Phishing for Trouble from IO (ISMS.online)

IO (ISMS.online)

Compliance, security, privacy, AI risk. There's a lot of noise out there, and not much of it is useful when you're the one having to do the work. Phishing for Trouble is the business resilience podcast from IO (ISMS.online), the platform thousands of teams use to manage compliance and build resilience day to day. Rebecca Harper and David Holloway talk to the security leaders, specialists and business experts they actually learn from, the kind of guests who give you something to take back to your team on Monday. Honest, practical, sometimes a bit awkward. Always useful.

  1. 4d ago

    Boardroom to Breakroom: Building a Culture of Compliance

    Why do organisations still struggle to turn security policy into real-world behaviour?  In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore how regulations like NIS2 place direct accountability on senior leaders whilst, in many organisations, compliance still lives on paper and not in practice. They’re joined by Professor Steven Furnell, Professor of Cyber Security at the University of Nottingham, an expert in the intersection of human, technological and organisationalaspects of cyber security and full of good advice on turning policy into real action.  Hear how having a policy isn’t the same as people understanding how it applies directly to them and their job,the importance of moving away from ‘tick box’ compliance and how, wrongly handled, security training and tests can feel punitive, rather than supportive.  Because if staff are using unapproved processes or shadow I.T. and A.I, it might actually be a clue to what resources the business is lacking and a cue to ask the questions that fillthe gaps compliantly. Find out more at ISMS.online

    26 min

  2. May 28

    Supply Chain Dominoes: Why Their Risk Is Now Your Risk

    What happens when a third-party company suffers a security breach, way down the supply chain – and the people who suffer are your customers? In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore how, even if your systems are strong, a weak supplier can shut you down, how regulators and investors are demanding stronger supplier governance, and what you need to do about it. They’re joined by Madelein Van Der Hout, a senior analyst in cyber security and risk at Forrester who digs into the detail of recent high-profile breaches and what questions businesses should be asking, and the University of Oxford’s Professor Ciaran Martin - founding CEO of the UK National Cyber Security Centre and one of the UK’s leading voices on cyber resilience. Hear how the cost of a supply chain breach can be more than financial, ways to identify risk and dig deeper into supplier assurances, and how to cope with the regulatory landscape as it evolves and develops Because it’s not just the disruption and damaged reputation a breach can cause, it can affect the profitability of both suppliers and clients, and employee job stability. Find out more at ISMS.online

    28 min

  3. May 21

    AI: Trust, Ethics, and Getting It Right from the Start

    What happens when employees start using AI toolsfaster than organisations can govern them? In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore why AI governance has quickly become a business-critical issue, from shadow AI and data privacy risks to accountability, trust and emerging regulation. They’re joined by Professor Andrea Isoni, who works with organisations navigating AI governance and risk and A-LIGN’s Patrick Sullivan, VP of Strategy and Innovation, who advises businesses on AI strategy, governance and emerging technologies.   Hear why governance is no longer just about compliance, but about building resilience, visibility and trust as AI becomes embedded across organisations. Find out more at ISMS.online   AI Governance hub: AI Governance | ISO 42001Readiness Checklist: Guide to AI Compliance Blog by Patrick Sullivan: Why AIGovernance Stopped Being Theoretical and What Leaders Must Do Next | A-LIGN

    41 min
  4. Compliance: From Checkbox to Competitive Advantage

    May 14

    Compliance: From Checkbox to Competitive Advantage

    What happens when your biggest deal stalls at the final hurdle because procurement asks questions your business cannot answer? In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore why compliance is now a commercial issue, not just a technical one.   They’re joined by Daniel Bailey from ECI Partners who spends his time helping ambitious companies grow, and the University of Oxford’s Professor Ciaran Martin - founding CEO of the UK National Cyber Security Centre and one of the UK’s leading voices on cyber resilience.   Hear why “resilience” now shapes valuation, customer trust and long-term growth, from investor due diligence to cyber risk and boardroom accountability. Being compliant on paper can be one of the most expensive mistakes a business makes, but those companies building resilience in early are the ones moving fast, winning big and scaling smarter.  Find out more at ISMS.online

    30 min

  5. May 11

    Phishing for Trouble Returns This Thursday 14th May

    Compliance, security, privacy, AI risk. There's a lot of noise out there, and not much of it is useful when you're the one having to do the work. Phishing for Trouble is the business resilience podcast from IO (ISMS.online), the platform thousands of teams use to manage compliance and build resilience day to day. Rebecca Harper and David Holloway talk to the security leaders, specialists and business experts they actually learn from, the kind of guests who give you something to take back to your team on Monday. Honest, practical, sometimes a bit awkward. Always useful.

    1 min
  6. The big cybersecurity questions facing businesses in the future

    02/04/2025

    The big cybersecurity questions facing businesses in the future

    In the final episode of the series, Rebecca Harper and David Holloway are here to recap some top tips for cyber compliance in your business. But before that, they’re reflecting on ideas from our expert guests and discussing some of the trends, questions, challenges and opportunities for information security professionals in the near future.   Whether it’s looking at changes to cyber law enforcement or policy, how to keep up with the changes in tech as a business and how you can start to get AI compliant and grow your business, explore how you can step ahead and stay ahead with great information security. "Phishing for Trouble," is the cybersecurity podcast from ⁠ISMS.online⁠ that demystifies compliance and information security in your business. To find out more about how ISMS.online can help your business master information security compliance, visit our website for a self-guided tour. Love this podcast? Share it with your colleagues and help businesses like yours learn more and stay secure online.   #Informationsecuritypodcast #infosecpod #cyberattackcasestudies #UKAIpolicyandinfosec #growyourbusiness#cybersecuritypodcast#AIandinfosec Music from #Uppbeat (free for Creators!):https://uppbeat.io/t/barry-dallas/turn-it-upLicense code: DRP9E1ZZYQJDJ1DS

    35 min

  7. 01/28/2025

    What not to do in a disaster

    Back in May 2017, a cryptoworm virus made it into some Microsoft computing systems, locking away the data of global organisations and demanding a ransom. In panic some people paid up only to find their data never returned. The knock-on effect to health services, including hospitals, was dramatic. So what do you do if you’re faced with such a scenario? In this episode, David Holloway and Rebecca Harper talk about the right and wrong things to do in the face of a ransomware or other cyber attack. Plus they’re joined by the experts to look at how we can all plan better for the worst – so that when a data breach or cyber attack takes place, your business and your people are in the best position to recover quickly.  Leading infosec thinkers Ash Patel of ECI Partners and Chloé Messdaghi, founder of Sustain Cyber and leader in responsible AI and cybersecurity, share their wisdom, as well as some hopeful advice for information security teams in the future. "Phishing for Trouble," is the cybersecurity podcast from ⁠ISMS.online⁠ that demystifies compliance and informationsecurity in your business. To find out more about how ISMS.online can help your business master information security compliance, visit our website for a self-guided tour. Love this podcast? Share it with your colleagues and help businesses like yours learn more and stay secureonline. #Informationsecuritypodcast #infosecpod #cyberattackcasestudies#cybersecuritypodcast#disastermitigationpodcast

    40 min

  8. 01/21/2025

    Safe software, safer business

    How can you protect your business from hackers? Whilst no company is safe from IT security attacks, the way your company develops, manages and uses software is key. Staying up to date with the latest advice and patches, raising awareness of hacker tactics and educating your people on how to use platforms safely is all a part of the puzzle. Rebecca Harper and David Holloway share stories of how even the biggest names can be tripped up by poor software security and how infosec and compliance is everyone’s responsibility. The brilliant Troy Hunt shares his insights into why infosec is about people, psychology and behaviour as muchas it is technology, and why so many of us are still getting caught out by simple tactics. On the bright side, we also look at some of the tools and approaches you can use to minimise your chance of being one of them. "Phishing for Trouble," is the cybersecurity podcast from ⁠ISMS.online⁠ that demystifies compliance and informationsecurity in your business. To find out more about how ISMS.online can help your business master information security compliance, visit our website for a self-guided tour. Love this podcast? Share it with your colleagues and help businesses like yours learn more and stay secure online.  #Informationsecuritypodcast #infosecpod #cyberattackcasestudies#cybersecuritypodcast#Compliancepodcast

    33 min
See All (16)

Trailer

About

Compliance, security, privacy, AI risk. There's a lot of noise out there, and not much of it is useful when you're the one having to do the work. Phishing for Trouble is the business resilience podcast from IO (ISMS.online), the platform thousands of teams use to manage compliance and build resilience day to day. Rebecca Harper and David Holloway talk to the security leaders, specialists and business experts they actually learn from, the kind of guests who give you something to take back to your team on Monday. Honest, practical, sometimes a bit awkward. Always useful.

Information