Razorwire Cyber Security & InfoSec Insights

Hey there, Razorwire listener! In this episode, we welcome back cybersecurity experts Richard Cassidy and Oliver Rochford to follow up on our AI podcast back in November. Join us for spirited debates on the current state of AI capabilities, their imminent impacts on society and business, and thought-provoking speculation on the future of AI and its existential promise and perils.

We tackle AI topics ranging from innovations like large language models to the role of quantum computing, governance challenges and regulatory responses, workforce disruptions, and the potential for artificial general intelligence. You'll come away with an insider's perspective on AI progress and get beyond the hype to understand real-world limitations and applications.

From actionable business advice to philosophical discussions on the human condition, the Razorwire podcast offers incredible insights from industry veterans Oliver and Richard. Learn about investments, cybersecurity issues, ethical considerations, the AI "arms race," and transhumanist ideals spanning neural implants to robot bodies.

Whether you're making strategic decisions in your company, tracking public policy issues, or just want to sound informed on emerging tech, the Razorwire podcast delivers the context and perspectives needed to evaluate AI's present impact and future potential with wisdom. Tune in for enlightening analysis you won't get from sensationalised media reports. Every episode offers rare clarity to think smarter about technological forces shaping society.

"I don’t believe we know humanity is not ready for AGI. We haven’t evolved in the way that we think, and as I said, our colloquial, war-minded economics today to actually even have AGI benefit the planet."

Richard Cassidy

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• AI Development Accessibility: The current challenges of the development of AI technology.
• The future of artificial general intelligence (AGI): The conversation delves into the future of AGI and its potential impact on society.
• Ethical and Existential Concerns: AI's potential implications for society, humanity, and the labour force raise ethical and existential concerns.
• Business Responsibility: Business leaders are responsible for managing AI technology and should view it as augmenting the workforce.
• AI for Global Solutions: AI technology has the potential to address serious global problems if used responsibly.
• Advancements in Human Health: Some advocate for the use of AI to develop new technologies to improve human health and capabilities.
• Lack of Global Legislation for AI: Concerns are raised about the lack of global legislation for AI and its potential implications for businesses.
• AI in Military and Autonomous Robots: We discuss the potential implications and ethical concerns of AI technology for building autonomous robots and weapons.
• AI Regulation and Consequences: We explore the fear of and potential consequences of regulating AI technology.

Moore's Law

Neuralink

Fermi's Paradox

GPT

LLM-based products

The Use Of AI In Cybersecurity: Consultants Roundtable

https://www.razorthorn.com/the-use-of-ai-in-cybersecurity-consultants-roundtable/

Lessons from an InfoSec Icon: A Fireside Chat with PCI Guru Jeff Hall

https://www.razorthorn.com/lessons-from-an-infosec-icon-a-fireside-chat-with-pci-guru-jeff-hall/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome to Razorwire, the podcast where we cut through the tangled web of cybersecurity to bring you the latest insights and expert analysis. Victor Acin and Oliver Rochford, two esteemed guests, are with me in today's episode.

In this episode, we’re exploring the dangerous world of cybercrime as a service and its implications for individuals, organisations, and even nation-states.

Join us this week as we unveil the dark side of cybercrime. Victor, the Head of Threat Intelligence at Outpost 24, shares his expertise on the rise of cybercrime as a service. Discover how cybercriminals have adapted their tactics, the motivations driving their actions, and the alarming ease with which they operate.

Stay ahead of the game with insider knowledge from Oliver's research, where he discusses the striking similarities between cybercrime services and legitimate tech services. Learn about the techniques used by cybercriminals to infiltrate organisations and exploit their vulnerabilities. 

Whether you're a seasoned professional or just starting your cybersecurity journey, this episode offers some excellent, practical advice for strengthening your defences. We share some effective ways to protect against credential theft, insider threats, and targeted attacks. Hear about tried and trusted remedies recommended by our experts that can make a significant impact on securing your organisation.

So, if you're a cybersecurity professional looking to expand your knowledge and sharpen your skills, join us on Razorwire as we unravel the intricate world of cybercrime as a service.

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• The evolution of cybercrime into an as-a-service model, where specialised services and infrastructure are available to carry out different elements of cyberattacks

• The low barriers to entry for new cybercriminals of this business-like model

• The recent rise in credential theft through the use of simple malware toolkits, which allow even unskilled cybercriminals to distribute malware and steal credentials at scale

• Established cybercrime groups that offer ransomware and even entire cyberattack infrastructure in an as-a-service model. This comes complete with support services for affiliates conducting attacks

• The flexibility offered to cybercriminals from a modular services model, which offers mix-and-match attack components from different providers specialising in access, malware, ransomware, money laundering, etc. 

• How cybercriminals choose or decide against their victims

• How the rise of untraceable cryptocurrencies has removed obstacles to monetising and laundering profits from cybercrime, fueling growth

• Whether or not having easy access to cybercrime services could facilitate corporate espionage and what examples we have

• The importance of threat intelligence—understanding the motives, tools and trends in cybercrime—is vital context for effectively securing against the evolving threat landscape

Oliver has worked in cyber security as a penetration tester, consultant, researcher, and industry analyst for over 20 years. Interviewed, cited, and quoted by media, think tanks, and academia, he has written for SecurityWeek, CSO Online and Dark Reading. While working at Gartner, he co-named the Security Orchestration, Automation and Response (SOAR) market, worked on the SIEM Magic Quadrant, and also covered the European MSSP Market. In past lives, Oliver worked for Qualys, Verizon, Gartner,  Tenable and Securonix and is currently Chief Furitist at Tenzir, where he works on product strategy and marketing.

Victor Acin has been working in threat intelligence since 2016 and is now leading the Kraken Labs unit at Outpost24, performing tasks related to the generation of threat intelligence (mainly reverse engineering of malicious samples and research of global actors) and the development of the department's internal products, such as the malware analysis sandbox. In addition, he has also worked as an ethical hacker, performing penetration tests against web applications, external and internal infrastructure, and mobile devices.  

Outpost 24

NSO

ISO standard

Amazon

Microsoft

Lessons from an InfoSec Icon: A Fireside Chat with PCI Guru Jeff Hall

https://www.razorthorn.com/lessons-from-an-infosec-icon-a-fireside-chat-with-pci-guru-jeff-hall/

Cyber Insurance: Does It Create More Problems than it Solves?

https://www.razorthorn.com/cyber-insurance-does-it-create-more-problems-than-it-solves/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome to Razorwire, the podcast where we cut through the noise to bring you incisive discussions on all things cybersecurity. I'm your host, Jim, and in today's episode, we delve into the SEC charges against SolarWinds CISO, a case that has sent shockwaves through the infosec community.

In this episode, our guests Iain Pye and Chris Dawson discuss the hype surrounding the trial, its impact on the infosec community, and the potential consequences for all Chief Information Security Officers (CISOs). 

We also explore the uncertainties surrounding the CISO's responsibilities and actions within the organisation regarding addressing security vulnerabilities, as well as the potential implications of the SEC ruling on CISOs' risk aversion and self-interest.

Lastly, we talk about the dynamics of security compliance certifications and the potential manipulation involved in obtaining them.

If you're a cybersecurity professional, join us as we dissect the complexities of CISO responsibilities, the SEC's pursuit of individuals over organisations, and the implications of legal actions on the infosec landscape. 

Tune in for an insightful discussion that will challenge your perspectives and keep you on the cutting-edge of cybersecurity issues.

"Companies are now telling victimised organisations not to produce an incident response report or similar or any type of report. Any such report should be delivered verbally or kept off any electronic or paper documents as much as possible as they could be subpoenaed in future lawsuits and may reveal that the company to be at fault."

Iain Pye

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

- The aftermath of the SEC charges against SolarWinds CISO and the debate surrounding the implications for the infosec community

- The challenges and potential issues surrounding auditors' understanding of risk management and cybersecurity processes

- Discussion of internal messaging about cybersecurity vulnerabilities within SolarWinds and potential misrepresentation of cybersecurity practices

- The impact of underfunding on information security departments and the challenges faced in training and securing environments

- The potential for individuals to whistleblow on security vulnerabilities and the SEC's regulatory role to hold organisations accountable

- The debate on the extent of the CISO's authority within the organisation and the support required from the board in addressing security vulnerabilities

- The potential impact of the SEC ruling on CISO decision making and the resulting risk averse behaviour

- The potential impact of pressure from insurance companies and the SEC's focus on shareholder rights and company ethics

- Suspicions of misrepresentation and potential manipulation in obtaining security compliance certifications and ISO audits

- The role of CEOs and senior management priorities in influencing cybersecurity practises and certifications

- SolarWinds

- SEC (U.S. Securities and Exchange Commission)

- ISO 27,001

- Cybersecurity certifications

- Ransomware

- CISO (Chief Information Security Officer)

- Compliance certifications

- Incident response reports

The Use Of AI In Cybersecurity – Consultants Roundtable

https://www.razorthorn.com/the-use-of-ai-in-cybersecurity-consultants-roundtable/

Lessons from an InfoSec Icon: A Fireside Chat with PCI Guru Jeff Hall

https://www.razorthorn.com/lessons-from-an-infosec-icon-a-fireside-chat-with-pci-guru-jeff-hall/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

In the latest episode of the Razorwire podcast, I am delighted to welcome back our esteemed cybersecurity professionals, Oliver Rochford and Richard Cassidy. Today, we delve into the fascinating realm of generative AI and its applications in the cybersecurity landscape.

We kick the episode off with an overview of generative AI. We discuss how it works and its training on extensive datasets to infer statistical relationships between words and concepts. While major cybersecurity vendors such as Google, CrowdStrike, SentinelOne, and Microsoft have announced integrations with generative AI, Oliver issues a cautionary note, highlighting that its capabilities are often subject to overhype.

We discuss the accuracy of generative AI's representation in the business community. Listen in to hear our consensus: Is it possible for generative AI to live up to the advanced AI depicted in science fiction?

Delving into practical cybersecurity use cases and exploring risks associated with explainability, trustworthiness of outputs, and potential regulatory implications

The aim of this episode is to give you valuable advice for venturing into the realm of generative AI. Tune in to the Razorwire podcast for an in-depth exploration of this evolving technology.

Andrés Horowitz has said that 80% of all of the investment in the generative AI startup goes on compute costs. They worked out that one training run on GPT, I think, 3.5 costs somewhere between half a million to $3,800,000. Is it even affordable?"

 Oliver Rochford

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

- Big Tech's control over the conversation and concerns about AI

- Inconsistencies in the guidelines and censorship policies of platforms like Spotify, Apple, and YouTube limit what can be discussed and criticised.

- The limitations and potential dangers of Artificial Generative Intelligence 

- The different opinions and viewpoints surrounding NFT technology and its impact and significance

- Importance of not overhyping NFTs and allowing for experimentation and exploration of new use cases

- Limitations of Gen AI tools, particularly in terms of explainability, interpretability, and trustworthiness of data

- Advising caution when utilising AI tools for security purposes and the importance of trust and verification

- How AI tools can help with paralysis and confusion in data analysis

- Examining the high valuation of OpenAI and people's unrealistic expectations of AI due to Hollywood portrayals

- Exploring the potential of AI-powered language models like Chat GPT, their integration into various products, and the need to avoid false information

Oliver has worked in cyber security as a penetration tester, consultant, researcher, and industry analyst for over 20 years. Interviewed, cited, and quoted by media, think tanks, and academia, he has written for SecurityWeek, CSO Online and Dark Reading. While working at Gartner, he co-named the Security Orchestration, Automation and Response (SOAR) market, worked on the SIEM Magic Quadrant, and also covered the European MSSP Market. In past lives, Oliver worked for Qualys, Verizon, Gartner,  Tenable and Securonix and is currently Chief Furitist at Tenzir, where he works on product strategy and marketing.  

Richard Cassidy

Richard Cassidy has been consulting to businesses on cyber security strategies and programs for more than two decades, working across highly regulated industries including finance, insurance, retail, manufacturing, government and military. During his career Richard has been heavily engaged in the design and implementation of infrastructure & cyber security solutions, helping organisations in evolving security, compliance, risk management, data assurance, automation, orchestration & breach response practices. 

Richard’s security operations experience includes managing CERT, breach response teams, threat intelligence & hunting teams, as well as educating the industry on how data and assets are targeted by cyber-criminal groups, which in return supports effective security practices and mitigation strategies. Richard has led major breach investigations across CNI (Critical National Infrastructure), Finance, Military and Educational institutions over the past decade, with a specific expertise in financial fraud investigations on SWIFT payment networks and OT Manufacturing environments, helping align technical investigation processes to business risk analysis to better serve breach response plans 

Combining hands on experience of the technologies and services that have evolved over the past two decades, with a detailed perspective on end user security risks, Richard focuses on delivering thought leadership tracks that help decision makers define practical security, compliance and data assurance strategies. He is well versed in showing organisations how to better navigate a highly complex and automated threat landscape, in tandem with achieving (and maintaining) regulatory, compliance and data assurance mandates that business leaders face in today’s technology landscape. 

Richard is an active industry contributor, regularly delivering speaker sessions at events including for SANS, BlackHat, IP Expo, InfoSec, FSISAC and security seminars EMEA wide, not least many article publications in the arena of cybersecurity, compliance, industrial control and emerging technology matters. 

RSA

Google Sec PaLM

Crowdstrike Charlotte AI

Sentinel One Purple AI

Microsoft Security CoPilot

Jason Kierstead IBM

Picus Security AI Test

Chat GPT Open AI

SQL

Hitchhiker's Guide To The Galaxy

Dall-e 2

ChatGPT Reveals Top 5 Cybersecurity Concerns for Businesses

https://www.razorthorn.com/chatgpt-reveals-top-5-cybersecurity-concerns-for-businesses/

Navigating the Turbulent Waters of Cybersecurity: Nationalism, Economics And AI

https://www.razorthorn.com/navigating-the-turbulent-waters-of-cybersecurity-nationalism-economics-and-ai/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Hello and welcome to Razorwire, the podcast where we delve into the world of cybersecurity with top experts and industry leaders. I'm your host, James Rees, and I can't wait to share this episode with you. As a PCI DSS QSA, I’m delighted to have PCI expert Jeff Hall as my guest today.

This episode will give you a unique perspective on how security has evolved from early mainframe days to today's interconnected, risk-focused practises. Jeff tells us about his hard-won lessons and wisdom gathered over decades steering information security programmes, including the need for compliance to work alongside overall security and not hinder it, and why auditors should be viewed as allies, not adversaries.

We give you some unique insights on the upcoming PCI DSS v4, the changes we can expect, and what we should be prepared for. We also talk about the issues that shortened CISO tenures create and how this can hinder long-term security progress. Learn why it’s important to focus on the big picture when it comes to security goals rather than getting distracted by minutiae.

We cover a wide range of subjects throughout this episode, with some really useful takeaways. One of the key points, and I really must agree, is the importance of matching security priorities to business risk, not compliance checklists. Jeff gives us his advice on focusing on the appropriate controls for what you aim to protect. 

For CISOs, security leaders, and practitioners at all levels, you’ll gain insight into building effective programmes that deliver real protection. Tune in to level up your approach with advice from this industry luminary and compliance guru.

So, if you're ready to up your cybersecurity game, join us on Razorwire. Stay informed, connected, and inspired. Together, we can build a safer digital world. Let's get started!

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

- The importance of cybersecurity in e-commerce

- Identifying the main problems of managing website vulnerabilities

- Discussing the need for implementing specific tools to comply with regulations

- Exploring concerns about customer data security, effectively monitoring alerts and meeting requirements

- How the increasing costs and complexity of audits could lead to organisations rejecting compliance requirements

- How to streamline security programmes and focus on essentials

- The challenges of security and deployment in cloud environments

- How to prioritise the overall security programme and how not to get lost in minor details or problems

- The lack of leadership in the information security industry and the short tenure of CISOs

- The shortage of qualified infosec professionals and why we should be supporting mentorship and apprenticeship

Jeff Hall is a principal security consultant at Truvantis, Inc.  Jeff has over 30 years of technology and compliance project experience.  Jeff has done a significant amount of work in financial institutions, health care, manufacturing, and distribution industries, including security assessments, strategic technology planning, and application implementation.  Jeff is part of the PCI Dream Team, a co-author of ‘The Definitive Guide to PCI DSS Version 4: Documentation, Compliance, and Management’ and the writer of the PCI Guru blog (http://pciguru.blog).

Razorthorn’s PCI DSS Consulting Service

The PCI DSS standard

PCI Guru Blog

PCI DSS Dream Team

trustedsec.com

GDPR

Armor cards

Novell Directory

Sarbanes Oxley

CICD

Ansible

Jenkins

Jira

Trust & Culture as Cornerstones of Cyber Security with Paul Dwyer

https://www.razorthorn.com/trust-culture-as-cornerstones-of-cyber-security-with-paul-dwyer/

Cybersecurity and Critical Infrastructure: Are We Prepared for the Worst?

https://www.razorthorn.com/critical-infrastructure/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Hello, and welcome to Razorwire. This week, I've had a great time discussing the fascinating topic of artificial intelligence (AI) and its potential impact on our industry, with my esteemed Razorthorn consultants, Tom, Jamie and Michael. We explore the different types of AI, including machine learning and chatbots, and discuss the challenges of achieving a low false positive rate and high general application.

You'll gain valuable insights into the evolution of AI and why we MUST take seriously the very real potential for malicious actors to use it for nefarious purposes. We'll also be highlighting the significance of incorporating security measures into AI development and the need for responsible implementation.

By the end of this episode, you'll have a comprehensive overview of AI and its potential risks and benefits in the future of cybersecurity. So join me as we explore this exciting and important topic, and take away key insights that will help you stay ahead in the ever-changing world of cybersecurity.

"The reality of it is AI is a set of predefined algorithms for a compute standard to take in data, process that data, and then come out with a prediction, and that is impacted number one by the data that's being put into it but also the algorithms and controls that are set by the human factor programming that in."

Tom Mills

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

Overview of AI in Information Security

Michael gives us an overview of different types of AI, including machine learning and chatbots, and how they are implemented in information security.

Difference between True AI and Current State of AI

We talk about difference between true AI and machine learning.

Challenges of Achieving Low False Positive Rate and High General Application and how to improve accuracy.

AI Implementation

The consultants discuss ways of reducing risk and false positives in data discovery and leakage solutions.

Evolution of AI

The evolution of technology and the reality of whether AI will really replace jobs.

AI and Malicious Actors

The consultants discuss how AI has increased the pool of unsophisticated threat actors who can use AI engines to conduct successful attacks.

Behavioural Analysis Tools

Discussion on the use of behavioural analysis tools in detecting breaches and how they work.

Chat GPT and its Limitations

Discussion on the limitations of chat GPT and the potential for it to be used maliciously, as well as the potential for AI to develop biases based on the data it is trained on.

Quality Data for AI

The importance of quality data for AI and the process of stripping out unnecessary information to train AI models.

Ethics and Limitations of AI

The limitations of AI and the ethical considerations surrounding the data sets used to train AI models.

Regulatory Compliance Standards for AI

The lack of regulatory compliance standards for controlling AI and the potential consequences of malicious actors using AI for cyber attacks

The need for a kill switch

The importance of having a kill switch in AI to prevent it from going rogue and causing harm.

The possibility of true AI

The consultants talk about the possibility of achieving true AI, which is self-aware and can disable a kill switch.

Advice on utilising and protecting from AI

The consultants provide advice on how to best utilise AI and how to potentially best protect oneself from AI.

Interview with Chat GPT

Jim mentions his interview with Chat GPT about its views on information security.

Behavioural analysis tools

Machine learning and threat detection

Scene products with behavioural analysis

Limitations on chat GPT

Ethics of AI system

Chat GPT political bias

Microsoft's AI becoming racist and sexist

The Singularity is Near by Ray Kurzweil

Elon Musk's chip for brain to computer interactivity

Rules for AI development

Three Rules of Robotics

Tool for identifying SQL injection using AI

ChatGPT Reveals Top 5 Cybersecurity Concerns for Businesses

https://www.razorthorn.com/chatgpt-reveals-top-5-cybersecurity-concerns-for-businesses/

Navigating the Turbulent Waters of Cybersecurity: Nationalism, Economics And AI

https://www.razorthorn.com/navigating-the-turbulent-waters-of-cybersecurity-nationalism-economics-and-ai/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cybersecurity professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cybersecurity – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cybersecurity enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome to Razorwire, where we and our expert guests tackle the issues and opportunities in the world of cybersecurity. In this episode, we explore the challenges and issues faced by the cyber liability insurance industry.  

This podcast looks into the complex challenges surrounding cyber insurance, an increasingly crucial topic for security leaders and organisations. Join your host James Rees and cybersecurity specialists Chris and Iain, as they engage in an enlightening discussion about the problems with cyber insurance.  

Learn why the dynamic nature of cyber risk has left insurers playing catchup, leading to unfavourable policy terms, skyrocketing premiums and growing frustration for customers. Gain insights into the systemic impacts of ransomware attacks on insurers along with the immense stresses faced by CISOs navigating insurance responsibilities. Discover innovative ideas like continuous security ratings and improved regulations that could transform the broken cyber insurance model.  

Whether you're a business leader, security professional or just interested in staying informed, this podcast delivers an array of useful take aways to understand the cyber insurance quagmire. Expect an insightful and engaging discussion on this mission-critical topic. Tune in now to stay ahead of the game in the ever-evolving world of cybersecurity. 

And that’s why you’re better off insuring yourself!  

Iain Pye 

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen 

In this episode, we covered the following topics: 

• The challenges insurance companies face in properly assessing and pricing cyber risk due to its constantly evolving nature. 
• How restrictive policy terms around "acts of war" have made it difficult for companies to receive payouts after attacks. 
• The lack of cybersecurity expertise and rigorous due diligence conducted by many insurance firms before issuing policies. 
• The skyrocketing cost of cyber insurance premiums and difficulty obtaining comprehensive coverage. 
• The problem of companies being unable to get insured after a breach has already occurred. 
• How the increase in ransomware attacks creates systemic risk for insurers paying out multiple policies. 
• The stress and burnout faced by CISOs and cybersecurity leaders related to insurance coverage responsibilities. 
• The importance of cyber defence planning beyond just having an insurance policy. 
• How continuous security assessment models could help provide better assurance to underwriters. 
• The need for improved security regulations and standards for the insurance industry to base policies on. 
• The benefits of self-insuring cyber risks versus relying solely on external insurance. 

GUEST BIOS 

Iain Pye 

Iain is a Cybersecurity, Data Protection and Risk Specialist with over 20 years of experience in the public and private sectors. Iain has worked in a range of industries from finance, legal, security and government. When Iain is not fighting fires or arguing personal data ethics, Iain likes exploring the world with his family and occasionally going for a run through the Fens with the dog. If the dog is up for it, which she is usually not.  

Chris Dawson 

Chris Dawson is a former Royal Marine of 11 years. He moved into the private security sector in 2012 taking up various roles across the globe, from hostile environments to the corporate world, advising and implementing security protocols in multiple sectors while gathering and learning as much as possible along the way.   

Resources Mentioned 

UK National Cybersecurity Centre 

Merck insurance payout 

Lloyds of London 

One Trust 

Georgia Cyber Attacks 

AON 

Razors Edge Continuous Pen Testing 

Vulcan Files 

Fair Risk Methodology 

Other episodes you'll enjoy 

Navigating the Turbulent Waters of Cybersecurity: Nationalism, Economics And AI 

https://www.razorthorn.com/navigating-the-turbulent-waters-of-cybersecurity-nationalism-economics-and-ai/ 

Cybersecurity and Critical Infrastructure: Are We Prepared for the Worst? 

https://www.razorthorn.com/critical-infrastructure/ 

Connect with your host James Rees 

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cybersecurity professionals who dedicate their careers to making a hacker’s life that much more difficult. 

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cybersecurity – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights. 

With new episodes every other Wednesday, Razorwire is a podcast for cybersecurity enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers. 

For more information about us or if you have any questions you would like us to discuss email [email protected]. 

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion. 

Linkedin: Razorthorn Security 

Youtube: Razorthorn Security 

Twitter:  @RazorThornLTD 

Website: www.razorthorn.com 

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome to Razorwire, the podcast that explores the intricate world of cybersecurity. I'm Jim, your host, and on this episode, we have a fascinating guest joining us: Bec McKeown, a renowned expert in the psychology behind security. This episode is a must-listen for cybersecurity professionals for three key reasons:

Firstly, Bec delves into the challenges of conducting investigations and spotting deception in the cybersecurity field. Her insights will equip you with the tools to identify suspicious behaviour, such as stealing or leaking sensitive information.

Secondly, she addresses the crucial skill of effectively communicating risks to higher-level executives without instilling fear. Understanding the psychology behind this communication is vital for cybersecurity professionals seeking to navigate the boardroom and gain support for their security measures.

Lastly, Bec sheds light on building trust within the cybersecurity community, dispelling fears of punishment for reporting mistakes or risks. Her expertise in psychological techniques and team building will give you valuable strategies for fostering an environment of collaboration and trust.

So, cybersecurity professionals, get ready to dive into the fascinating world of the psychology behind security with Bec McKeown on this episode of Razorwire.

“… for me, it's all part of this cognitive fitness thing that you have the agile thinking and the cognitive techniques to do decision making and that sort of thing. But there's also understanding yourself. Where are you as a person? What are your strengths, what are your weaknesses, development needs or the areas where you're not so great at things.” 

Bec McKeown

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

In this episode, we covered the following topics:

● Complex cybersecurity and agile thinking skills

● Influence, language and understanding for effective communication

● Investigation challenges, spotting deception and overcoming fear

● Understanding different groups for effective collaboration

● Learning how to engage with different individuals 

● The two ways in which the brain works: system one (fast, instinctive) and system two (rational)

● How cognitive narrowing during a cybersecurity crisis affects confidence

● Tips for managing and handling crises effectively

● Burnout risks and how to avoid them in high-stress infosec careers

● Building resilience: individual and organisational responsibilities

● The importance of recognising symptoms, empathy and self-awareness

● Teaching critical thinking and mentoring effectively

● How to use stories for knowledge application and understanding

.

GUEST BIO

Bec McKeown

Bec McKeown is a Chartered Psychologist with twenty years’ experience of researching and evaluating human performance in high-risk, high-stakes industries, including the UK Ministry of Defence. The knowledge and insights gained from this research have given Bec a unique perspective on the ways humans react in times of crisis, and she is an experienced speaker and thought leader on the psychology of human performance in cybersecurity. 

In 2019, Bec established Mind Science, an organisation dedicated to assisting companies at both operational and strategic levels. Her primary focus revolves around leveraging psychological principles to enhance situational awareness, decision-making, and problem-solving for teams operating in complex environments. With a proven track record, Bec continues to make significant contributions in shaping the landscape of human performance psychology. 

Resources Mentioned

VUCA

Prof Debi Ashenden - Adelaide University

Daniel Kahneman - Thinking Fast & Slow

British Psychological Society

Burnout Culture is a Cyber Risk | Yanya Viskovich | TEDxZurich

mindscienceltd.co.uk

Other episodes you'll enjoy

What To Do If You Are A Victim Cybercrime: The Anatomy Of High Profile Incident

https://www.razorthorn.com/what-to-do-if-you-are-a-victim-cybercrime-the-anatomy-of-high-profile-incident/

Trust & Culture as Cornerstones of Cyber Security with Paul Dwyer

https://www.razorthorn.com/trust-culture-as-cornerstones-of-cyber-security-with-paul-dwyer/

Connect with your host James Rees

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Welcome to Razorwire, the podcast that cuts through the noise and delivers the sharpest insights in the industry. I'm your host, Jim, and I am thrilled to have you join us for another episode packed with cutting-edge information.

Now, I know you're constantly bombarded with countless podcasts and resources vying for your attention, but let me give you three compelling reasons why Razorwire should be at the top of your playlist.

Firstly, we have a very special guest today: Paul C Dwyer. Paul is a leading expert in the field and will be sharing his expertise on DORA, the Digital Operational Resilience Act. He'll be diving deep into the testing requirements outlined in DORA, for organisations of different sizes. This is crucial information for staying ahead of the game and ensuring your organisation is resilient in the face of cyber threats.

Secondly, we will shed light on the presence of "snake oil" salespeople in the security industry and the importance of credible expertise. With the ever-increasing complexity of cybersecurity, it's essential to navigate through the noise and rely on trustworthy guidance to meet DORA requirements effectively.

And last but not least, Paul tells us about his own academy called DORA Training EU, offering non-technical, business-led training courses aligned with EU strategy. He tells us about the highly popular DORA Certified Compliance Specialist course and the bonus module that will equip you with practical implementation knowledge using the NIST cybersecurity framework. This is a fantastic opportunity to enhance your skill set and gain a competitive edge in the industry.

So there you have it, cybersecurity professionals! Join us on Razorwire as we delve into the world of DORA, unravel the complexities of compliance, and equip you with the knowledge and skills needed to protect your organisation from data breaches and attacks. Get ready for an enlightening episode filled with actionable insights. 

“There needs to be a mindset change when it comes to this digital society and digital economy that we operate in. Cybersecurity and cyber risk management is an investment, not a cost.”

Paul C Dwyer

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• DORA testing requirements: Discussion on the testing requirements outlined in DORA for financial organisations.

• Differences for small organisations: How do the testing requirements differ for small organisations compared to larger ones?

• Importance of Resilience: Emphasis on the importance of resilience and the ability to identify and respond to data breaches and attacks.

• Opportunity for Improvement: What opportunities does DORA presents for the financial sector to improve and become more efficient?

• Beware of "Snake Oil" Salespeople: Warning about the presence of unreliable salespeople in the security industry and the need for credible expertise.

• Training Courses for DORA Compliance: Discussion on the training courses available, including the DORA Certified Compliance Specialist course.

• Online Delivery and Constant Updates: An explanation of how the training courses are delivered online and the importance of staying up to date.

• Leveraging the Cybersecurity Industry: Emphasising the importance of leveraging the expertise of the cybersecurity industry appropriately.

• Compliance is not Just Regulation: Discussion on how compliance is about protecting the business and its customers, not just meeting regulations.

Paul C Dwyer stands among the world’s leading cybersecurity, risk, and compliance authorities. As CEO of Cyber Risk International, he excels in corporate and enterprise security, crafting cyber defence programmes, and safeguarding business operations for clients. He also serves as the founder and President of the ICTTF International Cyber Threat Task Force, leading a community of over 30,000 professionals in their mission to combat cyber threats and promote industry diversity.

DORA legislation

Competent Authority

Team Cyber - Secure Your Future

DORAtraining.eu

Eucyberacademy.com

Cyberriskacademy.com

ISO-2701

PCI DSS

Cyber Risk International

NIST Cyber Security Framework

Trust & Culture as Cornerstones of Cyber Security with Paul Dwyer

https://www.razorthorn.com/trust-culture-as-cornerstones-of-cyber-security-with-paul-dwyer/

A Snapshot in Time: Why Penetration Testing Is Critical for Cyber Security

https://www.razorthorn.com/a-snapshot-in-time-why-penetration-testing-is-critical-for-cyber-security-razorwire-podcast/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

Welcome to the Razorwire podcast, where we explore the latest trends and insights in the world of cybersecurity.

In this episode, we delve into the topic of defence in the post pandemic world with our esteemed guests, Jonathan Care and Christopher Fielder. We talked about why it’s more important than ever for organisations to adequately adapt their cybersecurity capabilities to meet the requirements of remote working and why it’s essential to have multiple layers of security to detect and respond to threats before they reach critical endpoints. 

During our conversation, we discussed the importance of due diligence when considering a cloud-first approach or involving a detailed supply chain. We also highlighted the challenges faced by security teams and departments during the pandemic, as well as the rise of ransomware groups and the use of AI in cybersecurity. 

"The pandemic has really shown that we need to be more agile and more adaptable."

Jonathan Care

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• The breakdown of the traditional network perimeter.
• Changes in management styles and the need for a radical reset.
• The impact of the pandemic on different sectors, such as retail and finance, and the dramatic shift in consumer behaviour.
• Transition to remote work [00:09:17] Discussion on the impact of the pandemic on the traditional network perimeter and the shift to remote work, including the subordinate relationship between security and IT teams.
• The focus on AI and machine learning to compensate for the lack of skilled infosec professionals.
• The impact of AI on defence in depth and the risks of implementing AI within an organisation without considering security.
• The flaws in relying solely on endpoint security 
• How working from home has exposed flaws in security architectures and highlighted the rise of cyber threats.
• What is the traditional approach to defence in depth, and how has it been adapted to changes in technology and working environments.
• What are the difficulties organisations face when it comes to re-engineering defence in depth, such as budget, and how to overcome them.
• The importance of due diligence in cloud and supply chain security 
• An example of a defence in depth breakdown.
• Asset-based security and the importance of 2FA.

Jonathan Care is a recognised expert in the field of cybersecurity & fraud detection. A former top-rated Gartner analyst, Care was responsible for defining the Fraud market, and leading Gartner’s Insider Threat and Risk research. He regularly advises cybersecurity industry leaders on strategic growth and has worked with key figures in industry and government across the globe. He is a lead contributor for Dark Reading, an industry-defining publication. He has testified in court as an expert witness and forensic investigator and is a Fellow of the British Computer Society. He also fuels his creative passion as a composer of film/TV music.  

Social media: @jonathanhcare & https://linkedin.com/in/computercrime  

Christopher Fielder has been in the cybersecurity world for over 20 years, with experience in a range of military, government, and corporate environments. From this background, Christopher holds 18 industry certifications along with a Master's Degree in Information Security.

While much of his career has involved traditional hands-on keyboard security roles that covered offensive, defensive, and analytics security positions, today he is the Field CTO for Arctic Wolf. This position allows him to research emerging security topics and remain at the forefront of highlighting the expertise of the entire Arctic Wolf team.

Arctic Wolf Security 

Gartner

LionFish Security 

Dark Reading 

Threat Intelligence & Collaboration

https://www.razorthorn.com/threat-intelligence-why-awareness-is-critical-and-collaboration-is-essential-razorwire-podcast/

A Snapshot in Time: Why Penetration Testing Is Critical for Cybersecurity

https://www.razorthorn.com/a-snapshot-in-time-why-penetration-testing-is-critical-for-cyber-security-razorwire-podcast/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cybersecurity professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cybersecurity – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cybersecurity enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025