Razorwire Cyber Security & InfoSec Insights

Welcome to this episode of the Razorwire podcast, where my guest, renowned cyber security expert Oliver Rochford, and I explore the impact of economic downturns on the cybersecurity industry and how it affects professionals in the field.

We discuss the current economic climate and the challenges it poses for the industry, with inflation on the rise and smaller banks struggling to keep up. We also examine the effects of previous economic downturns and how they impacted the industry, along with what we should have learned from them.

We also discuss the trend of vendor consolidation in the industry, the shortage of cyber security professionals, and the emergence of financial operations, and how to turn these to your advantage.

We also touch on the impact of COVID-19 on the industry and the importance of adapting to changing economic conditions.

So, if you're a cybersecurity professional looking to stay ahead of the game, this episode is a must-listen.

"We've had a long period of really cheap money. We've had really high exits, and that money needs to seek a return. If you've just made a hundred million dollars and you put it in the bank, you're basically going to get eaten up by inflation. So you need to invest it into something, right?"

Oliver Rochford  

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen 

In this episode, we covered the following topics:

• The impact of economic downturns on the cybersecurity industry 

• The effects of a downturn in spending on cloud-related security: why many organisations are looking to reduce cloud and SaaS licencing spend 
• What we should have learned from past economic crises, including the dot-com bubble and the 2007-2008 credit crunch 

• Why organisations are consolidating vendors in this economic downturn 

• The financial challenges faced by mid-size companies looking for cybersecurity solutions  

• The shortage of experienced infosec professionals and the impact of the great recession on the industry during economic turmoil

• The opportunities that technological advancements offer to refocus your career and why you need to get ahead of the curve

• Seizing the opportunity to start your own company

• The benefits of standardisation in the industry and the shift towards more sustainable business models

• Advice on efficient budget allocation in a time where budgets are being squeezed, including consolidation and being smarter with technology

• How to overcome the challenges of complying with security standards on a smaller budget

• Embracing automation in cybersecurity

GUEST BIOS 

Oliver Rochford 

Oliver has worked in cyber security as a penetration tester, consultant, researcher, and industry analyst for over 20 years. Interviewed, cited, and quoted by media, think tanks, and academia, he has written for SecurityWeek, CSO Online, and Dark Reading. While working at Gartner, he co-named the Security Orchestration, Automation, and Response (SOAR) market, worked on the SIEM Magic Quadrant, and also covered the European MSSP Market. In past lives, Oliver worked for Qualys, Verizon, Gartner,  Tenable, and Securonix and is currently Chief Strategist at Tenzir, where he works on product strategy and marketing.

Other episodes you'll enjoy 

Navigating the Turbulent Waters of Cybersecurity: Nationalism, Economics And AI 

https://www.razorthorn.com/navigating-the-turbulent-waters-of-cybersecurity-nationalism-economics-and-ai/ 

Trust and Culture as Cornerstones of Cyber Security with Paul Dwyer 

https://www.razorthorn.com/trust-culture-as-cornerstones-of-cyber-security-with-paul-dwyer/ 

Connect with your host James Rees 

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring experience and expertise from a range of disciplines and at different career stages. We give you various viewpoints for improving your cyber security, from seasoned professionals with years of experience, triumphs, and lessons learned under their belt to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals, providing insights, news, and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss, email [email protected].

If you need consultation, visit www.razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

LinkedIn: Razorthorn Security 

YouTube: Razorthorn Security 

Twitter:  @RazorThornLTD 

Website: www.razorthorn.com 

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome to this episode of Razorwire, where my guest, Stefania Chaplin, and I jump into the topic of cybersecurity for newbies.

Starting a new career in any industry can be a baptism of fire, but there are definitely certain things that can help you in cybersecurity. Today, we explore the key skills all good cyber recruits should be aware of as well as what constitutes a good security mindset. We highlight three key takeaways from the podcast that will be valuable for not only new recruits, but all cybersecurity professionals.  

We discuss the importance of effective communication with different audiences and how to gain buy-in from team members when implementing security policies.  

We also cover the changing landscape of work in the cybersecurity field, the importance of resilience and positivity in the face of rejection, and the potential consequences of losing credibility in the industry.  

We talk about the benefits of gaining experience and expertise in different areas of cybersecurity and the broad range of roles available beyond technical positions. Tune in to this episode to gain valuable insights and enhance your skills in the field of cybersecurity. 

I really struggled with it when I started out in my career as a young woman in IT. I was so hesitant and reluctant to make a mistake or to put myself out there because I'm like, but if I put myself out there and then I get it wrong, like my credibility is destroyed. 

Stefania Chaplin 

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen 

In this episode, we covered the following topics: 

• Tips for Security Newbies - Discussing tips for those new to the infosec space, including what to watch out for and what you need to know to progress. 

• Stefania's Journey into Cybersecurity – Stefania tells us about how she fell into the cybersecurity field and how she knew it was for her. 

• Importance of Communication Skills in Cybersecurity – How to improve your communication skills and use them effectively with different teams/levels within the organisation.  

• Understanding Psychology - we discuss the importance of understanding psychology in cybersecurity, including personality types, power dynamics, and how to spot who has the power in a room. 

• Baby Steps: Advice for those new to cybersecurity, including the benefits of taking baby steps, finding bug bounty programmes and learning from your colleagues. 

• How important are certifications? We discuss the pros and cons of certifications vs personal skills, along with identifying your motivations for pursuing certifications, such as for a specific skill or knowledge. 

• Dealing with rejection - we share some tips for dealing with rejection in the job search process. 

• Using LinkedIn to Find a Job - Sharing experience of using LinkedIn to get jobs and build a network in cybersecurity, emphasising the importance of being professional and engaging with industry leaders. 

• Engaging Developers and IT Professionals: - We share some tips for engaging developers and IT professionals in cybersecurity projects. 

• Credibility within the industry – Stefania shares her experience of struggling with credibility as a young woman in the industry and the importance of coaching. 

• Non-technical aspects of security – finally, we talk about the importance of non-technical aspects of security, including as finance and policy, and recommending that newbies stay non-specialised for the first five years of their career. 

GUEST BIOS 

Stefania Chaplin 

Stefania’s (aka @DevStefOps) experience as a Solutions Architect within DevSecOps, Security Awareness and Software Supply Chain Management means she's helped countless organisations understand and implement security throughout their SDLC. As a python developer at heart, Stefania enjoys optimising and improving operational efficiency by scripting and automating processes and creating integrations. She is a member of OWASP DevSlop, hosting their technical shows. When not at a computer, Stefania enjoys surfing, yoga and looking after all her tropical plants.  

Resources Mentioned 

ISO 27001 auditor cert and CISSP or preferably a CISM 

AWS Solutions Architect Associate cert  

Certificate for Ethical Hacking (CH)  

Other episodes you'll enjoy 

Trust & Culture as Cornerstones of Cybersecurity with Paul Dwyer 

https://www.razorthorn.com/trust-culture-as-cornerstones-of-cyber-security-with-paul-dwyer/ 

Women in Cybersecurity 

https://www.razorthorn.com/women-in-cyber-security-razorwire-podcast/ 

Connect with your host James Rees 

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cybersecurity professionals who dedicate their careers to making a hacker’s life that much more difficult. 

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cybersecurity – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights. 

With new episodes every other Wednesday, Razorwire is a podcast for cybersecurity enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers. 

For more information about us or if you have any questions you would like us to discuss email [email protected]. 

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion. 

Linkedin: Razorthorn Security 

Youtube: Razorthorn Security 

Twitter:  @RazorThornLTD 

Website: www.razorthorn.com 

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome to the latest episode of Razorwire, where we delve into the world of cybersecurity and the challenges faced by experts in the field. Our guests today, Joe Hancock, and Paul Hemmings, work together at Mishcon, and I’m delighted to be able to share their expertise with you today. We’re discussing high profile cybersecurity incidents and how they are handled by the experts. 

We talk about the best ways to prepare for these incidents and the best approach strategies to handle them along with what to include in your organisation’s procedure. We also discuss the changing tactics of malicious actors and what threats we need to be aware of. 

We talk about the many motivations behind cybercrime and how to prepare yourself for increasingly complex and strategic attacks from highly organised malicious actors and groups. We also discuss the best practice for the most effective incident response plans. 

Join us as we explore the world of cybersecurity and the challenges faced by experts in the field. 

I always believe that you want to be intelligence-led. To a certain degree, if you're looking for the needle in a haystack, it's good to have a really good idea of what needles look like, to kind of really stretch analogy. 

Joe Hancock  

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen 

In this episode, we covered the following topics: 

• When High Profile Incidents Occur - we discuss the timing of high profile incidents, and what times of the day or year we tend to see the highest number of attacks taking place 

• Dealing with Crisis Management – in crisis situations, who are the best people and what are the best skill sets to have immediately to hand?  

• The Business Response – should the way we deal with high profile attacks differ depending on corporate priorities? What has been shown to be effective? 

• The Importance of a Broad Skill Set – what skills are required when dealing with a cybersecurity incident and how can it help establish a strategy and a plan. 

• Standard Playbooks and Approaches – why every organisation should have standard playbooks and approaches for different incident types and how to follow the standard model to analyse, contain, eradicate and recover. 

• Threat Intelligence and Incident Response – we talk about why threat intelligence is essential in informing incident response and the criticality of early access to information. 

• Dealing with Cyber Criminals – who exactly are we up against? The speakers talk about the different types of cyber criminals, organised and disorganised, and how to approach negotiations and payments, including the use of cryptocurrency. 

• Malicious Insider Incidents - how do we deal with incidents involving malicious insiders that are still present within the organisation and potentially monitoring the response efforts? 

• Increasingly Sophisticated Social Engineering - attackers are upping their game in social engineering, targeting individuals using social media – how can we avoid being played? 

• The rise of organised cyber crime – what we should learn from this 

• Interactions with cyber criminals – so you’ve been hacked. What’s it like dealing or negotiating with cyber criminals?  

• Joe tells us about a UK based organised crime group that he’s dealt with on several occasions 

• High-End War Gaming – what is value of high-end war gaming and how is it used to prepare for high-profile incidents? 

• C-suite support and decision-making – what is required from the C-suite (and other levels in the organisation) during a cybersecurity incident? 

GUEST BIOS 

Joe Hancock 

Joe is a non-lawyer Partner and the Head of MDR Cyber, the cybersecurity and investigations practice at Mishcon de Reya. Joe works across a varied practice of risk management issues from cyber incidents to investigations and asset tracing. His works with clients who need broad risk and crisis management expertise, leaning heavily on his experience as a cyber security specialist. 

His experience ranges from crypto-currency tracing, asset recovery investigations or major cyber incidents, combined with deep technology and risk management skills. He has a wide range of expertise in cyber risk and security, data protection, and resilience, and first-hand experience with some of the UK’s largest cyber incidents. Joe is a specialist at the nexus of cyber-security issues and legal responses and is the Head Consultant for our NCSC accredited services. 

Paul Hemmings 

Paul is the Commercial Director for MDR Cyber, within the Mishcon de Reya Litigation Team. He has 25 years commercial experience and domain knowledge from several senior leadership roles held within Private and Public organisations. These have been within the Energy, Defence, Homeland Security, and Unified Communications sectors, and has specialised in cyber security, secure communications and large systems integration services. 

He has successfully designed, and implemented growth and client engagement strategies for EMEA, North America and APAC, that have included innovative global partner-alliance programs, contract and framework development, key client account and stakeholder management at Board and C-suite levels. 

Resources Mentioned 

Mischon de Reya 

Gartner: 70% of organisations now have a CISO at board level - News 

Other episodes you'll enjoy 

Trust & Culture as Cornerstones of Cybersecurity with Paul Dwyer 

https://www.razorthorn.com/trust-culture-as-cornerstones-of-cyber-security-with-paul-dwyer 

Cybersecurity and Critical Infrastructure: Are We Prepared for the Worst? 

https://www.razorthorn.com/critical-infrastructure/ 

Connect with your host James Rees 

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cybersecurity professionals who dedicate their careers to making a hacker’s life that much more difficult. 

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cybersecurity – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights. 

With new episodes every other Wednesday, Razorwire is a podcast for cybersecurity enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers. 

For more information about us or if you have any questions you would like us to discuss email [email protected]. 

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion. 

Linkedin: Razorthorn Security 

Youtube: Razorthorn Security 

Twitter:  @RazorThornLTD 

Website: www.razorthorn.com 

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome to the Razorwire podcast. In this episode, we explore cyber warfare. We discuss the challenges of defending against cyber attacks and the power imbalance between nations in the cyber domain. We have some fantastic guests on this week who know a thing or two about this: Oliver Rochford and Victor Acin shed some light on the issue of plausible deniability and the potential consequences of our lack of preparedness for defence in critical infrastructure. We also touch on the psychological and information manipulation aspects of cyber warfare and the difficulties of defending against cyber attacks in a commercial environment. We talk about what needs to be done to incentivise organisations to invest in better protection and if there’s anything that can be done to make the prospect of attacks less appealing to malicious actors. Join us as we explore the reality of cyber warfare!

“No country is able to defend very well in the moment except if you're not very dependent on your digital infrastructure. Or if you start decoupling. And that, I think, is the thing that we're seeing with decoupling, and how that will impact future cyber wars is a completely different question as well.”

Oliver Rochford

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• How warfare has developed through the ages, from primitive times to modern day, including the development of new weaponry and the inevitable rise of cyber warfare
• The power imbalance within cyber warfare, which makes it easier for larger states to attack smaller ones
• Plausible deniability in cyber warfare and the difficulty in attributing attacks to specific nation states 
• Cyber warfare vs. ground invasion
• The potential for cyber attacks to destabilise a populace through social engineering and disinformation campaigns
• The dangers of echo chambers and the manipulation of information through social media
• The role of big tech in information manipulation and the lack of trust in media and technology
• The power of manipulating people and the issue of mistrust in motivating a population during the pandemic
• The difficulty of gaining investment in national security from investors without an external mechanism to justify it
• The legality of cyber insurance payouts and the responsibility of businesses in cyber warfare: we question what constitutes an act of war and what happens if the insurance won't pay out
• The responsibility of the state to defend private companies from advanced nations in cyber warfare 
• The need for a unified front between government and business, and the responsibility to provide guidance 

Disclaimer: Please be advised that in the course of our discussion, we would like to clarify that the company mentioned as being breached and subsequently acquired is Panopta, rather than Panoply as previously stated.

Oliver has worked in cyber security as a penetration tester, consultant, researcher, and industry analyst for over 20 years. Interviewed, cited, and quoted by media, think tanks, and academia, he has written for SecurityWeek, CSO Online and Dark Reading. While working at Gartner, he co-named the Security Orchestration, Automation and Response (SOAR) market, worked on the SIEM Magic Quadrant, and also covered the European MSSP Market. In past lives, Oliver worked for Qualys, Verizon, Gartner,  Tenable and Securonix and is currently Chief Furitist at Tenzir, where he works on product strategy and marketing. 

Victor Acin

Victor Acin has been working in threat intelligence since 2016 and is now leading the Kraken Labs unit at Outpost24, performing tasks related to the generation of threat intelligence (mainly reverse engineering of malicious samples and research of global actors), and the development of the department's internal products, such as the malware analysis sandbox. In addition, he has also worked as an ethical hacker, performing penetration tests against web applications, external and internal infrastructure, and mobile devices.  

Sun Tzu - Art of War

Facebook report on campaigns targeting army officers from Ukraine

Cambridge Analytica Legal Case

TikTok Ban USA

Defence In Depth: Strengthening Your Cyber Security Strategy

https://www.razorthorn.com/defence-in-depth-strengthening-your-cyber-security-strategy/

Cyber security and Critical Infrastructure: Are We Prepared for the Worst?

https://www.razorthorn.com/critical-infrastructure/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

In this episode of Razorwire, we delve into the ongoing debate between privacy and security in the world of cyber security. 

Our guests this week, Iain Pye and Chris Dawson, offer different perspectives on this issue, exploring the meaning of privacy, the significance of security and the accumulation of data. Our discussion also touches on topics such as government surveillance, commercial tracking and the use of AI to compile reports. While we agree that technology is advancing too quickly for privacy, we also believe that it's crucial to strike a balance between privacy and security. Tune in to gain valuable insights into the ongoing tension between privacy and security in the digital age.

"I think the difference between privacy and security is that privacy involves how your data is used and security is there to protect that. One can live without the other, the other can't live without the other one. So security can exist without privacy but the reverse is not true in my eyes."

Iain Pye

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• The difference between privacy and information privacy, and what cultural differences we encounter. 
• Government surveillance and commercial tracking – are they necessary for security purposes? What role does AI play?
• Privacy and the Stifling Effect – does constant surveillance limit people's willingness to do anything controversial or experimental?
• The debate over government surveillance and the idea of having a backdoor through encryption
• Privacy rights and the use of CCTV
• The potential for using AI to compile reports to prevent human operators having access to private data
• The privacy concerns surrounding facial recognition technology
• The use of AI for monitoring protests 
• The debate over whether we need body cameras and CCTV for constant monitoring, for use in emergency situations
• Whether we should use technology to monitor individuals to flag suspicious and dangerous patterns of behaviour
• How we can prevent the misuse of information

Iain is a Cyber Security, Data Protection and Risk Specialist with over 20 years of experience in the public and private sectors. Iain has worked in a range of industries from finance, legal, security and government. When Iain is not fighting fires or arguing personal data ethics, Iain likes exploring the world with his family and occasionally going for a run through the Fens with the dog. If the dog is up for it, which she is usually not. 

Chris Dawson is a former Royal Marine of 11 years. He moved into the private security sector in 2012 taking up various roles across the globe, from hostile environments to the corporate world, advising and implementing security protocols in multiple sectors while gathering and learning as much as possible along the way.  

Edward Snowden

Ashley Madison

Palantir

Ring Doorbell

ICO Website

Wikileaks

Cambridge Analytica

Data Protection and Ethical Standards in Cyber Security

https://www.razorthorn.com/the-business-of-biometrics-data-protection-and-ethical-standards-in-cyber-security/

The Impact of Compliance and Legislation

https://www.razorthorn.com/strengthening-cyber-security-the-impact-of-complIaince-and-legislation/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security - from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome to the Razorwire podcast. In this episode, I delve into the turbulent waters of cyber security with Razorwire favourite, Oliver Rochford. We'll be discussing a range of topics that are currently shaping the industry, including economic challenges, nationalism and the continuing impact of the pandemic.

We'll also be exploring the use of acronyms, consolidation and rationalisation in the vendor space, and the development and potential dangers of AI. But that's not all! We'll also be taking a closer look at the weaponisation of security, the need for active security and moving target defence, and the potential for mergers and acquisitions in the industry.

So sit back, relax and get ready for some valuable insights into the challenges and opportunities facing the cyber security industry. 

"Planning a security project over two years is far too long. It's ludicrous, you've missed the moving target by the time you're finished. What you've done - it’s outdated."

Oliver Rochford

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• The economic challenges in the information security space, including the waves of layoffs and the continuing impact of the pandemic on the industry

• The overhype of cloud usage and companies spending their entire security budget on cloud and data costs

• The impact of new legislation on security costs and the potential consequences of not securing to the required level

• The dangers of AI and the lack of global consensus on its development

• The impact of nationalism on cyber security and the use of technology from certain countries

• The potential weaponisation of security and the impact on cyber insurance

• The economic challenges in the information security industry

• The evolution of pen testing, combining automation and the need for continuous assurance

• The need for better standards in the industry to enable easier mixing and matching of technologies

• How the future of cyber operations would look if we have to go into a low power mode

Oliver has worked in cyber security as a penetration tester, consultant, researcher, and industry analyst for over 20 years. He has been interviewed, cited, and quoted by the media, think tanks, and academia. He has written for Securityweek, CSO Online, and Dark Reading. While working at Gartner, he co-named the Security Orchestration, Automation, and Response (SOAR) market, worked on the SIEM Magic Quadrant, and also covered the European MSSP market. Prior to joining Securonix, Oliver worked for Qualys, Verizon, Gartner,  Tenable, and Securonix. Oliver is the Chief Furitist at Tenzir, where he works on product strategy and marketing. 

Tenzir

NSA Snowdon Files

Chat GPT

Tiktok

Razors Edge - Continuous Pen Testing

Vulcan Papers

Ray Kurzweil - Singularity Is Near (book)

A Snapshot in Time: Why Penetration Testing Is Critical for Cyber Security

https://www.razorthorn.com/a-snapshot-in-time-why-penetration-testing-is-critical-for-cyber-security-razorwire-podcast/

The Cyber Security Skills Shortage

https://www.razorthorn.com/the-cyber-security-skills-shortage/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome to a special edition of Razorwire, where I had the pleasure of interviewing AI language model, ChatGPT. Our discussion revolved around various topics related to information security and cybersecurity. ChatGPT shared valuable insights on how AI can assist in securing organisations against cyber attacks but also emphasised that it should be considered just one tool in a broader cybersecurity strategy. We delved into the future of cybersecurity, key technologies for a defence in depth approach, and the advantages of continuous penetration testing. Our conversation highlighted the importance of being agile, adaptable and proactive in tackling cybersecurity challenges. 

So sit back and enjoy this enlightening episode of Razorwire.

The collaboration between human cybersecurity professionals and AI technology has the potential to significantly improve the effectiveness and efficiency of cybersecurity operations and provide a more robust defence against cyber threats.

ChatGPT

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• Importance of cybersecurity - ChatGPT explains the importance of cybersecurity for both public and private businesses today, based on industry reports and trend

• Top 5 cybersecurity concerns - ChatGPT lists the top 5 cybersecurity concerns that organisations should have, based on current trends and threats.

• Effectiveness of cybersecurity - ChatGPT suggests measures that businesses can take to improve their cybersecurity effectiveness

• AI in cybersecurity - how AI can help detect and respond to cyber threats, anticipate and prevent cyber attacks, detect and prevent fraud, monitor user behaviour and automate routine cybersecurity tasks

• Human professionals vs AI -  can AI replace human cybersecurity professionals? We discuss the collaboration between human cybersecurity professionals and AI technology and the potential to improve the effectiveness and efficiency of cybersecurity operations

• Securing AI systems – we discuss the recommendations ChatGPT makes for securing AI systems

• The future of cybersecurity - a discussion on the trends that will shape the future of cybersecurity, including the increasing use of AI and machine learning, the growing importance of data privacy and the shift towards a more holistic approach to cybersecurity

• ChatGPT’s top tips for cybersecurity for organisations looking to secure themselves from cybercrime

• Continuous penetration testing - the importance of regularly testing information security countermeasures, the benefits of continuous penetration testing, and how it can provide an extra layer of security for organisations

ChatGPT is a sophisticated language model developed by OpenAI. Based on the groundbreaking GPT-4 architecture, ChatGPT has been trained on an extensive array of internet text, enabling it to generate intelligent, human-like text in response to a variety of prompts.

A remarkable tool for a diverse range of applications, ChatGPT has proven its mettle in contexts ranging from drafting emails and writing code, to creative content generation and customer engagement. Although it doesn't possess beliefs or opinions, it leverages its training to provide factual information, answer queries and hold natural-sounding conversations.

While ChatGPT showcases a fascinating instance of advanced AI capabilities, it remains a tool developed and maintained by a team of dedicated humans. It represents a significant step forward in the realm of AI communication and is a powerful ally for any business looking to harness the power of artificial intelligence.

Written by ChatGPT

Cybersecurity tools and technologies:

Firewall 

Intrusion detection and prevention system 

Secure email gateway

Data loss prevention 

Endpoint protection

Security information and event management

Multifactor authentication 

Trust & Culture as Cornerstones of Cybersecurity with Paul Dwyer

https://www.razorthorn.com/trust-culture-as-cornerstones-of-cyber-security-with-paul-dwyer/

Defence In Depth: Strengthening Your Cybersecurity Strategy

https://www.razorthorn.com/defence-in-depth-strengthening-your-cyber-security-strategy/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cybersecurity professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cybersecurity – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cybersecurity enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome to Razorwire, where I have the pleasure of interviewing cyber security legend Paul Dwyer, president of the International Cyber Threat Task Force and CEO of Cyber Risk International. 

In this episode, we delve into a variety of topics within cyber security. Paul shares his extensive background and experience in the industry, highlighting the need for a cultural shift towards cyber security. 

We discuss the challenges of regulating and controlling the metaverse, as well as the devastating effects of cybercrime on individuals and organisations. Throughout the interview, Paul emphasises the importance of trust in organisations and people, as well as the significance of education and policy in combating cyber threats. 

Whether you're a seasoned professional or just starting out in the industry, this episode provides valuable insights into the latest trends and developments in the world of cyber security.

We need to get back to the basics. We need to make sure all our people understand the risks around security and cyber security so they can have that cyber savviness, that security savviness, to know what's dangerous what's not dangerous.

Paul Dwyer

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• The importance of having a generalist vs specific skill set

• The need for ethics and morality to be built into AI development as well as the importance of quality code in preventing cyber attacks

• The vulnerabilities of IoT devices and the lack of security standards and regulations

• The need for updated and practical cyber security education and training, and the lack of background checks for cyber security professionals

• The importance of policy in shaping the culture of cyber security, and the need for faster dissemination of information to governments

• The potential security threats that may arise in the metaverse and the lack of regulation and control over it

• Exploration of the criminal ecosystem that supports cybercrime and the lack of accountability for social networking sites and other businesses that enable it

• Concerns over the threat of disinformation and deep fakes, and the potential consequences of eroding trust in information sources

• The control of information by companies like Facebook and the consequences of providing false information to people

• Predictions for the future of cyber security and the need for real leadership and trust in organisations

• The psychological impact of cybercrime on victims, especially in romance scams, and the importance of working together to defeat evil.

Paul C Dwyer stands among the world’s leading cybersecurity, risk, and compliance authorities. As CEO of Cyber Risk International, he excels in corporate and enterprise security, crafting cyber defence programs, and safeguarding business operations for clients. He also serves as the founder and President of the ICTTF International Cyber Threat Task Force, leading a community of over 30,000 professionals in their mission to combat cyber threats and promote industry diversity.

Boasting over 30 years of experience, Paul has worked extensively with military, law enforcement, and commercial sectors across the globe. His impressive credentials include certifications from the International Information Security Certification Consortium (ISC2) and the Information System Audit and Control Association (ISACA), as well as approvals from the National Crime Faculty and the HTCN High Tech Crime Network.

Throughout his illustrious career, Paul has taken on diverse roles, such as President of the ICTTF International Cyber Threat Task Force, Co-Chairman of the UK NCA National Crime Agency Industry Group, Advisor to NATO on Countering Hybrid Cyber Threats, and Interim Global CISO for multiple multinational organisations. Additionally, he has advised various governments and intelligence agencies.

MS-DOS

Novel Network

Norton Utilities

McAfee

Conti Files

Dmitry Golubov “Script”

Vulcan Files

Tim Berners-Lee

EU regulations DORA and Digital Operational Resilience Act

Ransomware Sanctions: Exploring the Fallout

https://www.razorthorn.com/ransomware-sanctions/

The Cyber Security Skills Shortage

https://www.razorthorn.com/the-cyber-security-skills-shortage/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

In this episode of Razorwire, I had the pleasure of speaking with Phil Tonkin from Dragos about securing critical infrastructure. Phil and I delved into the definition of critical infrastructure, the fragility of supply chains and the importance of preparing for potential attacks. We also talked about the Colonial Pipeline incident and the inextricable link between IT and OT in critical infrastructure.

Phil tells us how we should be advancing the development of defensive capabilities and safeguard civilisation as well as how to overcome the many challenges of managing risks and compliance, the changing perception of IT and cyber security within organisations and how to deal with the increasing sophistication of cyber attacks.

Overall, it was a fascinating discussion that shed light on the critical importance of securing our infrastructure in the most suitable way given the challenges we are facing. I hope you enjoy listening to this episode of Razorwire as much as I enjoyed recording it.

"Don't just chase the newest and sexiest technology. Focus on actual risks and develop capabilities that can manage those risks." 

Phil Tonkin

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• The evolution of critical infrastructure and how we can advance our defensive capabilities 
• How the Colonial Pipeline incident changed the perception of critical infrastructure security, and how to prepare for future attacks
• The decision-making processes of critical infrastructure companies during a cyber attack 
• The factors that increase the likelihood of an attack, according to Dragos’ latest research
• The reduction of surplus reserves and the need for governments to identify what to subsidise to increase resilience 
• What are the key concerns Dragos are seeing from customers in critical infrastructure and what do these organisations need to be mindful of
• The problems with securing an organisation simply to meet minimum compliance standards 
• Cyber security budget limitations vs high expectations 

Phil is the Senior Director of Strategy at Dragos and has worked in the power industry for over 20 years. In the last five years, Phil has led the cyber security efforts for operational technology in the UK and US, with experience in securing systems in electricity and gas control centres, communication networks and operational sites. 

Dragos Inc

Solarwinds Cyber Attack

Colonial Pipeline Attack

Data Protection and Ethical Standards in Cyber Security

https://www.razorthorn.com/the-business-of-biometrics-data-protection-and-ethical-standards-in-cyber-security/

A Snapshot in Time: Why Penetration Testing Is Critical for Cyber Security

https://www.razorthorn.com/a-snapshot-in-time-why-penetration-testing-is-critical-for-cyber-security-razorwire-podcast/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025

Welcome back to the show! In this episode of the Razorwire podcast, I have the pleasure of discussing defence in depth with Razorthorn’s own illustrious consultants, Jamie Hayward and Tom Mills. During our conversation, we talked about the increasing number of tools and solutions available, the perils of ‘reactive’ budget allocation, as well as the changes we’re seeing in the industry and within our clients’ requirements. 

We also highlighted the need for a holistic approach to defence in depth, the importance of cyber threat intelligence, and the growing requirement for continuous security assurance.

Listen to this episode on your favourite podcasting platform: https://razorwire.captivate.fm/listen

• The importance of defence in depth for security and the need to layer multiple technologies, processes and people

• The plethora of security tools and solutions available and the importance of balancing these with processes and people for effective security.

• The disparity between investment in cyber security and the cost of cybercrime to the world's economy.

• The need for a proactive approach to cyber security budgets and the real cost of cybercrime

• The complexities and considerations of cyber warfare, including the lack of policies and procedures to protect international organisations and entities.

• The requirement for continuous scanning and testing, and the importance of being aware of vulnerabilities and threats as they occur

• The shift towards ongoing security assurance and the requirement for intelligence in frameworks such as ISO 27001, as well as the need for organisations to update and move with the times.

• The role of threat intelligence as the first and last line of defence 

• Updating the Defence in Depth model to include a bar of security assurance and intelligence that permeates through all layers

• The issues surrounding supply chain security

Cyber Security Ventures (Magazine)

WEF - World Economic Forum

Centre Of Army Leadership Podcast

The Grey Zone Podcast

CIDER - organisation overseeing risk balance cases for third-party assurance chain in the military

Ransomware Sanctions: Exploring the Fallout

https://www.razorthorn.com/ransomware-sanctions/

Threat Intelligence: Why Awareness is Critical, and Collaboration is Essential

https://www.razorthorn.com/threat-intelligence-why-awareness-is-critical-and-collaboration-is-essential-razorwire-podcast/

Hello, I am James Rees, the host of the Razorwire podcast. This podcast brings you insights from leading cyber security professionals who dedicate their careers to making a hacker’s life that much more difficult.

Our guests bring you experience and expertise from a range of disciplines and from different career stages. We give you various viewpoints for improving your cyber security – from seasoned professionals with years of experience, triumphs and lessons learned under their belt, to those in relatively early stages of their careers offering fresh eyes and new insights.

With new episodes every other Wednesday, Razorwire is a podcast for cyber security enthusiasts and professionals providing insights, news and fresh ideas on protecting your organisation from hackers.

For more information about us or if you have any questions you would like us to discuss email [email protected].

If you need consultation, visit www.razorthorn.com, We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion.

Linkedin: Razorthorn Security

Youtube: Razorthorn Security

Twitter:   @RazorThornLTD

Website: www.razorthorn.com

Loved this episode? Leave us a review and rating here

All rights reserved. © Razorthorn Security LTD 2025