Podcasts

Using real breach stories in security training works... but only if you do it ethically. In this episode, we unpack ethical security storytelling: how awareness teams can use real cyber incidents to drive behavior change without crossing into fear-monger

Oli Inkley started on the Waitrose shop floor. Four and a half years later, he's starting a new adventure in security awareness and culture at Marks and Spencer. In this episode, Oli talks about how he went from managing retail teams and night shifts to

The security awareness training space is evolving, but can we rely on outdated methods? In this episode, we unpack why some studies claim that training doesn’t work, what to focus on instead, and how we can rebuild programs to make a real impact.

What you’ll learn in this episode: How to use Bottom Line Up-Front (BLUF) to get faster decisions from executives and the board - and when not to. Turning “security talk” into business outcomes: mapping risk to revenue, resilience, and cost. Metrics that matter: designing KPIs that show behavior change, not just completion rates. Building a non-judgmental reporting culture (and why “Report, Don’t Click” works). Instant feedback loops: faster reinforcement without punishment in phishing drills. Story-first, stat-supported narratives that land across technical and non-technical audiences. Practical cadences and mediums: what to send to execs, managers, and the whole org and how often. Using analogies (brakes & airbags) to make layered defense memorable and actionable.