Phishing for Trouble from IO (ISMS.online)
Phishing for Trouble is the business resilience podcast from IO (ISMS.online), a platform used by thousands of teams to manage compliance and build resilience day to day. Hosts Rebecca Harper and David Holloway talk with security leaders, specialists and business experts about compliance, security, privacy and AI risk. The show cuts through the noise to offer practical advice that listeners can take back to their teams. Episodes are honest, useful and occasionally a little awkward.
Episodes
SPECIAL: Beyond the Headlines - Cyber Resilience, Supply Chains and the Cost of Disruption (Part 2)
In part two of this Cyber Security Awareness Month special, Rebecca Harper, David Holloway and Kate O'Flaherty explore 2026's resilience lessons, from supply chain disruption and customer trust to the risks emerging in 2027.From major service outages to cyberattacks affecting entire supply chains, 2026 has highlighted just how interconnected business risks have become. When critical servic
SPECIAL: Beyond the Headlines - AI, Regulation and the Reality of 2026 (Part 1)
For Cyber Security Awareness Month, Rebecca Harper, David Holloway and Kate O'Flaherty explore how AI, regulation and governance evolved in 2026, separating headline hype from the changes that really mattered2026 has seen AI adoption accelerate, regulatory requirements evolve and organisations face growing pressure to demonstrate that their governance practices work in reality. But beyond the head
Built to Last: How Compliance Enables Business Resilience
Looking back at Phishing For Trouble's second season, we've explored the challenges organisations face as technology, regulation and risk evolve, from supply chain vulnerabilities and AI governance to privacy, operational resilience and what regulators are really looking for.In this final episode, IO's Rebecca Harper and David Holloway are joined by Rik Ferguson, Vice President of Security Intelli
Privacy as Power
What happens when privacy stops being a legal issue and starts shaping whether your business can grow? In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore why privacy is now a commercial issue, not just a compliance one.They’re joined by Joe Jones, Director of Research and Insights at the IAPP, and Jennifer Appleton, Managing Director at ISO Quality Services, to
What the Regulators Want
Today, regulators don’t just want compliance, they want accountability and resilience.In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore how the shift of expectations isn’t just about speed, it’s about demonstrable, baked-in compliance.Regulators are no longer passive; they’re proactive, prescriptive, and punitive.They’re joined by Paul Vane, the Information Co
The Cost of Doing Nothing
What does a cyber incident really cost a business? In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore the hidden commercial impact of weak security, poor compliance and delayed investment in resilience.They’re joined by Alan Hughes, Chief Operations Officer at Savenet Solutions, who has worked with organisations before, during and after major cyber incidents wi
Scaling Securely: What High-Growth Firms Get Right
What happens when your business grows faster than its foundations can handle?In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore why the companies that scale successfully aren’t necessarily the ones that achieve compliance fastest. They’re the ones that build security, privacy and governance into the way they operate from the very beginning.They’re joined by cyb
You’re compliant, are you resilient?
What happens when a cyber attack doesn’t just disrupt your business, but stops it completely? In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore why resilience has become a defining business challenge fororganisations of every size. Using the Jaguar Land Rover cyber attack as a case study, alongside insights from cybersecurity expert Pierre Noel and Professor C
Boardroom to Breakroom: Building a Culture of Compliance
Why do organisations still struggle to turn security policy into real-world behaviour? In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore how regulations like NIS2 place direct accountability on senior leaders whilst, in many organisations, compliance still lives on paper and not in practice.They’re joined by Professor Steven Furnell, Professor of Cyber Securit
Supply Chain Dominoes: Why Their Risk Is Now Your Risk
What happens when a third-party company suffers a security breach, way down the supply chain – and the people who suffer are your customers?In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore how, even if your systems are strong, a weak supplier can shut you down, how regulators and investors are demanding stronger supplier governance, and what you need to do ab
AI: Trust, Ethics, and Getting It Right from the Start
What happens when employees start using AI toolsfaster than organisations can govern them?In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore why AI governance has quickly become a business-critical issue, from shadow AI and data privacy risks to accountability, trust and emerging regulation.They’re joined by Professor Andrea Isoni, who works with organisations
Compliance: From Checkbox to Competitive Advantage
What happens when your biggest deal stalls at the final hurdle because procurement asks questions your business cannot answer? In this episode of Phishing for Trouble, IO’s Rebecca Harper and David Holloway explore why compliance is now a commercial issue, not just a technical one. They’re joined by Daniel Bailey from ECI Partners who spends his time helping ambitious companies grow, and the Univ
Phishing for Trouble Returns This Thursday 14th May
Compliance, security, privacy, AI risk. There's a lot of noise out there, and not much of it is useful when you're the one having to do the work.Phishing for Trouble is the business resilience podcast from IO (ISMS.online), the platform thousands of teams use to manage compliance and build resilience day to day. Rebecca Harper and David Holloway talk to the security leaders, specialists an
The big cybersecurity questions facing businesses in the future
In the final episode of the series, Rebecca Harper and David Holloway are here to recap some top tips for cyber compliance in your business.But before that, they’re reflecting on ideas from our expert guests and discussing some of the trends, questions, challenges and opportunities for information security professionals in the near future. Whether it’s looking at changes to cyber law enforcement
What not to do in a disaster
Back in May 2017, a cryptoworm virus made it into some Microsoft computing systems, locking away the data of global organisations and demanding a ransom. In panic some people paid up only to find their data never returned. The knock-on effect to health services, including hospitals, was dramatic. So what do you do if you’re faced with such a scenario? In this episode, David Holloway and Rebecca Ha
Safe software, safer business
How can you protect your business from hackers? Whilst no company is safe from IT security attacks, the way your company develops, manages and uses software is key. Staying up to date with the latest advice and patches, raising awareness of hacker tactics and educating your people on how to use platforms safely is all a part of the puzzle.Rebecca Harper and David Holloway share stories of how even
IP, privacy and cybersecurity explained
If you’re unsure about how intellectual property can be exploited or misused in cyberspace, you could be vulnerable in the eyes of the law. Whether it’s protecting the intellectual property you handle on behalf of your customers and partners, or the security of your own IP, we’re here to help. In this episode the Privacy Professor Rebecca Herold and distinguished cyber leader Wendy Nather are here
Tricksters, Trapdoors, Vishing and Phishing
How was one of the world’s biggest media companies brought to its knees by a cyber hack? This time we hear how hackers gained access to Sony Pictures in 2014 by manipulating the sociology and psychology of staff. The truth is, a company can invest millions in cybersecurity technology, but social engineering tactics can allow hackers to gain access to an organisation’s IT through the individuals th
Who has the keys to your business?
This time we’re delving into best practises for IT leaders looking to prevent data breaches through third party access. Don’t know what that is? David and Becca will be unveiling more high profile slip-ups and mishaps and exploring how you can protect against cyberattacks.How clued up are you on who has access to sensitive information, networks or other data in your business? What about individual
Are you at the front line of defence?
Thought cybersecurity was just about tech? Think again, because human beings are the biggest asset you have in keeping your business secure. In this episode Dave and Becca find out how social engineering tactics have caught out even the biggest organisations, and how you can learn from them. As always, some of the smartest minds in infosec are here to share their wisdom:Dr Jessica Barker MBE, foun
How safe is my private information?
Data protection doesn’t have the most exciting reputation but it can be pretty dramatic when you miss it off your compliance list! From the legal consequences of data breaches to human error, not having a prevention or response plan in place can land even the biggest companies in hot water.In this podcast Dave and Becca explore the different between personal and sensitive information and what make
How secure are our services? Cybercrime and critical infrastructure
"Phishing for Trouble," is the cybersecurity podcast that demystifies compliance and information security in your business.
We know any cyber hack is bad for business. But what about the customers and networks that rely upon the services it provides?
Dave and Becca delve into the Colonial Pipeline attack of
2021. Thousands of miles of US fuel supply came to a halt for days after the company wa
Cybersecurity, Compliance and Me
"Phishing for Trouble," is the cybersecurity podcast that demystifies compliance and information security in your business.
How do laws protect businesses from data breaches, software failures, and IT mishaps—and when do they leave you liable? In this first episode, Dave and Becca tackle the fundamentals of compliance and information security. They explore how businesses like yours can safeguard s
Phishing for Trouble is coming on 19th November
"Phishing for Trouble" is the cybersecurity podcast that demystifies compliance and information security in your business, starting on 19th November 2024.
Technology and software are the backbone of modern business, simplifying daily operations and driving innovation.
But when it comes to cybersecurity and compliance, it’s no longer just an IT problem—it’s everyone’s responsibility. Are you confid
