Razorwire Cyber Security & InfoSec Insights

Razorwire Cyber Security & InfoSec Insights

By Razorthorn Security | Cybersecurity & InfoSecBusinessNewsTechnologyTech NewsCareers
Download on the App Store

Razorwire Cyber Security & InfoSec Insights episodes

  • Venture Capital's Cybersecurity Crisis: No Money, No Innovation, No Future?

    Why venture capitalists have abandoned cybersecurity and what this means for real innovation

    Welcome to Razorwire, the podcast where we go beyond the headlines to dig into what really matters in information security. I'm your host, James Rees and this week we're pulling back the curtain on the world of venture capital in cybersecurity. The brutal truth is that VC money has dried up, innovation has stalled and according to this week’s special guest, we're mostly seeing "the same crap with AI on it." VCs are having layoffs, funds are frozen at 13-14 years with no exits and genuine breakthroughs are nowhere to be found.

    In this episode, I sit down with cybersecurity expert Oliver Rochford to dissect the state of VC investment in information security in 2025. We break down why funding is tightening, where the "innovation" is really happening (or not) and how security start-ups can survive in a changing landscape. If you're tired of jargon and want to know what's really happening behind the scenes, from market consolidation through to the real world impact on practitioners and products, this one's for you.

    3 key talking points you won’t want to miss:

    1. Why VC money is slowing and what that means for innovation
    2. We explore the shifting strategies of venture capital in the security industry: what’s drying up, where the smart bets are moving and whether this environment is strangling real progress.
    3. The reality behind “consolidation” and the myth of the mega-vendor
    4. Oliver unpicks the idea of market consolidation and explains why, despite the headlines, the security market remains fragmented and why there’s unlikely to be a handful of companies owning it all.
    5. What start-ups really need to survive in the current market
    6. We talk through the pitfalls, survival tactics and realities facing new security vendors. From the importance of business fundamentals to why flashy tech might not be enough, you’ll get practical insight into turning great ideas into sustainable businesses.

    Tune in for a realistic look at the business side of cybersecurity, packed with lessons directly from the experts.

    The Startup Funding Struggle:

    "No one's getting any money. Not the investors, not the VCs. They've had rounds of layoffs in the VC industry, which you can imagine, the people with money have had layoffs."

    Oliver Rochford

    Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen



    In this episode, you’ll learn:

    Why VC Funding Has Hit Crisis Point: Discover why venture capital investment has frozen in cybersecurity, with VC funds now at 13-14 years (well beyond the typical 10-year lifecycle) and no viable exits in sight and why even VCs themselves are having layoffs.

    How Major Vendors Are Replacing Traditional VCs: Learn why Cisco, Okta and Zscaler have established their own investment arms and how this shift is concentrating power whilst reducing diversity in startup selection.

    What's Really Happening Behind the Scenes: Understand how silent fire sales are occurring and why limited partners are refusing to invest further, stalling new cybersecurity ventures.

    Why "Consolidation" Is Actually a Myth: Learn why the cybersecurity vendor landscape remains highly fragmented despite headlines suggesting otherwise and why no single vendor will ever dominate.

    How Cybersecurity Compares to Other Tech Markets: Discover why the total addressable market for cybersecurity ($78 billion) pales next to what Microsoft alone spent on AI data centres ($85 billion), making it less appealing for VCs.

    Which Niches Are Still Getting Funding: Find out why only security telemetry pipelines, AISecOps, cloud security and machine identities are attracting investment whilst most areas see nothing.

    Why European Startups Face Impossible Odds: Understand the "stunted trees on a mountain" reality, where European startups get 10% of American budgets but are expected to deliver the same results.

    What Happens to "Autonomous" Security Promises: Learn why most companies promising fully automated pen testing or autonomous security operations inevitably pivot to AI-assisted managed services.

    How AI Is Breaking Traditional Metrics: Discover why customers jump between AI tools monthly rather than committing annually, making traditional revenue metrics unreliable and forcing new approaches.

    What Startups Must Do to Survive Now: Understand why rapid traction and clear revenue paths are now essential for securing follow-on investments in this tougher environment.

    Why Innovation Has Actually Stalled: Learn why there's been no real innovation in cybersecurity for five years, with most products being iterations rather than genuine breakthroughs.

    How Market Barriers Have Grown Higher: Discover why larger vendors with established customer bases and investment arms now dominate, making it nearly impossible for new startups to break through.

    Why Networks Matter More Than Ever: Understand how increasing emphasis on backgrounds and connections is creating fewer opportunities for diverse or unconventional teams to succeed.


    Resources Mentioned
    • Infosec
    • Gartner
    • Wiz
    • Razor's Edge Continuous Threat Exposure Management
    • Y Combinator
    • The Cyber Sentinels Handbook


    Connect with your host James Rees

    Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cybersecurity professionals who dedicate their careers to making a hacker’s life that much more difficult.


    Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

    With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

    For more information about us or if you have any questions you would like us to discuss email [email protected].

    If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.


    Linkedin: Razorthorn Security

    Youtube: Razorthorn Security

    Twitter:   @RazorThornLTD

    Website: www.razorthorn.com


    All rights reserved. © Razorthorn Security LTD 2025

    43 min
  • The SME Cybersecurity Revolution: How Coro Cracked the Code

    Are small and medium-sized businesses finally getting the cybersecurity solutions they deserve - or is the market still leaving them exposed?

    Welcome back to Razorwire, the podcast where I investigate the real world challenges and breakthroughs in cybersecurity, bringing you the stories and advice of the industry’s leading minds. I’m Jim, and in this episode, I’m sitting down with Piers Morgan - no, not that Piers Morgan - who serves as Senior Vice President and General Manager for EMEA at Coro cybersecurity. We’re exploring the future of endpoint security for small and medium-sized businesses and why this sector is seeing a big shift in how security is delivered, priced and managed.

    In our conversation, we get frank about the tangled mess of security tools, why dashboards are driving everyone mad and how the industry’s obsession with complexity has left the “forgotten” mid-market crying out for help. Piers shares how Coro is shaking up the space with unified, affordable security, without the vendor lock-in and upsell traps that so often sting growing businesses.

    Key Talking Points:

    • The end of the dashboard nightmare: Discover why having “one pane of glass” for your entire security stack has become more than just marketing hype for smaller firms, and how Coro is actually delivering on this long standing promise.
    • Security without breaking the bank: We dig into the true cost of endpoint protection and how most businesses are burning cash on complex tools they barely use. Learn what a flat rate, scalable approach really looks like in practice.
    • What’s next in SME security: Hear how Coro’s approach to AI and automation is giving small businesses access to enterprise-grade defences, along with Piers’ view on where the market is heading, the threats reshaping mid-sized risk and why managed services are becoming the new frontline for the channel.

    If you’re a cybersecurity professional, consultant or MSP grappling with SME security demands, you’ll hear practical insights  and perhaps question a few of your own assumptions about what’s possible for the “forgotten middle” of our industry.

    On the cost burden for smaller businesses:

    "It can go up to fifteen hundred dollars a seat a year. Now, when you're timesing that by a few hundred licences and users, that's a significant amount of cash. We can manage it in one single platform... we can do it up to a tenth of the cost of what they're currently using today."

    • Piers Morgan (Coro)

    Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen


    In this episode, we covered the following topics:
    • Escape the multiple dashboard trap Learn why juggling numerous disconnected security platforms creates operational chaos and discover practical approaches to streamline your security operations. 
    • Right-size security solutions for smaller organisations Understand how to match your security investments to your actual needs and resources, avoiding the enterprise-focused tools that often overwhelm smaller teams. 
    • Implement unified security platforms effectively Discover how to evaluate and deploy consolidated security solutions that deliver enterprise-grade protection without the complexity or cost. 
    • Calculate the true cost of your security stack Learn to audit your current security spending and identify where you're paying for unused capabilities or redundant tools. 
    • Adapt your security strategy to modern threats Understand why traditional security approaches fail against today's attackers who target organisations of all sizes, not just major corporations. 
    • Leverage automation to reduce security workload See how to implement security solutions that work behind the scenes, freeing your team from constant monitoring and alert management. 
    • Work effectively with managed service providers Learn how to evaluate and engage MSPs as security partners, particularly if you lack in-house cybersecurity expertise. 
    • Navigate vendor consolidation and avoid integration pitfalls Understand how to assess whether vendor acquisitions actually improve security platforms or just create more complexity. 
    • Prepare for increasing regulatory demands Learn how to build security programmes that meet compliance requirements without breaking your budget or overwhelming your team. 
    • Future-proof your security investments Discover how AI integration and modular architectures can make your security solutions more adaptive and scalable as threats evolve.

    Resources Mentioned
    • Piers Morgan (Coro Cybersecurity)
    • Coro (Coro Cybersecurity)
    • CrowdStrike
    • Azure
    • AWS
    • Barracuda
    • Gartner
    • Forrester
    • Canalys
    • Marks & Spencer (M&S) Cyber Breach
    • PCI
    • ISO 27001
    • Windows Defender


    Connect with your host James Rees

    Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.


    Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

    With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

    For more information about us or if you have any questions you would like us to discuss email [email protected].

    If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.


    Linkedin: Razorthorn Security

    Youtube: Razorthorn Security

    Twitter:   @RazorThornLTD

    Website: www.razorthorn.com


    All rights reserved. © Razorthorn Security LTD 2025

    41 min
  • Human Risk Intelligence: Is Behavioural Data the New Defence?
    How do we measure and manage the human element of cyber risk beyond technology and basic security training?

    Welcome to Razorwire, where we uncover what really matters in cybersecurity. I’m James Rees and in this episode, talking about the world of human risk intelligence with Flavius Plesu, Founder and CEO of OutThink. We'll question whether staff really are the 'weakest link' and instead explore how understanding real human behaviour can turn your workforce into a formidable security asset.


    For too long, information security has focused almost exclusively on technical controls, but sophisticated attacks today often exploit human decision-making more than any firewall. Flavius draws on his experience as a CISO and innovator, sharing first-hand insights into how organisations can predict, quantify and actively manage risk stemming from their staff. We discuss psychological profiling techniques that identify high-risk individuals, methods for engaging employees in security and balancing monitoring with trust when using behavioural analytics. If you want to future-proof your security posture, this episode is essential listening.


    3 Key Talking Points:

    • Why traditional security awareness strategies fall short - and what truly effective human risk management looks like: Learn why measuring click rates and running generic training programmes leaves you blind to real human risk, and discover how behavioural science and crowdsourced intelligence can finally give you the visibility and control you need.
    • Real world examples of predicting and preventing insider threats - before damage is done: See exactly how banks and enterprises use psychographic segmentation and statistical models to identify risky patterns in their workforce, and understand the practical steps to transform your incident response from reactive to predictive.
    • Navigating the ethical line: how to balance security monitoring with employee privacy and trust: Master the delicate balance between effective security monitoring and employee rights, learning how transparency-driven design and GDPR-compliant approaches can turn potential resistance into active security partnership across your organisation.

    Ready to rethink the human side of cyber risk? Tune in to this Razorwire episode and sharpen your defences from the inside out.



    On Moving Beyond Traditional Training: 

    "Something like 90% of users admitted to bypassing security controls… with full knowledge that they're introducing additional risk to the organisation. So the idea that training would be enough, just train them, they'll get it. It's a bit naive."

    Flavius Plesu


    Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen


    In this episode, we covered the following topics:
    • The Evolution of Human Risk in Cybersecurity Learn how the industry's shift from purely technical controls to recognising human factors is reshaping security strategy and why this change is essential for modern organisations.
    • Defining Human Risk Intelligence Understand what human risk intelligence actually means and discover how organisations can quantify and predict human behaviour to strengthen their cybersecurity posture.
    • The Shortcomings of Traditional User Training Discover why legacy approaches like annual training and click-through tests fail to address real world human risk and what you should be doing instead.
    • Accidental vs. Malicious Insider Threats Explore the full spectrum of risky behaviours your organisation faces, from unintentional mistakes to deliberate attempts to circumvent controls, and how to address each type.
    • Behavioural Segmentation and Psychographics Learn how psychographic profiling and behavioural analysis can help you identify risk tendencies in your workforce and tailor security interventions accordingly.
    • Crowdsourced Security Intelligence See how to leverage collective workforce insight to detect risks that traditional security teams miss, turning your employees into valuable intelligence sources.
    • Storytelling in Incident Response Understand why analysing chains of behaviour, rather than isolated events, is crucial for predicting and preventing future security incidents.
    • Predictive Modelling for Proactive Security Discover how combining multiple risk indicators enables you to anticipate and prevent security breaches before they occur, moving from reactive to proactive security.
    • Balancing Security Monitoring with Privacy Navigate the ethical and practical challenges of user monitoring, particularly around GDPR compliance and maintaining employee trust.
    • Cultivating a Security-Conscious Culture Learn strategies for engaging users constructively, transforming them from compliance-focused participants to active partners in your organisation's security efforts.


    Resources Mentioned
    • OutThink
    • Gartner
    • UCL (University College London)
    • PhishMe
    • SANS
    • Bitdefender
    • AVG
    • IBM Watson
    • LimeWire
    • PCI DSS
    • Microsoft Graph API
    • The Cyber Sentinels Handbook


    Connect with your host James Rees

    Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.


    Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

    With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

    For more information about us or if you have any questions you would like us to discuss email [email protected].

    If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.


    Linkedin: Razorthorn Security

    Youtube: Razorthorn Security

    Twitter:   @RazorThornLTD

    Website: www.razorthorn.com


    All rights reserved. © Razorthorn Security LTD 2025

    39 min
  • Inside the Early Lessons of DORA Compliance: What Works, What Fails, What’s Next?

    Six months into DORA's implementation, what's actually happening in financial services organisations?

    Welcome back to Razorwire, where we tackle cybersecurity's toughest challenges with honesty and expert insight. In this episode, I'm joined by returning experts Jonathan Care and Richard Cassidy and also a new guest to the podcast, Romain Deslorieux, to examine how the Digital Operational Resilience Act is playing out in practice.

    Now some time has passed since DORA's January deadline, we're seeing the real story emerge. Some organisations are discovering they fundamentally misunderstood what compliance actually requires. Others are struggling with skills gaps they didn't anticipate. And many are finding that operational resilience can't simply be bought or outsourced.

    Our guests share what they're witnessing firsthand – from boardrooms finally grasping why digital resilience matters to IT teams pushed beyond their limits. We discuss the vendor relationship upheaval, the consultant dependency trap, and why some approaches are succeeding while others spectacularly fail.

    If you're dealing with DORA implementation, wrestling with third-party risk or watching your security team stretched thin, this conversation offers the unvarnished perspective you need.

    Key Talking Points:

    • From Tick-Box Compliance to True Resilience: Discover why DORA is exposing the dangerous gap between documentation exercises and actual operational readiness and why this demands unprecedented collaboration across IT, compliance and business teams.
    • The Human Capital Crisis Behind DORA: Learn how the regulation is revealing critical expertise shortages (40-50% of financial entities lack internal capabilities), creating dangerous over-reliance on consultants and pushing existing teams towards burnout.
    • Third-Party Risk Revolution: Get behind-the-scenes insights on how DORA has fundamentally changed vendor relationships, why surface-level due diligence no longer works and the board-level cultural shifts making resilience a C-suite priority rather than an IT problem.

    Tune in for an unfiltered, expert-led conversation on what’s working, what’s failing and where DORA is truly making a difference in cybersecurity today.

    On the accountability gap in third party risk:

    "Really what do you do about this responsibility? How do you demonstrate that you are accountable? That people fell short on that question and now with the third party responsibility, which is clearly identified in things like DORA, people cannot ignore it anymore."

    Romain Deslorieux


    Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

    In this episode, we covered the following topics:
    • DORA's Immediate Impact Learn how DORA is driving financial institutions to adopt continuous monitoring and operational resilience strategies that go far beyond traditional compliance checklists. 
    • Third Party Risk and Vendor Management Understand how to navigate the fundamental shift in vendor relationship management, including the enhanced due diligence and transparency requirements now reshaping procurement decisions. 
    • Cultural and Organisational Change Discover strategies for building the cross-functional collaboration between IT, security and business teams that DORA compliance demands. 
    • The Human Capital Challenge Explore how to address the critical shortage of skilled professionals capable of delivering DORA's operational requirements whilst avoiding recruitment pitfalls and team burnout. 
    • Compliance versus True Operational Resilience Recognise the warning signs that distinguish genuine business transformation from ineffective box-ticking approaches to DORA implementation. 
    • The Role of Consultants Learn how to leverage external expertise for DORA compliance whilst building internal capabilities and avoiding dangerous over-dependence on consultants. 
    • Disparities across Europe Navigate the varying interpretations and enforcement approaches across member states, particularly around critical definitions like "major incident" and "critical ICT". 
    • Supply Chain and Smaller Entities Understand the specific challenges facing smaller fintechs and niche providers in meeting DORA standards, plus strategies for managing extended supply chain risks. 
    • Centralised Approaches to Security Implement proven centralised security and resilience frameworks that maximise scarce resources whilst enforcing consistent policy across organisations. 
    • The Shift to Resilience Thinking Embrace the industry-wide mindset change from prevention-focused compliance to comprehensive operational continuity and recovery planning at board level.


    Resources Mentioned
    • Thales
    • Rubrik
    • KuppingerCole
    • Digital Operation Resilience Act (DORA)
    • GDPR
    • ISO 27000
    • PCI DSS
    • NIST frameworks
    • SOC 2
    • CSSF (Commission de Surveillance du Secteur Financier, Luxembourg)
    • ABBF (Bankers Association, Luxembourg)
    • Microsoft Active Directory
    • Security Scorecard
    • European Banking Authority (EBA)


    Connect with your host James Rees

    Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.


    Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

    With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

    For more information about us or if you have any questions you would like us to discuss email [email protected].

    If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.


    Linkedin: Razorthorn Security

    Youtube: Razorthorn Security

    Twitter:   @RazorThornLTD

    Website: www.razorthorn.com


    All rights reserved. © Razorthorn Security LTD 2025

    57 min
  • NHS Cybersecurity Crisis: Who is Actually Protecting Your Medical Records?

    Welcome to Razorwire, where we examine the realities facing cybersecurity professionals on the front lines of digital defence.

    In this episode, I am joined by Rob Priest, a former NHS insider with 24 years of experience, and returning co-host Richard Cassidy to expose the cybersecurity crisis gripping Britain's healthcare system. From WannaCry's devastating impact to recent ransomware attacks on children's hospitals, our experts reveal why the NHS remains a prime target for cybercriminals despite years of warnings and government promises.

    Rob shares insights from his transition from running around hospital corridors with paper records to witnessing sophisticated nation-state attacks that can cripple entire trust networks for months. Richard brings his unique perspective as both a cybersecurity professional and working paramedic who experienced firsthand how cyber attacks paralyse emergency services when systems go dark.

    Whether you're a healthcare professional worried about patient safety, a cybersecurity expert trying to understand why healthcare remains so vulnerable, or a concerned citizen wondering why your medical data isn't better protected, this conversation cuts through the political rhetoric to examine what's actually happening behind NHS firewalls.

    Tune in for an unvarnished look at legacy systems running on Windows 95, the shortage of qualified CISOs across 213 NHS trusts and why the government's latest cybersecurity mandates might create more problems than they solve.

    Listen in for:

    1. The Hidden Fallout of Cyber Attacks on Patient Care - Understand the cascading impact that ransomware and outages have, not just on IT, but on clinicians, paramedics and everyday patient outcomes. Rob shares first-hand accounts of real NHS incidents and why cyber breaches are, at their core, clinical emergencies.

    2. Why Legacy Tech and Fragmented Leadership Leave Us Exposed - Hear why outdated, unsupported systems and a chronic lack of cyber leadership make true resilience so tough in large NHS trusts. We unpack the disconnect between government strategy, local implementation and real world risk.

    3. Practical Steps (and Missed Opportunities) for NHS Cyber Resilience - Explore what actually works, from playbooks and clinical 'huddles' to the role of centralised threat intelligence - and where policy too often lags behind reality. If you want to know how to prioritise resilience amid chronic uncertainty, this episode is essential listening.

    Get ready for a grounded discussion that blends expert perspective with genuine NHS war stories - plus candid thoughts on what really needs to change.


    On learning from cyber incidents before they happen: 

    "Organisations that understand the impacts of events the best are the ones that have actually gone through it. My question is: does that have to be the case?"

    Rob Priest, Rubrik



    Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen


    In this episode, we covered the following topics:
    • Understanding Escalating Cyber Threats to the NHS - Learn how nation-state actors and cybercriminals are targeting NHS organisations through supply chain weaknesses and vulnerable digital infrastructure. 
    • Recognising Legacy Technology and Technical Debt Challenges - Discover why outdated IT systems and unsupported medical devices create persistent security challenges and make patching complex and risky. 
    • Assessing the Impact on Patient Care and Clinical Operations - Understand how cyber incidents lead directly to care disruptions, cancelled appointments and patient safety risks when systems become unavailable. 
    • Identifying Supply Chain Vulnerabilities - Learn about the risks from third party vendors and service providers that expose NHS trusts to breaches originating beyond their direct control. 
    • Recognising Workforce and Leadership Gaps - Explore the critical shortage of cybersecurity leadership across NHS trusts and why so few employ dedicated CISOs or security professionals. 
    • Evaluating Government Strategy, Regulation and Funding - Understand the challenges of fragmented mandates, insufficient funding and slow implementation of government-led cybersecurity initiatives. 
    • Understanding the Fallout of Organisational Change - Learn how ongoing restructurings like NHS England's disbandment create uncertainty, undermine coordination and risk losing experienced staff. 
    • Exploring Centralisation vs. Localisation Challenges - Discover the tensions between centralised security services and the bespoke needs of individual trusts in maintaining effective governance. 
    • Learning from Real-World Incident Impacts – We discuss the lessons learned from major incidents like WannaCry and ransomware attacks and why organisational learning remains slow despite clear vulnerabilities. 
    • Implementing Resilience and Cyber Preparedness - Learn practical approaches including playbooks, cyber incident drills, impact quantification and integrating clinical and cybersecurity teams to improve NHS cyber maturity.




    Resources Mentioned
    • Rubrik
    • NHS (National Health Service)
    • NHS England
    • NHS Digital
    • NCSC (National Cyber Security Centre)
    • Active Cyber Defence Programme (NCSC initiative)
    • NCSC Cyber Assessment Framework (CAF)
    • DSBT (Data Security and Protection Toolkit)
    • WannaCry
    • Synnovis
    • British Medical Association (BMA)
    • Cyber Security Strategy for Health and Adult Social Care 2023–2030
    • Cyber Security Resilience Bill
    • DORA (Digital Operational Resilience Act, EU)
    • Indiana Jones and the Raiders of the Lost Ark (film)
    • The Cyber Sentinel’s Handbook (book)


    Connect with your host James Rees

    Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.


    Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

    With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

    For more information about us or if you have any questions you would like us to discuss email [email protected].

    If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.


    Linkedin: Razorthorn Security

    Youtube: Razorthorn Security

    Twitter:   @RazorThornLTD

    Website: www.razorthorn.com


    All rights reserved. © Razorthorn Security LTD 2025

    56 min
  • How Do You Safeguard AI When Development Outpaces Security? With Ante Gojsalić - SplxAI

    Can we secure generative AI before it outpaces our ability to defend it?

    Welcome back to Razorwire, where we have our finger on the pulse of cybersecurity’s most urgent dilemmas and future threats. I’m your host, Jim and in this episode, I sit down with Ante Gojsalić, CTO and co-founder of SplxAI, to unpick the tangled challenges of securing the next wave of generative AI before it becomes too integrated, too complex and too risky to control.

    Generative AI is reshaping everything from business operations to personal lives, but the race to capitalise on its potential leaves us with difficult questions. Are we allowing technological progress to sprint ahead of security? Is anyone putting robust protections at the heart of these new AI systems? Ante shares stories from the frontlines - explaining why both East and West are taking wildly different approaches, why securing AI isn’t as simple as plugging in a new tool and how the real vulnerabilities lie hidden in the everyday systems we’re already beginning to trust.

    Three key talking points to listen out for:

    1. Why securing AI is fundamentally different - and harder - than traditional IT - Ante shares real scenarios where the unpredictable, fast-evolving nature of large language models means old school security techniques simply can’t keep pace. Find out why continuous testing, automation and security-by-design are more critical than ever.
    2. Hidden risks as AI agents take on human-like roles in business - We explore where the most pressing security gaps lie as AI agents begin to make decisions, handle confidential data and even manipulate users. Learn how attackers are already exploiting these systems - and what steps organisations can take to avoid catastrophic mistakes.
    3. The battle between business priorities and security fundamentals -
    4. Hear our thoughts on why commercial pressure and the quest for innovation often override basic security and discover hands on, pragmatic advice for leaders aiming to bake security into AI projects from day one - before it’s too late.

    Whether you’re a CISO, an AI developer or a cyber strategist, this episode of Razorwire will arm you with practical insights and hard-won lessons on defending against the unknowns of AI.



    Why Continuous Security Testing Is Essential: 

    "So imagine you do the security evaluation [of AI] on day one, then they change it a hundred times and you don't do another pen test. It's not relevant anymore. So, yeah, the continuous thing is important. Automation is important. And with AI, which is non-deterministic and which is still very changeable day by day, it's different than web security or API security… It's just unstable."

    - Ante Gojsalić, on why traditional security approaches fail with AI systems



    Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen


    In this episode, we covered the following topics:
    • Rise of Generative AI - Understand what generative AI actually is and how to assess its rapidly expanding applications within your organisation's threat landscape. 
    • Global AI Arms Race - Learn how different regional approaches to AI development affect your security strategy and vendor selection decisions. 
    • Security vs Speed in AI Development - Discover practical ways to balance innovation pressure with security requirements without stifling business growth. 
    • Emerging Threats to AI Systems - Identify specific vulnerabilities you need to watch for, including agentic decision-making risks, data leaks and adversarial attacks targeting your AI implementations. 
    • Challenges of Securing AI from the Start - Get actionable guidance on integrating security into AI system design rather than retrofitting protection after deployment. 
    • Continuous Security Testing for AI - Learn why traditional annual pen testing fails for AI systems and how to implement ongoing security assessment that keeps pace with model updates. 
    • AI-Powered Social Engineering - Recognise the sophisticated phishing and manipulation tactics enabled by generative AI and how to prepare your users for these evolved threats. 
    • Changing User Behaviours and Trust - Understand how widespread AI adoption, particularly among younger users, changes your security awareness and training requirements. 
    • Regulation and Governance Gaps - Assess whether current compliance frameworks adequately address AI risks and how to fill gaps in your governance approach. 
    • Future-Proofing AI Security - Prepare for emerging security challenges as AI systems increasingly blur human-machine decision boundaries and adapt your security strategy accordingly.


    Resources Mentioned
    • SplxAI
    • Probe (SplxAI flagship product)
    • Ray Kurzweil
    • DeepSeek
    • OpenAI GPT
    • Mitra
    • OWASP
    • DevSecOps
    • Razors Edge Continuous Pen Testing
    • DORA
    • PCI
    • The IT Crowd - Show me the internet
    • The Cyber Sentinels Handbook, A Primer for Information Security Professionals (book by Jim/James Rees)


    Connect with your host James Rees

    Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.


    Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

    With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

    For more information about us or if you have any questions you would like us to discuss email [email protected].

    If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.


    Linkedin: Razorthorn Security

    Youtube: Razorthorn Security

    Twitter:   @RazorThornLTD

    Website: www.razorthorn.com


    All rights reserved. © Razorthorn Security LTD 2025

    47 min
  • How To Get Your Staff to Actually Care About Cybersecurity

    Welcome to Razorwire, the podcast that challenges conventional thinking about cybersecurity with insight, humour and a dose of reality.

    In this episode, James Rees is joined by security awareness specialists Amy Stokes-Waters and Jemma to dismantle outdated approaches to security training. From click-through fatigue to the critical importance of culture change, our experts explore why traditional computer-based training fails to make organisations truly secure.

    Listen as Amy and Jemma share their expertise on transforming security awareness from a box-ticking exercise into meaningful behaviour change. Their refreshingly honest assessment of the "80% compliance myth" and why focusing on business impact rather than personal consequences undermines effectiveness will have security professionals nodding in recognition.

    Whether you're a CISO struggling with training completion rates, an IT professional tired of being ignored, or someone who's repeatedly clicked "next" through mandatory security modules wondering if there's a better way, this conversation offers practical alternatives to the stale CBT approach that dominates the industry.

    Tune in for a candid discussion that feels like eavesdropping on three security professionals brainstorming how to fix what's broken in security awareness while acknowledging the realities of human behaviour.

    3 Key Talking Points:

    1. Why Traditional Security Training Fails Everyone Discover the fundamental flaws in conventional security awareness approaches that waste both time and budgets. When Amy reveals that "less than 1% [of IT budgets] is spent on humans" while "95% of incidents are caused by humans," you'll understand why throwing money at technical solutions while neglecting human factors is a losing strategy. Listen for actionable insights on avoiding the compliance trap that leaves organisations vulnerable despite ticking all the regulatory boxes.
    2. The McDonald's Approach to Security Awareness Learn why successful security awareness should mirror effective marketing campaigns rather than dreaded annual training sessions. Our experts break down how security teams should adopt McDonald's persistent, multi-channel strategy instead of expecting one-off sessions to change behaviour. You'll gain practical strategies for implementing "security by osmosis" that keeps protective measures visible and top-of-mind without creating training fatigue or resistance.

    3. Measuring What Actually Matters Transform how you evaluate security awareness effectiveness with metrics that genuinely reflect improved security. When Jemma dismantles the "80% of people scored 80%" myth, you'll understand why completion rates and phishing test results fail to indicate real security improvements. Listen for concrete guidance on tracking meaningful engagement metrics like security team contact, proactive reporting, and actual incident reduction that demonstrate true cultural change rather than superficial compliance.


    "What a lot of people are doing is security training for compliance, but they're not actually doing anything around the culture. They're hitting the compliance metrics. Brilliant. But the actual culture of the organization is still inherently insecure."

    - Amy Stokes-Waters, on the difference between compliance and cultural change

    Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

    In this episode, we covered the following topics:
    • Budget Reality Check: Learn why organisations spending less than 1% of IT budgets on human factors whilst 95% of incidents are human-caused represents a critical strategic error
    • Bite-sized Learning: Understand why continuous micro-learning beats annual training blocks for better retention and genuine security improvements
    • Marketing Mindset: Adopt proven principles from successful marketing campaigns to make security awareness omnipresent and effective rather than a dreaded annual chore
    • Personalisation Power: Discover how offering people choices in how they learn dramatically increases engagement and knowledge retention across diverse workforces
    • Role-Based Approach: Implement targeted security training for different departments (developers, finance, executives) that addresses their specific risk profiles
    • Phishing Test Pitfalls: Recognise how traditional phishing simulations may inadvertently discourage collaboration and reporting – exactly the behaviours good security requires
    • Meaningful Metrics: Shift from completion statistics to tracking genuine engagement indicators like security team contact and incident reduction rates
    • Security Champions Network: Identify and nurture internal advocates who can amplify security messaging and create positive peer influence
    • Personal Relevance: Transform employee apathy by connecting security practices to personal benefits rather than abstract organisational consequences
    • Culture Over Compliance: Build genuine security culture that withstands evolving threats rather than merely satisfying point-in-time compliance requirements
    • Mobile-first Training: Engage the "TikTok generation" with security awareness delivered through the devices and formats they already prefer


    Other episodes you'll enjoy
    • Security vs Privacy: The Ethics of Data Collection

    YouTube: https://youtu.be/iIRv0qVXmWM 

    Spotify: https://open.spotify.com/episode/0wbWKF9zyxkHMY5kKMZyx5 

    • The Business of Biometrics: Data Protection and Ethical Standards in Cyber Security

    YouTube: https://youtu.be/eWfRalOk0E8 

    Spotify: https://open.spotify.com/episode/1QJPHcVRkKIIht3zsJWqWq 


    Connect with your host James Rees

    Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cybersecurity professionals who dedicate their careers to making a hacker’s life that much more difficult.

    Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

    With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

    For more information about us or if you have any questions you would like us to discuss email [email protected].

    If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.


    Linkedin: Razorthorn Security

    YouTube: Razorthorn Security

    Twitter:   @RazorThornLTD

    Website: www.razorthorn.com


    Loved this episode? Leave us a review and rating here


    All rights reserved. © Razorthorn Security LTD 2025

    40 min
  • Security Gone Mad: The Fine Art of Overdoing It

    Welcome to Razorwire, the podcast that challenges conventional thinking about cybersecurity with insight, humour and a dose of reality.

    In this brilliantly unfiltered episode, we're joined by security professionals Iain Pye and Chris Dawson for a no-holds-barred discussion about security measures that cross the line from prudent to preposterous. From biometric authentication dilemmas to the maddening theatre of airport security, our experts dissect the fine balance between protecting assets and actually getting things done.

    Listen as Chris and Iain lock horns on what constitutes "reasonable" security, with Chris arguing for Fort Knox-level protection while Iain advocates for practicality, whilst your host Jim attempts to referee. Their real-world examples of security absurdity, including trapping thieves in revolving doors and putting warning signs in car parks, will have you nodding in recognition or shaking your head in disbelief.

    Whether you're a battle-scarred security professional or maybe just someone who's stood impatiently in endless security queues wondering why your belt buckle is suddenly a threat to national security, this conversation offers both genuine insight and proper laughs about the sometimes bizarre world of overzealous security controls.

    Tune in for a refreshingly honest chat that feels like overhearing three security experts having a pint down the pub whilst debating the madness that sometimes defines our industry.

    3 Key Talking Points:

    The Security vs Practicality Tightrope

    Listen as our experts dissect the eternal balancing act between locked-down security and business functionality. When Chris boldly claims he'd implement "seven layers of security" for critical infrastructure while Iain argues for practicality, you'll gain valuable perspective on finding that sweet spot where protection doesn't become paralysis.

    The Psychology Behind Security Resistance

    Discover why people willingly hand over biometric data to tech giants yet baulk at the same requests from employers. Our conversation uncovers the fascinating psychological disconnect between consumer and corporate security acceptance, offering insights you can apply immediately to your own security implementation strategies.

    Beyond Bureaucracy: When Risk Management Goes Wrong

    Experience the painful yet hilarious reality of security bureaucracy gone mad, from needless warning signs in car parks to the absurdity of airport security theatre. You'll leave with a clearer understanding of how to champion meaningful security measures while avoiding the trap of controls that exist merely to tick compliance boxes.


    "Information security professionals the world over, in various different cultures and various different parts of the world have had the words echoing through the halls: ‘Isn't that a bit much?’"

    - James Rees, Razorthorn Security


    Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen


    In this episode, we covered the following topics:
    • Finding the Balance: Discover how to navigate the tension between robust security measures and practical business operations without alienating your colleagues
    • Biometric Backlash: Understand why people readily surrender their biometrics to tech giants but resist providing the same data to employers
    • Security Theatre: Learn to identify when security measures serve more as performance than protection, particularly in public spaces like airports
    • Risk Management Revelations: Gain insights into creating meaningful risk assessments that protect assets without drowning in needless bureaucracy
    • Human Behaviour: Recognise how "laziness" and resistance to security controls might actually signal poorly designed systems rather than difficult users
    • Security Culture: Explore how organisational risk culture directly impacts the effectiveness and acceptance of security measures
    • Physical vs Digital Controls: Compare approaches to security across both physical spaces (like data centres) and digital environments
    • Proportionate Response: Develop strategies for implementing security controls that match the actual threat level without overengineering solutions
    • Compliance vs Security: Distinguish between controls that genuinely protect your organisation and those that merely tick regulatory boxes
    • Security Stakeholder Management: Master the art of communicating security needs to business leaders without being dismissed as "overzealous"


    Other episodes you'll enjoy
    • Security vs Privacy: The Ethics of Data Collection

    YouTube: https://youtu.be/iIRv0qVXmWM 

    Spotify: https://open.spotify.com/episode/0wbWKF9zyxkHMY5kKMZyx5 

    • The Business of Biometrics: Data Protection and Ethical Standards in Cyber Security

    YouTube: https://youtu.be/eWfRalOk0E8 

    Spotify: https://open.spotify.com/episode/1QJPHcVRkKIIht3zsJWqWq 


    Connect with your host James Rees

    Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cybersecurity professionals who dedicate their careers to making a hacker’s life that much more difficult.

    Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

    With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

    For more information about us or if you have any questions you would like us to discuss email [email protected].

    If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.


    Linkedin: Razorthorn Security

    YouTube: Razorthorn Security

    Twitter:   @RazorThornLTD

    Website: www.razorthorn.com


    All rights reserved. © Razorthorn Security LTD 2025

    42 min
  • Unconventional Paths to Cybersecurity (AKA keeping your Nan Safe From Hackers)

    How can overcoming personal adversity lead to a successful career in cybersecurity?

    Welcome to Razorwire, the podcast that delves into the world of cybersecurity by sharing the journeys of its most inspiring figures. 

    Join us for a truly heartwarming episode as we welcome Jemma, the brilliant mind behind CultureGem and a passionate champion for security behaviour and culture. Jemma's incredible journey - from surviving homelessness to becoming a respected voice in InfoSec - reminds us how our different paths can bring richness and depth to our industry.

    Jemma shares her powerful story and gives fresh perspectives on the human side of cybersecurity, why accessibility matters in learning and the reason technical solutions alone will never be enough. We discuss the changing face of InfoSec culture, the eyebrow-raising phenomenon of "cyberlebrities", and how we might better spend our security budgets to protect the people who matter most.

    Whether you're a seasoned professional or just starting your InfoSec journey, you'll find wisdom in Jemma's approach to making security concepts meaningful for everyone - from corporate executives to her beloved nan.

    Tune in for a conversation that, for me, genuinely felt like catching up with a friend at the pub, whilst challenging us all to think differently about creating a more inclusive approach to security.


    3 Key Talking Points:

    1. The Human Element of Cybersecurity


    Learn why organisations allocate less than 1% of security budgets to human factors despite 97% of incidents being attributed to human error. Jemma explains how addressing this disconnect creates stronger security cultures and reduces vulnerabilities.

    1. Accessibility as a Security Imperative


    Discover how CultureGem's accessible learning approach removes barriers to understanding security concepts. Jemma demonstrates why making security comprehensible to everyone isn't just inclusive - it's fundamental to effective protection.

    1. The Evolving InfoSec Community


    Gain perspective on industry dynamics from "cyberlebrities" to challenges faced by professionals from non-traditional backgrounds. This discussion gives valuable context for navigating the InfoSec community.


    "If 10% of an IT budget is spent on cyber, which is there or thereabouts, less than 1% is spent on human side of cyber. Yet 97% of incidents are put down to, rightly or wrongly, human error."

    - Jemma, Founder of CultureGem


    Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen


    In this episode, we covered the following topics:
    • Overcoming Adversity: Learn how navigating difficult circumstances can build transferable skills for an InfoSec career 
    • Budget Realignment: Discover why redistributing your security budget towards human factors can address the root cause of 97% of incidents 
    • Inclusive Security: Explore how removing barriers to learning strengthens your organisation's overall security posture 
    • Employee Engagement: Find out how to move beyond compliance to create genuine security motivation amongst your staff 
    • Community Dynamics: Navigate the changing InfoSec landscape and its impact on collaboration and knowledge sharing 
    • Diverse Recruitment: Understand the value of hiring security professionals with unconventional backgrounds and experiences 
    • Translating Complexity: Learn techniques for explaining security concepts in ways that resonate with non-technical audiences 
    • Solution Assessment: Gain insights into evaluating security vendors and avoiding "ambulance chasing" during incidents 
    • Combating Bias: Recognise and address behaviours that create barriers for underrepresented groups in security teams


    Resources Mentioned
    • CultureGem - Empowering Small Businesses, Enterprises, and Security Professionals with Adaptive Learning Solutions
    • The Cyber Sentinels Handbook – by James Rees 
    • OWASP - (Open Web Application Security Project) 
    • WannaCry - The 2017 ransomware attack that inspired Jemma's move into cybersecurity


    Other episodes you'll enjoy
    • Mental Health, Organisational Culture & The Human Side of Cybersecurity 

    YouTube: https://youtu.be/k_VVu_bQZXg 

    Spotify: https://open.spotify.com/episode/1h88WI6RlKjF0BQ3ylbnfH?si=1Zqi4lrNSzO-klDQleyEhw 

    • Cybersecurity Burnout & Organisational Culture

    YouTube: https://youtu.be/naUT5jBQE_s 

    Spotify: https://open.spotify.com/episode/2xaF8hTnFR7MfQ0ob9wBu3 

    Connect with your host James Rees

    Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

    Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

    With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

    For more information about us or if you have any questions you would like us to discuss email [email protected].

    If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.


    Linkedin: Razorthorn Security

    YouTube: Razorthorn Security

    Twitter:  @RazorThornLTD

    Website: www.razorthorn.com


    Loved this episode? Leave us a review and rating here



    All rights reserved. © Razorthorn Security LTD 2025

    42 min
  • Mastering the Art of Communication in InfoSec

    In this latest episode of Razorwire, I sit down with the brilliant Stefania Chaplin to explore the often overlooked yet crucial skill of effective communication in information security.

    Throughout our conversation, we discuss why communication matters so much in our field, especially during critical moments when tensions run high. Stefania brings her trademark enthusiasm and wealth of experience to highlight approaches that work across different contexts, cultures and situations.

    As our profession has evolved, and particularly when working with colleagues remotely, our approach to communication needs to adapt accordingly. Whether you're just starting out or have been in the trenches for decades, I guarantee you'll take away some valuable insights on a skill that I've found to be just as important as technical expertise throughout my career.

    3 Key Talking Points:

    Managing Communication During Incidents

    Discover practical strategies for effective communication during high stress security incidents. Learn how to establish clear communication channels, manage stakeholder expectations and create space for your team to resolve issues without constant interruptions. Stefania shares techniques from her experience, including the importance of creating transparent incident documentation and using mindfulness to maintain clear thinking under pressure.

    Cross-Cultural Communication in Global Teams

    Gain insights into navigating the complexities of multicultural teams in information security. With remote work connecting professionals across different time zones and cultural backgrounds, understanding how communication styles vary globally has never been more crucial. Learn how different cultures approach feedback, instructions and hierarchy, drawing from Stefania’s multicultural background and experiences working as a digital nomad.

    Adapting Your Message to Different Audiences 

    Master the art of tailoring your security communication for different stakeholders. Whether you're speaking with developers who need technical details or executives who need the headlines, find out how to switch hats effectively. This practical knowledge will help you build credibility with technical teams whilst ensuring leadership understands the key security messages they need for decision-making.


    "What happens when you have a cybersecurity incident and you're working in a global organisation with employees from all different countries and cultures in a very high stress environment? In those moments, communication really matters."

    Stefania Chaplin


    Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen




    In this episode, we covered the following topics:
    • Incident Clarity - Transform your incident response with effective communication strategies for high stress scenarios
    • Global Trust - Build trust across global teams by understanding cultural communication differences
    • Stakeholder Speak - Tailor your security messaging for maximum impact with different stakeholders
    • Focus Shield - Protect your technical team from distractions during critical incidents
    • Pre-Crisis Planning – Advice on creating communication plans before incidents occur to reduce chaos when they happen
    • Mental Control – Learn breathing techniques to maintain clarity during high pressure security events
    • Remote Mastery - Navigate the complexities of remote teams across different time zones
    • Image Repair – How to break the "security is the bad guy" stereotype through better communication
    • Technical Translation – How to adapt your technical language for different audiences without losing credibility
    • Practice Pressure - Learn from war-gaming exercises to improve your team's communication under pressure
    • Toxicity Management – How to recognise and handle toxic communication patterns in the workplace
    • Feedback Loop - Implement feedback mechanisms to continuously improve your communication style


    Resources Mentioned
    • Effective Communication in Tech - Stefania's project focused on communication skills for technical professionals (effectivecommunicationintech.com)
    • DevStefOps - Stefania's personal website
    • The Culture Map – by Erin Meyer, on multicultural communication in business settings
    • Never Split the Difference - by Chris Voss, on negotiation techniques
    • Box Breathing Technique - a stress management tool to use during incidents
    • GitLab's Incident Response Guide - an example of transparent incident communication
    • The Cyber Sentinels Handbook – by James Rees 
    • Neuro-Linguistic Programming - a communication framework
    • Myers-Briggs Type Indicator - a personality assessment tool


    Meet our guest

    Stefania Chaplin

    Stefania’s (aka DevStefOps) experience as a Solutions Architect within DevSecOps, Security Awareness and Software Supply Chain Management means she's helped countless organisations understand and implement security throughout their SDLC. As a python developer at heart, Stefania enjoys optimising and improving operational efficiency by scripting and automating processes and creating integrations. She is a member of OWASP DevSlop, hosting their technical shows. When not at a computer, Stefania enjoys surfing, yoga and looking after all her tropical plants.



    Other episodes you'll enjoy
    • Mental Health, Organisational Culture & The Human Side of Cybersecurity YouTube: https://youtu.be/k_VVu_bQZXg 

    Spotify: https://open.spotify.com/episode/1h88WI6RlKjF0BQ3ylbnfH?si=1Zqi4lrNSzO-klDQleyEhw 


    • The Art of Cyber Deception: How To Get Inside The Mind of A Hacker YouTube: https://youtu.be/r_n275AsK8c 

    Spotify: https://open.spotify.com/episode/3GMSIXpbexPBqH2Rb92PNi?si=TCCxuTo-QeeMALLyHomwtg 





    Connect with your host James Rees

    Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

    Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

    With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

    For more information about us or if you have any questions you would like us to discuss email [email protected].

    If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.


    Linkedin: Razorthorn Security

    YouTube: Razorthorn Security

    Twitter:   @RazorThornLTD

    Website: www.razorthorn.com


    All rights reserved. © Razorthorn Security LTD 2025

    43 min

About Razorwire Cyber Security & InfoSec Insights

From the publisher's feed

Cybersecurity is evolving — and so should you. Razorwire brings the open conversations that give you the edge.