Cyber Heard

Lisa Ventura explains why fear based security awareness backfires, how psychological safety changes whether staff report mistakes, and why she now calls kindness a security control in an industry facing a retention and gender gap.

A look at securing EV charging infrastructure where IT and OT collide, covering supplier trust, machine identity sprawl and where AI can and cannot be trusted near physical systems.

An organisational psychologist explains why hiring decisions are made in the first 30 seconds and justified for hours afterwards, why annual awareness training rarely changes behaviour under pressure, and what actually keeps high alert security teams from burning out.

A chartered chemical engineer turned CTO explains how gasification plants turn waste into jet fuel, why OT risk in the chemical industry means explosions and toxic releases rather than data loss, and why cyber security still has no place in the chemical engineering curriculum.

A veteran software engineer turned fractional CTO explains why AI coding tools act as an accelerator pedal for both good and bad engineering habits, why shadow AI use creeps in when official tools are too restrictive, and why automating a process beats relying on written guidelines to fix recurring security issues.

A CISO explains why point-in-time compliance gives a false sense of assurance, how to answer the board's exposure question without hiding behind a heat map, and where AI is genuinely helping security teams connect data that used to sit in silos.

A university cyber security programme leader explains why graduates struggle to break into the industry, how AI is quietly removing the junior tasks that used to build analyst judgement, and what students can do instead to stand out.

Bruno Bossola explains why dependency and supply chain risk keeps slipping past security teams, and why the fix is rarely another scanner but a proper process across the whole development lifecycle. He also sets out why AI coding assistants are quietly reintroducing vulnerable libraries at scale.

Joe Hubback explains why cyber risk quantification only really works when it's built around reasonable worst case scenarios, why third party and OT risk are often more about people than technology, and why he believes the industry's biggest blind spot is behaviour, not tooling.

Thomas Owen explains why he sees almost all security failures as access control failures rooted in human identity, and how measurable, causal testing can actually shift intrinsic staff behaviour rather than just producing a click rate on a dashboard. He also sets out where AI has changed the economics of phishing and deepfakes, and where he draws the line between protecting staff and quietly surveilling them.