Cyber Heard
By Invitise
Categories: Technology, Business
Real conversations with UK Cyber Security leaders and frontline practitioners. Practitioners in the chair, not commentators. Brought to you by Invitise.
31 episodes indexed on podsearch.
Recent episodes
- From Bug Sweeps to the SOC: A Frontline Analyst's View
A frontline SOC analyst explains how triage, documentation and AI actually play out day to day, and why a Cyber Essentials pass does not always mean a genuinely safer business.
- From Astrophysics to AI Governance: An Unlikely Cyber Path
A cyber security manager explains why staff quietly misuse workplace AI tools, why an ISO certificate does not prove an organisation is actually secure, and why boards care less about a single risk score than about ranges of financial and operational impact.
- Security, Privacy and AI as One Discipline
A practical look at running security, privacy and AI governance as a single discipline inside a fast-growing SaaS handling sensitive financial data, including where internal AI use quietly leaks data and how to tell a control engineers actually follow from one that just looks good on paper.
- AWS for Batteries: Securing the Energy Cloud
A CTO working across energy storage and industrial IoT explains how OT and security engineers can find common ground, why machine identity at device scale demands automation, and what it really takes to keep an always-on energy platform resilient when cloud providers fail and AI reshapes how code…
- Why Perfect Security Loses to Security That Works
A founding security engineer explains why detection as code, outcome-based scoping for AI agents and using AI to review AI-generated code matter more than chasing theoretical perfection, and why human frustration with controls is still the risk nobody wants to name.
- Shipping's Wild West: Securing Software at Sea
A look inside the unusually relaxed security culture of maritime technology, from captains overriding IT policy to crew data crossing multiple stakeholders on patchy satellite links, plus a candid breakdown of how AI is changing code review without removing human safeguards.
- Post-Quantum Crypto Without Rebuilding Your Estate
A CTO working on post-quantum encryption explains why harvest now decrypt later is already a live threat, how crypto agility can be achieved without rebuilding systems from scratch, and what years in identity and bank risk oversight taught him about boards, zero trust and AI-generated code.
- The Ghost in the Business: Why In-House IT Gets Overlooked
An IT manager explains why in-house support teams get starved of budget and attention, the real difference between outsourced and in-house service desks, and what day-to-day identity management, vendor reviews and compliance certifications actually look like on the ground.
- The Why Behind the Controls
A GRC leader at a fast-growing, multi-sector group explains how to set a baseline controls programme that subsidiaries can layer on top of, why cutting third-party review times means questioning what you actually ask vendors, and why he resists dressing up risk figures with more precision than…
- People Are Not the Weakest Link
Lisa Ventura explains why fear based security awareness backfires, how psychological safety changes whether staff report mistakes, and why she now calls kindness a security control in an industry facing a retention and gender gap.
- The Charger and the Grid: Cyber Risk in EV Infrastructure
A look at securing EV charging infrastructure where IT and OT collide, covering supplier trust, machine identity sprawl and where AI can and cannot be trusted near physical systems.
- Why Your Brain Decides in 30 Seconds and Spends Hours Proving It
An organisational psychologist explains why hiring decisions are made in the first 30 seconds and justified for hours afterwards, why annual awareness training rarely changes behaviour under pressure, and what actually keeps high alert security teams from burning out.
- The Plant That Blows Up: OT Security Meets Chemistry
A chartered chemical engineer turned CTO explains how gasification plants turn waste into jet fuel, why OT risk in the chemical industry means explosions and toxic releases rather than data loss, and why cyber security still has no place in the chemical engineering curriculum.
- The Accelerator Pedal: Shipping Fast Without Shipping Risk
A veteran software engineer turned fractional CTO explains why AI coding tools act as an accelerator pedal for both good and bad engineering habits, why shadow AI use creeps in when official tools are too restrictive, and why automating a process beats relying on written guidelines to fix…
- The CISO Who Says GRC Is Broken
A CISO explains why point-in-time compliance gives a false sense of assurance, how to answer the board's exposure question without hiding behind a heat map, and where AI is genuinely helping security teams connect data that used to sit in silos.
- Killing the Foundation: The Broken Cyber Pipeline
A university cyber security programme leader explains why graduates struggle to break into the industry, how AI is quietly removing the junior tasks that used to build analyst judgement, and what students can do instead to stand out.
- It's Not the Tool, It's the Process
Bruno Bossola explains why dependency and supply chain risk keeps slipping past security teams, and why the fix is rarely another scanner but a proper process across the whole development lifecycle. He also sets out why AI coding assistants are quietly reintroducing vulnerable libraries at scale.
- More Tech Isn't the Answer: The Human Factor in Cyber
Joe Hubback explains why cyber risk quantification only really works when it's built around reasonable worst case scenarios, why third party and OT risk are often more about people than technology, and why he believes the industry's biggest blind spot is behaviour, not tooling.
- Most Security Problems Are Really Access Control Problems
Thomas Owen explains why he sees almost all security failures as access control failures rooted in human identity, and how measurable, causal testing can actually shift intrinsic staff behaviour rather than just producing a click rate on a dashboard. He also sets out where AI has changed the…
- Don't Sweat Quantum, Sweat Your Attack Surface
A field CSO who built SOC teams from the ground up explains why board risk numbers are more storytelling than maths, why supplier questionnaires are mostly theatre, and why the weakest link line about users is wrong.
- Stop Blaming Users: 25 Years Breaking Ships, Planes and Yachts
A veteran penetration tester explains why legacy technology, rigid procurement cycles and marketing-driven security purchases leave ships, planes and industrial control systems exposed, and gives a grounded assessment of how much AI is really changing offensive security today.
- Phishing, AI and the SME Blind Spot
A practical look at how small agencies can protect themselves against phishing and social engineering, why identity and MFA now matter more than network boundaries, and how to bring AI into a business without losing control of governance and data.
- No Defences: The Honest State of AI Security
Chris Jefferson explains why AI systems fail by design rather than by accident, where language models and vision systems break under attack, and why some of these weaknesses have no real defence. He also covers the practical risks of data leakage, AI generated code, and handing tasks to autonomous…
- The Bot Is Another Employee
A practical look at treating unattended bots as machine identities with their own attack surface, why supply chain hits like JLR change how automation vendors get access to client infrastructure, and where AI-assisted coding and zero trust claims fall short in real deployments.
- People, Patients and Ransomware: The Real NHS Threat
A look at what it actually takes to secure NHS trusts, from managing risk on medical devices that can't simply be patched to translating cyber threats into patient safety and financial terms a hospital board will act on. Covers supplier assurance, staff retention against private sector pay, and…
podsearch is a free, independent podcast search engine. Read about podsearch, the privacy policy or contact us.