When Nobody's Watching

The Cyber Escape Room Co.

Honest, tension-led conversations about what people really do once the security training's finished and nobody's looking. From The Cyber Escape Room Co., hosted by Amy Stokes-Waters. New episodes every fortnight.

Episodes

  1. 5 Aug

    "Blame is What Causes Incidents" | The CISO, with Kieren Lovell

    Kieren Lovell has spent four careers watching people under real pressure: two years on nuclear submarines, mine disposal, setting up the cyber warfare division at the Norwegian Navy's frigate training centre, hunting pirates off Somalia, running computer emergency response at the University of Cambridge, and now the CISO chair at Pragmatic Solutions.So when he says the industry measures the wrong things, it lands differently.He refuses to run phishing simulations, even though every board asks for them. He thinks most tabletop exercises are discussion workshops with a slide deck. And when Amy asks who's accountable if the next breach turns out to be behavioural, his answer is two words: always me.In this episode: • Why a click rate is set by whoever writes the email, so what you're really measuring is the security team's grammar• "We do the plastic metrics instead" — the command, control and leadership measures nobody collects• The military rehearses little and often: fire, flood, famine, every day. Cyber trains people for before an incident and never for during one• Labelling theory, explained via a 14-year-old boy, and why a wall of shame kills your reporting culture• The incident he had no playbook for• Why a ridiculous scenario can beat a realistic one• What he actually puts in front of his board, and what he refuses to• Fix It in 60: we hand him a real board update slide and give him 60 secondsRead the write-up and watch the clips: whennobodyswatching.co.ukWhen Nobody's Watching is the podcast about what people actually do once the security training's finished, hosted by Amy Stokes-Waters. New episodes fortnightly.Made by The Cyber Escape Room Co., a behaviour change company: cyberescaperoom.co

    "Blame is What Causes Incidents" | The CISO, with Kieren Lovell

About

Honest, tension-led conversations about what people really do once the security training's finished and nobody's looking. From The Cyber Escape Room Co., hosted by Amy Stokes-Waters. New episodes every fortnight.