Lessons from the Field Establishing a strong and sustainable security culture remains a big challenge across industries and organisations. Despite the investment in security programmes, many initiatives fail to gain lasting traction. The issue is not usually a lack of effort, but rather a disconnect between well-meaning strategies and the day-to-day realities of the people […]
My Good Resilience In Testing Times OS
Last week I presented at SteelCon, my talk was about how I saw the signs of burnout approaching and managed to swerve it based on my personal operating system. The talk went down very well and turned into a little interactive session, with a bunch of folks approaching me afterwards and saying how it resonated […]
Some end of year thoughts…
I posted the below on LinkedIn at the end of December 2024, actually forgot to post it on here, doh! This year I’ve had a bunch of conversations with folks who are new to security or are already in it and want some advice / thoughts. I did think about one of those 2024 Rewind […]
Oops, I clicked it again: Navigating the human side of cybersecurity
I was invited to be a panel member at DTX London 2024 alongside Robin Bylenga with Alexei Hnatiw moderating. We covered: How can integrating a cyber champions program along with security awareness program help foster a security-first mindset across all levels of an organisation? What are the human factors to consider when creating a cyber […]
BSides London 2023
I was planning to present my talk “Awareness, behaviour, culture, human risk management, people-centred security blah blah blah – What even are these!?! Have we evolved or we are stuck with the status-quo?” Unfortunately, I was unwell and couldn’t make it. To say I was gutted is an understatement as I have much love for […]
A discussion with CybSafe
I was recently on CybSafe’s Behave podcast to talk about some of my experience and thoughts around the people side of security. Have a listen here:
Security Serious Unsung Heroes Award 2022
Every year Security Serious holds the Unsung Heroes Awards, with categories ranging from “Godmother / Godfather of Security” through to “Best Security Awareness Campaign”. I was genuinely surprised to learn that I was in the running for a Security Leader / Mentor award. “The winner of this award will be someone in industry who leads […]
The Jerich Show
The lovely Javvad Malik and Erich Kron, invited me to join them on their show to chat about a few issues in the news as well as a bit about security awareness and culture. It was nice to be invited and a fun chat, thanks guys! You can the episode here.
Human-Centred Security: Positively influencing security behaviour
Last year the cool folks at the Information Security Forum got in touch and asked if I would be interested in being interviewed for a new publication they were going to put together on human-centered security. Being someone who has an interest in all things human related when it comes to security I thought why […]
Context Switching
It’s like alt-tabbing constantly but in real life. Imagine the following… You’re trying to get on with your daily tasks. You’re in your flow and you notice an email come in marked urgent which you’re cc’d into and a bunch of people want your opinion on something today. You answer it and get back to […]