Phishing for Trouble from ISMS.Online

What happens when privacy stops being a legal issue and starts shaping whether your business can grow?  In this episode of Phishing for Trouble, IO ’s Rebecca Harper and David Holloway explore why privacy is now a commercial issue, not just a compliance one. They’re joined by Joe Jones, Director of Research and Insights at the IAPP, and Jennifer Appleton, Managing Director at ISO Quality Services,...

Today, regulators don’t just want compliance, they want accountability and resilience. In this episode of Phishing for Trouble, IO ’s Rebecca Harper and David Holloway explore how the shift of expectations isn’t just about speed, it’s about demonstrable, baked-in compliance. Regulators are no longer passive; they’re proactive, prescriptive, and punitive. They’re joined by Paul Vane , the Informati...

What does a cyber incident really cost a business? In this episode of Phishing for Trouble, IO ’s Rebecca Harper and David Holloway explore the hidden commercial impact of weak security, poor compliance and delayed investment in resilience. They’re joined by Alan Hughes, Chief Operations Officer at Savenet Solutions, who has worked with organisations before, during and after major cyber incidents...

What happens when your business grows faster than its foundations can handle? In this episode of Phishing for Trouble, IO ’s Rebecca Harper and David Holloway explore why the companies that scale successfully aren’t necessarily the ones that achieve compliance fastest. They’re the ones that build security, privacy and governance into the way they operate from the very beginning. They’re joined by...

What happens when a cyber attack doesn’t just disrupt your business, but stops it completely? In this episode of Phishing for Trouble , IO’s Rebecca Harper and David Holloway explore why resilience has become a defining business challenge fororganisations of every size. Using the Jaguar Land Rover cyber attack as a case study, alongside insights from cybersecurity expert Pierre Noel and Professor...

Why do organisations still struggle to turn security policy into real-world behaviour?  In this episode of Phishing for Trouble, IO ’s Rebecca Harper and David Holloway explore how regulations like NIS2 place direct accountability on senior leaders whilst, in many organisations, compliance still lives on paper and not in practice. They’re joined by Professor Steven Furnell , Professor of Cyber Sec...

What happens when a third-party company suffers a security breach, way down the supply chain – and the people who suffer are your customers? In this episode of Phishing for Trouble, IO ’s Rebecca Harper and David Holloway explore how, even if your systems are strong, a weak supplier can shut you down, how regulators and investors are demanding stronger supplier governance, and what you need to do...

What happens when employees start using AI toolsfaster than organisations can govern them? In this episode of Phishing for Trouble , IO ’s Rebecca Harper and David Holloway explore why AI governance has quickly become a business-critical issue, from shadow AI and data privacy risks to accountability, trust and emerging regulation. They’re joined by Professor Andrea Isoni, who works with organisati...

What happens when your biggest deal stalls at the final hurdle because procurement asks questions your business cannot answer? In this episode of Phishing for Trouble, IO ’s Rebecca Harper and David Holloway explore why compliance is now a commercial issue, not just a technical one.   They’re joined by Daniel Bailey from ECI Partners who spends his time helping ambitious companies grow, and the Un...

Compliance, security, privacy, AI risk. There's a lot of noise out there, and not much of it is useful when you're the one having to do the work. Phishing for Trouble is the business resilience podcast from IO (ISMS.online), the platform thousands of teams use to manage compliance and build resilience day to day. Rebecca Harper and David Holloway talk to the security leaders, specialists a...

In the final episode of the series, Rebecca Harper and David Holloway are here to recap some top tips for cyber compliance in your business. But before that, they’re reflecting on ideas from our expert guests and discussing some of the trends, questions, challenges and opportunities for information security professionals in the near future.   Whether it’s looking at changes to cyber law enforcemen...

Back in May 2017, a cryptoworm virus made it into some Microsoft computing systems, locking away the data of global organisations and demanding a ransom. In panic some people paid up only to find their data never returned. The knock-on effect to health services, including hospitals, was dramatic. So what do you do if you’re faced with such a scenario? In this episode, David Holloway and Rebecca Ha...

How can you protect your business from hackers? Whilst no company is safe from IT security attacks, the way your company develops, manages and uses software is key. Staying up to date with the latest advice and patches, raising awareness of hacker tactics and educating your people on how to use platforms safely is all a part of the puzzle. Rebecca Harper and David Holloway share stories of how eve...

If you’re unsure about how intellectual property can be exploited or misused in cyberspace, you could be vulnerable in the eyes of the law. Whether it’s protecting the intellectual property you handle on behalf of your customers and partners, or the security of your own IP, we’re here to help.  In this episode the Privacy Professor Rebecca Herold and distinguished cyber leader Wendy Nather are her...

How was one of the world’s biggest media companies brought to its knees by a cyber hack? This time we hear how hackers gained access to Sony Pictures in 2014 by manipulating the sociology and psychology of staff.  The truth is, a company can invest millions in cybersecurity technology, but social engineering tactics can allow hackers to gain access to an organisation’s IT through the individuals t...

This time we’re delving into best practises for IT leaders looking to prevent data breaches through third party access. Don’t know what that is? David and Becca will be unveiling more high profile slip-ups and mishaps and exploring how you can protect against cyberattacks. How clued up are you on who has access to sensitive information, networks or other data in your business? What about individua...

Thought cybersecurity was just about tech? Think again, because human beings are the biggest asset you have in keeping your business secure. In this episode Dave and Becca find out how social engineering tactics have caught out even the biggest organisations, and how you can learn from them. As always, some of the smartest minds in infosec are here to share their wisdom: Dr Jessica Barker MBE, fou...

Data protection doesn’t have the most exciting reputation but it can be pretty dramatic when you miss it off your compliance list! From the legal consequences of data breaches to human error, not having a prevention or response plan in place can land even the biggest companies in hot water. In this podcast Dave and Becca explore the different between personal and sensitive information and what mak...

"Phishing for Trouble," is the cybersecurity podcast that demystifies compliance and information security in your business.   We know any cyber hack is bad for business. But what about the customers and networks that rely upon the services it provides?   Dave and Becca delve into the Colonial Pipeline attack of 2021. Thousands of miles of US fuel supply came to a halt for days after the company wa...

"Phishing for Trouble," is the cybersecurity podcast that demystifies compliance and information security in your business. How do laws protect businesses from data breaches, software failures, and IT mishaps—and when do they leave you liable? In this first episode, Dave and Becca tackle the fundamentals of compliance and information security. They explore how businesses like yours can safeguard s...

"Phishing for Trouble" is the cybersecurity podcast that demystifies compliance and information security in your business, starting on 19th November 2024. Technology and software are the backbone of modern business, simplifying daily operations and driving innovation. But when it comes to cybersecurity and compliance, it’s no longer just an IT problem—it’s everyone’s responsibility. Are you confid...