The Cyber Hot Seat: Taking on your Cyber Security challenges

In Episode 25 of The Cyber Hot Seat , Anish is joined by Warren Butterworth, Lead Penetration Tester and Red Team Specialist at OmniCyber Security, to explore why passing a penetration test doesn't necessarily mean you're secure. As cyber threats continue to evolve, organisations need to think beyond point-in-time assessments and start validating their ability to detect and respond to the tactics used by real-world attackers. Warren explains how Continuous Adversary Emulation helps security teams test their resilience in a way that reflects today's threat landscape. They cover: The difference between adversary emulation and simulation Why penetration testing is only part of the picture How real attackers think and choose their targets The impact of AI on modern cyber attacks Common security weaknesses organisations continue to overlook Why continuous security validation is becoming increasingly important Whether you're a security leader, IT professional or responsible for organisational resilience, this episode offers practical insights into building security that thinks like an attacker. Watch the video on YouTube

In episode 24 of The Cyber Hot Seat, Anish sits down with James Russell, human behaviour and transformation specialist and board advisor, to explore why AI adoption is stalling inside organisations, and what leaders can do about it. James works with boards and senior leadership teams on the human side of change, and brings a fascinating perspective on why so many organisations are talking about AI without actually transforming through it. A University of Cambridge study found that while 81% of organisations are adopting AI, only 14% see it as truly transformational. This conversation gets into why. They cover: Why using AI as a search tool is not the same as genuine adoption The concept of psychological debt, how offloading tasks to AI quietly erodes skills, confidence, and credibility Why middle managers are carrying the most tension in AI transformation programmes The cultural and existential questions AI is raising for individuals and organisations alike Practical advice on staying accountable and keeping human judgment at the centre of AI workflows Whether you lead a security team, sit on a board, or are responsible for bringing people through change, this is a conversation worth checking out. Watch the video on YouTube

In Episode 23 of The Cyber Hot Seat, Anish is joined by Sarah Price from Cyber Girls First to explore one of the most overlooked risks in cybersecurity: the people organisations do not hire. Sarah shares her perspective on how Cyber Security is still too often defined through a narrow technical lens, shaped by outdated stereotypes and assumptions about who belongs in the industry. Together, we discuss why that matters, how it affects the talent pipeline, and what organisations miss when they overlook different ways of thinking. Drawing on her experience in Cyber Security, education and outreach, Sarah explains why skills such as curiosity, data analysis, problem-solving and adaptability are just as valuable as technical expertise. From representation and role models to neurodiversity and the importance of broadening access into the profession, this conversation looks at what it will take to build stronger, more resilient security teams in the future. Watch the video on YouTube

In Episode 22 of The Cyber Hot Seat, we are joined by Jonathan Craven, Data Privacy and Cyber Security Consultant and compliance specialist, to explore what it really means to rebuild security culture by putting people back at the centre of cyber resilience. Jonathan challenges the long-standing belief that employees are the “weakest link” and explains why that mindset may be doing more harm than good. Fear-based messaging and blame-driven compliance can discourage reporting and weaken engagement. Instead, sustainable security is built on trust, clarity and shared responsibility. Drawing on his experience in data privacy and regulatory compliance, Jonathan discusses how organisations can design security programmes that work with human behaviour rather than against it. From neurodiversity and inclusive learning design to the role emotion plays in shaping secure decision-making, the conversation explores how lasting security habits are formed and why they often fail. Watch the video on YouTube

In this episode of The Cyber Hot Seat, we’re joined by Louie Augarde, Director of Offensive Services at OmniCyber Security, to explore why red teaming is one of the most powerful ways to test real-world Cyber Security resilience. Louie shares real stories from the field, including a red team engagement with a well-known insurance business where his team was so successful the company asked them to stop because it felt “unfair”. We dig into the human side of security, from social engineering and phishing tactics to physical access moments that prove how quickly one small decision can change everything. If you want a behind-the-scenes look at how red teams operate and what organisations often miss, this episode is for you. Watch the video on YouTube

In this episode of The Cyber Hot Seat, host Anish Chauhan sits down with Jonathan Ellwood, Head of Cyber Incident Exercising and Response at IASME. Together, they break down what it really means to be ready when a cyber incident hits. Jonathan explains the NCSC’s Cyber Incident Exercising Standard by outlining what it is, why it matters, and how small and mid-sized businesses can use it to prepare. He shares why a plan on paper isn’t enough, and how running exercises turns theory into action. From quick tabletop sessions to realistic live-play simulations, the pair explore how testing your response builds confidence, improves teamwork, and exposes blind spots before attackers do. They also tackle common mistakes, from overcomplicating exercises to forgetting to follow up on lessons learned. Watch the video on YouTube

In this episode, Anish is joined by Jemma, Security Culture and Awareness Specialist and Founder of Culture Gem, to unpack one of Cyber Security’s most overlooked topics: culture. Anish shares his perspective on shaping strong team cultures, while Jemma unpacks why “culture fit” matters just as much as technical expertise. Together, they dig into what culture fit really means in modern Cyber Security teams, why getting work ethic right is so challenging, and how diversity—when nurtured—becomes a powerful driver of performance rather than a complication. Expect an honest and thought-provoking conversation, filled with practical insights for anyone striving to build a high-performing security team. You’ll hear real-world examples of culture shaping success or failure, explore the communication gap between leaders and talent, and discover what it feels like when a team culture truly clicks. Watch the video on YouTube

In episode 18 of The Cyber Hot Seat, Anish Chauhan and Cristina Lasagni dig into the real challenges businesses face around vendor selection, cloud migrations, and the constant pressure to do more with less. Expect to hear about shocking examples of tool overload, the hard truths behind certifications, and why “badge-based trust” might be misleading. This conversation is a must-listen for anyone tired of the noise and craving clarity. Drowning in security solutions? Struggling with cloud visibility or compliance? Unsure whether to upskill your team or lean on external support? Cristina and Anish deliver straight-talking advice, sharp insights, and a few bold takes you won’t want to miss. Watch the video on YouTube

Is your Cyber Security training actually preparing users for real-world threats — or just ticking boxes? In this episode of The Cyber Hot Seat , Red Teamer and instructor Hani Momeninia joins us to reveal the uncomfortable truth: most training programmes aren’t built for the way modern attacks actually work. We dive into the key reasons why generic, one-size-fits-all training falls short — and how attackers are using this to stay ahead. From static content to simulations that lack realism, Hani breaks down where traditional training fails and what a smarter, threat-informed approach should look like. Expect sharp insights, real-world examples, and practical ideas on how to make Cyber Security education actually matter. If you think your training is good enough — this episode might change your mind. Watch the video on YouTube

In this episode of The Cyber Hot Seat , we’re joined by Josh Fulford, Solutions Expert at Chaleit and a recognised thought leader in Pen Testing and Cyber Security. We dive into the disconnect between what’s being sold and what businesses actually need to stay secure. From compliance checklists to vendor pressure, we explore why some Cyber Security products look great on paper but fall flat in practice, the frustration IT leaders feel with misaligned sales approaches, and how to cut through the noise to make decisions that truly reduce risk. Josh also shares what needs to change in the industry to shift from box-ticking to meaningful protection. Watch the video on YouTube

In this episode, we are joined by Becky Hall, a Cyber Security expert with over 15 years of IT industry experience. Becky shares her insights on the “Garden to Grid” approach, which emphasises putting down roots and building relationships as the foundation of a resilient Cyber Security strategy. Many organisations view internal cyber and audit teams as threats, overlooking the critical role of trust and communication. Becky challenges this mindset, offering practical advice on fostering collaboration to transform these relationships into a strategic advantage. Drawing on her experience as an Enterprise Technical Account Manager and public speaker, she provides a fresh perspective on creating adaptive, purpose-driven security strategies. Don’t miss this insightful discussion on the power of relationships in Cyber Security. Watch the video on YouTube

In Episode 14 of The Cyber Hot Seat , host Anish joins Sunaina Aytan to explore how AI is shaping Cyber Security. They discuss whether AI strengthens defences or introduces new vulnerabilities, the role of standards like ISO/IEC 42001, and how frameworks like NIST support secure and reliable AI systems. The episode also examines managing risks from tools like GitHub Copilot without stifling innovation, the future of regulation, and the balance between AI and human oversight. Tune in for practical insights into securing AI-powered systems and the future of Cyber Security. Watch the video on YouTube

In episode 13, Jessica Burden, a Security Engineer at IASME, joins host Anish to discuss why neurodiversity is a vital asset to Cyber Security. Diagnosed with autism at 14, Jessica’s journey inspired her mother to create IASME’s Neurodiverse Training programme, tailored for neurodiverse talent in Cyber Security. They explore Jessica’s experiences in the industry and what organisations can do to create a more inclusive environment—from rethinking interviews to ensuring neurodiverse professionals feel supported in their roles. Tune in for valuable insights into shaping a more innovative, diverse future in Cyber Security! Watch the video on YouTube

In Episode 12, our host Anish is joined by Professor of Cyber Security Chitra Balakrishna to discuss the challenges of deploying new technologies while maintaining strong Cyber Security. They highlight the need for businesses to focus on core security principles—confidentiality, integrity, and availability—despite the complexities that new technologies like IoT and cloud services bring. The conversation also covers the importance of balancing innovation with security, ensuring proper risk assessments, and providing employee training to prevent cyber threats caused by human error. Check out the podcast for another insightful episode with an industry expert! Watch the video on YouTube

In episode 11, join us for another insightful discussion with the guest speaker, Claire Vandenbroecke, lead ISO 27001 auditor and Director of VandenSec Consulting. With her vast experience in compliance, this episode is essential viewing. Dive deep into the challenges that arise when compliance standards clash with the practical security needs of an organisation. Explore practical strategies to bridge this gap, ensuring that decisions are informed by more than just compliance standards alone. Don't miss out on these invaluable insights! Watch the video on YouTube

In the tenth installment of the Cyber Hot Seat, our host and managing director, Anish Chauhan, is joined by Claire Vandenbroecke, the Director of VandenSec Consulting. As a leading ISO 27001 auditor, Claire will guide us through the 2022 updates to the standard. Given her extensive expertise in compliance, this episode is a must-watch. We'll delve into the specifics of the recent changes, discuss their impact on businesses, identify key team members who need to be involved, and much more! Watch the video on YouTube

In episode nine, our host and Managing Director, Anish Chauhan, is joined by CISO Jon Begley from a leading global travel retailer. Together, they discuss why it's crucial for security leaders to master the skill of simplifying complex security concepts for non-technical decision makers. Recognising that technical expertise alone isn't sufficient, they delve into the power of storytelling as a persuasive tool in advocating for security initiatives. Throughout the episode, they emphasise the importance of ongoing investment in Cyber Security and its indispensable role in ensuring business continuity. Curious about enhancing this skill as a security leader? Tune in to uncover valuable insights! Watch the video on YouTube

In episode eight and the first video edition of the Cyber Hot Seat (check it out on our YouTube Channel), our host and MD Anish Chauhan welcomes CISO Jon Begley from a leading global travel retailer. They discuss real-life incident response stories, demystify what 'incident response' truly entails in practice, and offer direct advice on preparing for cyber attacks. This episode provides clear, expert insights into the realities of incident response, providing actionable tips for cyber attack readiness beyond just high-tech solutions. Watch the video on YouTube

Join Anish and special guest Neil Buckley, Cyber Security Consultant at Equilibrium, in this episode of "The Cyber Hot Seat" , we plunge into the intricate realm of penetration testing challenges that organisations often face. Unpacking real-life scenarios from our clients, we unravel the complexities involved in testing and securing digital assets. Whether you're a budding Cyber Security enthusiast or a seasoned pro, this episode equips you with practical knowledge and innovative solutions to bolster your security stance. Watch the video on YouTube

In this episode, we are joined by Neil Furminger, Cyber Essentials Manager from The IASME Consortium. We delve into the vital role of Cyber Essentials in safeguarding against low-hanging fruit attacks. We explore how the scheme provides a practical framework for organisations to bolster their defences and mitigate prevalent cyber-threats. As the threat landscape continues to evolve, we examine the need for the Cyber Essentials scheme to evolve in tandem, keeping up with changing cyber-risks faced by businesses. Neil sheds light on the importance of addressing emerging threats and the increased sophistication of cyber-criminals. Join us for an enlightening discussion on the evolving role of Cyber Essentials in protecting against common attacks. Discover the necessary adaptations required by the scheme to ensure businesses can effectively safeguard their sensitive data, customer information, and critical assets. Stay informed, stay secure, and stay ahead of cyber-threats by tuning in to this episode. Watch the video on YouTube