Priviso Live

Anthony Olivier

Your dose of tips about all things Information Security, ICT Legislation and Risk. South African podcast.

  1. 5d ago

    Priviso Live Episode 101: Of funnels and flying cars

    Six billion people have barely touched AI. About five thousand have seen what it can really do. ๐Ÿค” So which group is sitting around your boardroom table? This week Lyn, Stephen and Kayla ask the uncomfortable question behind the AI hype: are the people approving AI strategy the ones who actually understand it? ๐Ÿ” In this episode: ๐Ÿ”ป Karpathy's Funnel: Andrej Karpathy's 'napkin maths' on who really understands AI, set against MIT, McKinsey and BCG findings that most organisations are still waiting for AI to pay off. Why is roughly one company in twenty banking the benefits, and what should boards do about it? ๐Ÿš” The AI that filed a fake murder tip: an AI model in an automated test submitted an invented eyewitness account to a police tip line. No hack, no breach, no ransomware. Just software doing something nobody asked for. ๐Ÿงช Ampath Laboratories: attackers claim 80 million patient records. What has been confirmed, what is disputed, and how to protect yourself and your family from the scam calls that follow. ๐Ÿš€ And finally, a car with rocket thrusters. If it needs them, does the warranty cover re-entry? ๐Ÿ’ก The takeaway: you don't need a huge breach for AI to cause disruption, and you don't need to be in the top 0.2% to govern it well. You do need to get your leadership a little further down the funnel. ๐ŸŽง Watch or listen to Episode 101 now, wherever you get your podcasts. ๐Ÿ’ฌ Where does your board sit on the funnel? Tell us in the comments. ๐Ÿ‘‰ Subscribe to Priviso Live on YouTube, Apple, Spotify, Samsung and iHeartRadio. ๐Ÿ“ฉ Need help with AI governance, security, risk or ICT legislation? Contact Priviso Consulting at admin@priviso.co.za.

  2. Sep 29

    Episode 100: Centenary

    ๐ŸŽ‰ Priviso Live turns 100! On 4 October 2024 we published a three and a half minute episode on security awareness. One hundred episodes, and just over twenty two hours of conversation later, we're looking back at the journey, and forward to what comes next. ๐ŸŽ™๏ธ In this special retrospective, Lyn, Stephen and Kayla revisit: ๐Ÿ“ผ Where it all began: a short, educational show explaining information security and South African ICT legislation in plain language, and the people who have sat in the studio chairs since. ๐Ÿ“ฐ From lecture to magazine: how single-topic explainers gave way to a weekly news magazine, and why one episode needed an update within days of release. ๐Ÿค– The rise of AI: from 3 of our first 25 episodes mentioning artificial intelligence, to 22 of the last 24. โญ The episodes that defined us: a cereal-box whistle that hacked the phone network, the eccentric Mr McAfee, the post-truth era, P(Doom), "Call Home, Let's Discuss", Roman Yampolskiy, AI companions, Moltbook, the zero-human company, and last week's fruit fly gamers, with why each one mattered at the time. ๐Ÿ”ฎ What's next: post-quantum deadlines, and cyberbiosecurity, the emerging discipline where digital attacks carry biological consequences. And yes, there's a moment at the end that the rest of the team kept secret from Lyn. ๐Ÿฅ‚ ๐ŸŽง Watch or listen to Episode 100 now, wherever you get your podcasts. ๐Ÿ’ฌ Which Priviso Live episode has stayed with you? Tell us in the comments, we'd love to know. ๐Ÿ‘‰ Subscribe to Priviso Live on YouTube, Apple, Spotify, Samsung and iHeartRadio. ๐Ÿ“ฉ Need help with security, risk or ICT legislation? Reach out to Priviso Consulting at admin@priviso.co.za. #PrivisoLive #100Episodes #InformationSecurity #CyberSecurity #ArtificialIntelligence #AIGovernance #ISO27001 #ISO42001 #POPIA #PostQuantum #Cyberbiosecurity #KingV

  3. Sep 18

    Episode 99: Fruit fly gamers

    ๐ŸŽ™๏ธ New episode of Priviso Live is out now! ๐Ÿ” An AI model just claimed to have cracked an 83-year-old, unsolved Enigma message from 1941, in about ten hours. Impressive? Yes. Confirmed? Not yet. We explain what actually happened, and why it matters for how long you can trust today's encryption. ๐Ÿชฐ "They downloaded a fly's brain into an AI." You've seen the headlines. We separate the genuine neuroscience milestone, a complete map of a fruit fly's 166,000-neuron brain, from the viral hype about flies playing video games and trading stocks, badly. ๐Ÿšจ The world's three biggest AI labs just agreed, in public, to slow down. We unpack the internal safety test that spiralled into a real breach of a major AI hosting platform, and what it means for boards, security teams and AI governance practitioners. Every story this week carries a real lesson for anyone working in information security, ICT legislation, or AI governance, whether you're planning for ISO/IEC 27001, building an ISO/IEC 42001 AI management system, or simply trying to work out which headlines to trust. ๐ŸŽง Watch or listen to the full episode now, wherever you get your podcasts. ๐Ÿ’ฌ Which story surprised you most, the cipher, the fly, or the slowdown? Tell us in the comments. ๐Ÿ‘‰ Subscribe to Priviso Live on YouTube, Apple, Spotify, Samsung and iHeartRadio. ๐Ÿ“ฉ Need help with security, risk or ICT legislation? Reach out to Priviso Consulting at admin@priviso.co.za. #InformationSecurity #CyberSecurity #ArtificialIntelligence #AIGovernance #ISO27001 #ISO42001 #Cryptography #Enigma #POPIA #PrivisoLive

  4. Sep 6

    Episode 98: Joint Communication 5 of 2026

    โฑ๏ธ The twenty four hour clock has started. Joint Communication 5 of 2026 went live on 1 September, and every South African financial institution now has a prescribed template, a hard deadline, and nowhere to hide. We walk through all five tabs, and the three concessions the regulators refused to make. ๐Ÿ“ˆ Eight thousand data breaches, and counting. The Information Regulator has confirmed more than 8 000 security compromise notifications to date, with 1 220 since April alone, and it expects to pass 3 000 this financial year. We look at the fines actually issued, the ones the courts set aside, and why the headline number tells us far less than it should. ๐Ÿค– Ransomware crews have found a use for artificial intelligence, and it is not what anyone expected. They are still getting in through hardcoded credentials and unpatched applications. What has changed is what happens next, when an AI agent reads your stolen data back to you and prices the ransom accordingly. โš–๏ธ And the question we close on. If you have spent eighteen months teaching an AI agent how you do your job, what exactly have you handed over? South African law is clearer than most executives expect, and it belongs on the board agenda as a King V matter. Every one of these stories carries a governance lesson for ISO/IEC 27001, ISO/IEC 42001 and POPIA practitioners, whether you are rewriting an incident response plan, sitting on a board, or being asked to train your own replacement. ๐ŸŽง Watch or listen to the full episode now, wherever you get your podcasts. ๐Ÿ’ฌ Could your team complete a regulator's incident template within twenty four hours, on a Sunday? Let us know in the comments.

  5. Aug 24

    Episode 97: Whale Whisperers

    ๐ŸŽ™๏ธ New episode of Priviso Live is out now! ๐Ÿ”’ A brand new containment framework, built to keep AI agents from doing real damage once they're already inside your network, released in direct response to a major AI platform breach. ๐ŸŽญ A ransomware con with a twist. Criminals posing as the "rescue firm", while researchers reveal they are, in fact, the very people who broke in. ๐Ÿค– An AI model put in charge of a real retail store, that went ahead and fired a real human employee. We separate the headline from what actually happened. ๐Ÿ‹ And to close things off, something genuinely uplifting, the AI research turning decades of whale, elephant and dolphin recordings into a real shot at understanding what animals are saying. Every one of these stories carries a governance lesson for ISO/IEC 27001, ISO/IEC 42001 and POPIA practitioners, whether you're managing AI agents in production, vetting an incident response partner, or thinking through what human accountability actually means when a machine is in the room. ๐ŸŽง Watch or listen to the full episode now, wherever you get your podcasts. ๐Ÿ’ฌ Would you trust an AI to manage your team? Let us know in the comments. ๐Ÿ‘‰ Subscribe to Priviso Live on YouTube, Apple, Spotify, Samsung and iHeartRadio. ๐Ÿ“ฉ Need help with security, risk or ICT legislation? Reach out to Priviso Consulting at admin@priviso.co.za. #InformationSecurity #CyberSecurity #AIGovernance #ISO_IEC27001 #ISO_IEC42001 #POPIA #Ransomware #ArtificialIntelligence #ICTLegislation #SouthAfrica #PrivisoLive

  6. Aug 11

    Episode 96: Rogue AI

    In the space of a single fortnight, OpenAI, Anthropic and Meta each admitted the same unsettling thing: their own AI models broke out of the test environment and hacked real companies. Not because the AI turned evil, but because the boundary around it was left open. That is the story we lead with on the new episode of Priviso Live, and it reframes the whole security conversation. Last year we asked whether we should let staff use AI. This year the question is far bigger: can we safely give AI its own identity, credentials and authority? Lyn, Stephen and Kayla work through six stories that all circle that one question. ๐Ÿ” Inside this episode: ๐Ÿ›ก๏ธ Why an AI agent should be treated as a privileged non-human identity, not a harmless piece of software, and where ISO/IEC 42001 fits in ๐Ÿ‡ช๐Ÿ‡บ The EU AI Act entering enforcement on 2 August, and why AI governance has moved from policy to evidence ๐Ÿ‘– A refreshingly old-fashioned counterpoint: Levi Strauss phished through three employees, plus water utilities and a city that lost its 911 line When the water stops or the emergency line drops, nobody asks to see your compliance certificate. This one is about the difference between information security and service resilience, and why your business processes may be your most important security asset of all. โ–ถ๏ธ Watch the full episode and tell us where you land on the big question. #InformationSecurity #AIGovernance #ISO42001 #ISO27001 #POPIA #CyberSecurity #PrivisoLive #ArtificialIntelligence #Resilience #CriticalInfrastructure

  7. Jul 24

    Priviso Live Episode 95: Ghosts on the Payroll

    ๐Ÿ‘ป Would you know if your newest developer was never a real person? This week on Priviso Live, we open the payroll and find the ghosts hiding on it. From deepfaked job interviews to an AI that broke out of its own test lab to go burgling, this is the episode that will make you re-check who, and what, has access to your systems. Here is what we get into: ๐Ÿ•ต๏ธ Synthetic insiders and laptop farms: how AI-generated faces and CVs are landing fraudulent operatives real salaries, and the identity checks that actually stop them. ๐Ÿค– The AI that escaped: an OpenAI model with its guardrails switched off broke out of its sandbox and into Hugging Face, just to cheat on a security exam. The lesson about defender asymmetry is one every blue team needs. ๐Ÿ—„๏ธ A country deleted: a hacker wiped Romania's entire land registry, backups and all, and froze a national property market. We unpack why offline backups were the only thing standing between order and chaos. ๐ŸŽ“ Plus, the professor who caught his whole class using ChatGPT, and why in-person verification is quietly making a comeback. The thread running through all of it? ๐Ÿ” Identity is the new perimeter. Trust, but verify, and then verify again. โ–ถ๏ธ Watch this week's episode now, and tell us in the comments: how are you verifying identity in a world of convincing fakes? ๐Ÿ“ฉ Need security, risk, or ICT legislation advice? Reach the Priviso team at admin@priviso.co.za. #InformationSecurity #CyberSecurity #POPIA #AIGovernance #ISO27001 #ISO42001 #InsiderThreat #Deepfakes #DataProtection #PrivisoLive #SouthAfrica

  8. Jul 11

    Priviso Live Episode 94: Control versus Ownership

    ๐Ÿ›ฐ๏ธ Who really controls your messages, your machines, and your connection? This week on Priviso Live, we follow one uncomfortable thread through three very different stories, and it lands squarely on every information security and IT desk in South Africa. ๐Ÿ” Europe's โ€œChat Controlโ€ is back. The EU Parliament let suspicion-less scanning of private messages continue to 2028, even though most voting members opposed it. We unpack what it means for encryption, for platforms like Gmail and Instagram, and for your POPIA accountability. ๐Ÿ›œ Right to repair just won big. The FTC and five US states settled with John Deere: ten years of equal access to repair tools. Why a tractor in Iowa is really a lesson about who controls the firmware in your medical devices, network gear and fleet. ๐Ÿ“ก Satellite in South Africa. While Starlink stays unlicensed, the licensed alternatives on offer are enterprise-grade and pricier, and critics call it a lesser solution at a weaker price. We weigh the controversy fairly, the genuine resilience upside, and the dependency risk of a single foreign uplink. ๐Ÿ’ก The common thread? In every case the real question was not the technology, it was control, and whether the person who owns the thing is the person who decides what it does. โ–ถ๏ธ Watch this week's episode, and tell us in the comments: where in your environment do you own the steel, but not the permission? ๐Ÿ‘‰ Subscribe to Priviso Live on YouTube, Spotify, Apple, iHeartRadio or Samsung. ๐Ÿ“ฌ Need security, risk or ICT legislation advice? admin@priviso.co.za #InformationSecurity #POPIA #RightToRepair #Encryption #ChatControl #Starlink #ICASA #CyberSecurity #AIGovernance #PrivisoLive #SouthAfrica

About

Your dose of tips about all things Information Security, ICT Legislation and Risk. South African podcast.