Shifting Security and Protecting the Pharma Supply Chain with Andy Hillis
Summary
Host Caleb Tolan interviews Andy Wells of Allmatt Group on integrating security into the pharmaceutical lifecycle. They discuss shifting from compliance checklists to proactive risk management, handling rigorous audits, and AI adoption with guardrails, and the importance of asset visibility. Wells shares insights on ISO 27001 certification, outsourcing SOC services, and implementing AI with a "return on employee metrics, and the critical need for robust backup strategies. The episode emphasizes knowing your infrastructure to mitigate risks in a highly regulated environment.
Topics discussed
Introduction to Data Security Decoded and guest Andy Wells
Evolution of security in pharma and the shift to early involvement
ISO 27001 certification and cross-functional collaboration
Almac's culture, GXP compliance, and data protection principles
The critical importance of backups and immutable data
Building a best-in-class IT infrastructure over three decades
Outsourcing SOC services and managing identity threats
AI deployment strategy, governance, and citizen developers
Shifting InfoSec left to enable business safely
Actionable steps: Asset visibility, planning, and resourcing
Inconvenient truths about AI and risk tolerance in IT
Final message on asset knowledge and episode wrap-up
Listen ad-free on Castria