A Speak & Spell taught Richard Davey something in 1982 that most security leaders learn the hard way: machines don't always get it right. That early instinct to question technology has shaped every decision since.
Richard Davey, Principal Security Engineer, joins Spencer Mott on the promenade at Bexhill-on-Sea on the southern coast of Britain, the unlikely birthplace of British motor racing, to talk about his career path to becoming a security leader.
They get into the tension between control and usability, why the smartest hire Richard ever made came from law enforcement, and a story about a midnight alarm system that revealed more about a company's security culture than any audit ever could.
You’ll learn how he manages complex business risks by prioritizing material impact over technical noise and his approach to mentoring the next generation of leaders in the industry.
In this episode, you’ll learn:
- Meaningful risk reduction requires a deep understanding of business goals before investing in technology.
- High-stakes security judgment calls still require human context that AI cannot replicate.
- Effective security controls must be invisible to prevent users from seeking dangerous workarounds.
- Diverse perspectives on a team ensure a broader understanding of how systems fail.
Timestamps:
(00:00) Meet Richard Davey
(03:06) The connection between Formula One and modern technology
(04:07) Comparing security observability to Formula One race signals
(07:01) Translating technical risk into material business impact
(09:06) Modernizing third-party security and the Cinderella rule
(13:13) Why diversity of perspective is critical for solving complex problems
(18:43) Managing the dangers of complacency and technical assumptions
(22:23) Using the browser to enforce identity and observability
(25:01) Reflections on career retrospection and the nature of the ocean
(29:13) Mentoring the next generation of leaders through BSides
(33:12) Balancing the natural tension between usability and control
(37:24) The "nirvana" of raising security while lowering friction
(42:27) Advice for professionals entering the security field today