1993, initially working as an IT technician where I was responsible for performing upgrades and repairs on computers and motherboards. By the early 2000s, I transitioned to working with internal IT operations and soon after, I became the country IT manager. My interest in cyber security developed as emerging cyber threats became more prevalent, posing real hazards that required innovative preventive techniques. Recognising that cyber security was the future of IT, I dedicated myself to this field.
Over the years, I worked for various cyber security companies, which enriched my experience and expertise. This journey ultimately led me to join Cynode in 2022 as a Senior Cyber Advisor. At Cynode, I focus on consulting and helping customers strengthen their cyber security posture. Cynode has a special approach to customer interactions, we take a unique approach to cyber security, focusing on assessing, optimising and then validating rather than just selling new technology we really are our customers trusted advisors, and this ensures our clients' cyber security is always robust and up to date.
Since joining, I have been fortunate to work on a variety of tasks including NIST assessments, acting as a cyber security solution architect, providing advisory services, and serving as an interim Chief Information Security Officer (CISO) for our clients. This variety keeps my role dynamic and continuously engaging. One of my most notable achievements at Cynode has been serving as an interim CISO for one of our clients. After conducting an initial NIST maturity assessment, I have been instrumental in helping the client enhance their cyber security maturity across the organisation. This has been a rewarding experience as it allowed me to make a tangible impact on the client's overall security posture and help them grow their own security awareness.
Continuous learning and development are critical both at Cynode and for me personally. Currently, I am pursuing my Certified Information Systems Security Professional (CISSP) certification to strengthen my capabilities as a cyber advisor. I believe that having a holistic view of cyber security is essential, and working at Cynode provides the perfect environment to develop such a perspective. The diverse challenges and innovative projects we undertake here facilitate constant learning and growth.
Our team at Cynode is characterised by a strong spirit of collaboration and support. We are a small but highly skilled team, and our diverse experience helps us stay ahead in terms of innovation and technology. We base our decisions on quantifiable evidence, ensuring we deliver superior security solutions to our clients.
My biggest impact at Cynode has been helping clients understand their cyber security maturity levels and advising them on achieving stronger, more efficient processes. Recently, we launched some new managed services and added some additional advisory and assurance services, along with two platforms "Workspace and Ultima" that enhance our case management and reporting capabilities as well as allowing us to be more efficient by internally by utilising orchestration and automation.
Looking ahead, I am excited to be part of building Cynode as a formidable player in the cyber security services sector. We aim to continue developing innovative solutions to customer problems and to address evolving cyber threats. I think we will see AI-driven cyber-crimes grow in severity and occurrence, while disinformation, hacktivism, and ransomware will continue to be a problem.
For new professionals entering the cyber security field, my advice is:
"Be humble and open to new things, what we know today is old tomorrow and there is always something new to learn. Never think you know it all".
If you want to understand more about any of the Cynode services, send an email to hello@cynode.com and we will get a message to him. I’m confident that Per-Olov would be happy to help out.
ABOUT CYNODE
Cynode is a specialised cyber security services provider operating in the Nordics and the UK, working with medium to large size organisations. Cynode offers services that make immediate impact on clients existing security posture and build organisational capabilities to minimise cyber risk in the long term, with affordable subscription models. Cynode has implemented an adaptive cyber security framework where all services either include or support proactive prevention capabilities so that Cynode clients deal with cyber-attacks early in the attack kill chain, reducing the exposure risk.
-
Managing Cyber Risk with CTEM and Beyond
Cynode Ultima takes the complexity out of cyber threat management with its all-in-one security platform. Building on Gartner's CTEM framework, we've created a solution that brings together essential security tools - from threat intelligence and vulnerability prioritization to dark web monitoring and attack surface management - in one place. The article explores why organizations often struggle to implement security programs that meaningfully reveal their true risks and security gaps. We show how Ultima bridges this gap by providing an integrated approach that helps businesses understand and address their actual security exposures, making advanced threat management both accessible and actionable.
-
Investing in Dark Web Monitoring: A Practical Guide
Should you invest in a Dark Web Monitoring service? The answer is not as straightforward as you might think—it really depends. Whilst Dark Web Monitoring is undoubtedly valuable, where does it rank in your list of priorities? For instance, if you have a limited budget, should you invest in Dark Web Monitoring or a Security Awareness Programme? The answers to such questions vary for each organisation, but there are some general principles that can guide your decision-making process.
-
The Persistent Threat of Business Email Compromise
Business Email Compromise is a sophisticated type of email and identity based attack that doesn't rely on malware or malicious links. Instead, it leverages social engineering tactics to manipulate human trust and judgement. This makes BEC attacks particularly challenging to detect and prevent, even for organisations with robust protection infrastructures and cyber security awareness programmes.
-
The Risks of Increasing SaaS Use
Organisations increasingly rely on cloud applications, with small enterprises using over 20 SaaS apps per user and large companies exceeding 250 per company. This growth introduces significant cyber security risks, including unauthorised access and Shadow IT, where unsanctioned apps are used without oversight. To mitigate these risks, companies need advanced monitoring solutions like Cynode’s MDR for Cloud Apps Shadow IT, which offers visibility, consent policy enforcement, and threat detection across SaaS platforms, ensuring security and compliance.
-
Regular EDR Policy Tuning
The cyber security world has recently focused on EDR technology due to its significant impact across industries. This post explores the evolution from early antivirus software to EDR platforms. Key milestones include the introduction of commercial antivirus software in 1987, the emergence of heuristic and behavioural detection methods in the early 2000s, and the development of Next-Gen Antivirus (NGAV) in 2010. EDR solutions, emerging around 2013, are crucial for detecting, investigating, and mitigating security threats but require regular policy updates and meticulous tuning for optimal performance.
-
Mastering Log Management: Enhancing SIEM and SOC Efficacy
Efficient log management is critical for SIEM and SOC efficacy. Challenges include log agent malfunctions, configuration errors, and network issues. This blog explores four log problem categories, from detection failures to incomplete logs, and introduces innovative solutions for proactive threat detection and response. Learn how Cynode's integrated threat simulation and log validation processes ensure optimal log coverage and enhanced security monitoring. Stay ahead of cyber threats with robust log management practices.
-
Understanding WebApp Exposure
WebApp Exposure Monitoring involves regular assessments and updates to perimeter defence platforms like WAF policies, ensuring alignment with the latest threat intelligence. Having a proactive stance to WebApp attacks is crucial as cyber threats incredibly fast, often outpacing traditional security defences. The process of continuously monitoring web applications allows organisations to more readily detect anomalies and respond to threats in real-time, minimising the risk of data breaches and other cyber incidents.
-
Introduction to Managed Security Service Providers (MSSPs)
Businesses increasingly struggle with cyber security management, especially with limited resources. Managed Security Service Providers (MSSPs) like Cynode offer comprehensive, efficient solutions, managing everything from security infrastructure to incident response, often using cloud services for cost efficiency. This article explores the benefits and services MSSPs provide, underscoring their importance in modern cyber security strategies.
-
Improving SIEM Efficacy as the Market Evolves
As the SIEM market evolves with new mergers and partnerships, Cynode supports practitioners to ensure no security event is missed, offering comprehensive services from threat-centric log and rule validation to complete SIEM management.
-
Welcome Konrad Falk as Our New Senior Cyber Advisor & Architect!
Konrad brings extensive experience in Cyber Security and IT, with a background in programming, networking, and security. Passionate about securing companies and educating others, he values the trust of our leadership and is eager to manage security incidents and tackle evolving threats hands-on.
-
“Trust me, I was an engineer” – Björn Nilsson
We are pleased to announce Björn Nilsson as the new Head of Security Operations Sweden at Cynode. His extensive experience in cyber security and IT infrastructure marks a significant milestone in enhancing our capabilities. Björn brings a wealth of expertise from various critical roles within the industry.
-
Cynode Boosts Team with Gustav Bivstedt's Technical Expertise
Cynode hires Gustav Bivstedt as a Cyber Advisor to enhance our Cyber Advisory and Assurance Services. His expertise strengthens our technical capacity and supports business growth, including new offerings in security testing, cyber maturity assessments, and proactive risk management with Cyber Threat Intelligence.
-
Meet our "VP of Product" Cumhur Hatipoglu
As Cynode’s CMO, I am constantly impressed by our team's innovation and engagement. Cumhur Hatipoglu, our new VP of Product, enhances our mission to innovate in cyber security and MDR services. His approach integrates NIST CSF and best security practices to ensure our solutions meet clients' evolving needs.
-
Hacking and Cyber Warfare Go Hand in Hand
Sweden, amidst its NATO application and tensions with Russia and Turkey, has experienced a rise in political cyber-attacks. Groups such as Anonymous have targeted governmental infrastructures, leading to data leaks. Escalation of cyber-crime and nation-state backed cyber warfare necessitates global enhancement of defense measures.
-
EU updates NIS Directive. Are you compliant?
The European Union introduced the NIS 2 Directive to improve the cyber security of critical infrastructure systems within its member states and to ensure that digital service providers and operators of essential services have adequate security measures in place to secure their networks and data.
-
Rise of Cyber Due Diligence in M&A Processes
Sweden's post-pandemic economic recovery has spurred M&As. Cynode emphasises integrating cyber due diligence to address vulnerabilities, protect essential information, and optimise security spending, enhancing the security posture before, during and after M&As.