Cyber Heard

Invitise

Real conversations with UK Cyber Security leaders and frontline practitioners. Practitioners in the chair, not commentators. Brought to you by Invitise.

  1. 3d ago

    The CISO Who Says GRC Is Broken

    A CISO explains why point-in-time compliance gives a false sense of assurance, how to answer the board's exposure question without hiding behind a heat map, and where AI is genuinely helping security teams connect data that used to sit in silos.

  2. 5d ago

    Killing the Foundation: The Broken Cyber Pipeline

    A university cyber security programme leader explains why graduates struggle to break into the industry, how AI is quietly removing the junior tasks that used to build analyst judgement, and what students can do instead to stand out.

  3. Oct 2

    It's Not the Tool, It's the Process

    Bruno Bossola explains why dependency and supply chain risk keeps slipping past security teams, and why the fix is rarely another scanner but a proper process across the whole development lifecycle. He also sets out why AI coding assistants are quietly reintroducing vulnerable libraries at scale.

  4. Sep 30

    More Tech Isn't the Answer: The Human Factor in Cyber

    Joe Hubback explains why cyber risk quantification only really works when it's built around reasonable worst case scenarios, why third party and OT risk are often more about people than technology, and why he believes the industry's biggest blind spot is behaviour, not tooling.

  5. Sep 28

    Most Security Problems Are Really Access Control Problems

    Thomas Owen explains why he sees almost all security failures as access control failures rooted in human identity, and how measurable, causal testing can actually shift intrinsic staff behaviour rather than just producing a click rate on a dashboard. He also sets out where AI has changed the economics of phishing and deepfakes, and where he draws the line between protecting staff and quietly surveilling them.

  6. Sep 25

    Don't Sweat Quantum, Sweat Your Attack Surface

    A field CSO who built SOC teams from the ground up explains why board risk numbers are more storytelling than maths, why supplier questionnaires are mostly theatre, and why the weakest link line about users is wrong.

  7. Sep 23

    Stop Blaming Users: 25 Years Breaking Ships, Planes and Yachts

    A veteran penetration tester explains why legacy technology, rigid procurement cycles and marketing-driven security purchases leave ships, planes and industrial control systems exposed, and gives a grounded assessment of how much AI is really changing offensive security today.

  8. Sep 18

    Phishing, AI and the SME Blind Spot

    A practical look at how small agencies can protect themselves against phishing and social engineering, why identity and MFA now matter more than network boundaries, and how to bring AI into a business without losing control of governance and data.

See All (17)

About

Real conversations with UK Cyber Security leaders and frontline practitioners. Practitioners in the chair, not commentators. Brought to you by Invitise.

Information

  • Creator
    Invitise
  • Years Active
    2026
  • Episodes
    17
  • Rating
    Clean
  • Show Website
    Cyber Heard