Cyber Heard

Don't Sweat Quantum, Sweat Your Attack Surface

Alan Simpson, Field CISO at Rapid7

25 September 2026 · 30 min

A field CSO who built SOC teams from the ground up explains why board risk numbers are more storytelling than maths, why supplier questionnaires are mostly theatre, and why the weakest link line about users is wrong.

SOC OperationsManaged Detection And ResponseThird Party RiskBoard ReportingIdentity SecurityAI In Security

Listen and subscribe

Spotify Apple Podcasts YouTube RSS

More episodes

23 September 2026

Stop Blaming Users: 25 Years Breaking Ships, Planes and Yachts

Campbell Murray

18 September 2026

Phishing, AI and the SME Blind Spot

Ben Oldham

16 September 2026

No Defences: The Honest State of AI Security

Chris Jefferson

The 24-hour rule
Why slow Cyber Hiring is now a board risk

A 16-page invitise briefing for cyber, risk and people leaders. Why the hiring window has narrowed, what 24-hour mobilisation actually requires, and the four conditions that have to be true for next-morning on-site to mean something.

55%

of senior cyber roles take 6 months or longer to fill in the UK.

46 days

longer than other IT roles, senior cyber vacancies stay open.

68%

of large UK businesses now own cyber at board level.

Don't Sweat Quantum, Sweat Your Attack Surface

More episodes

The 24-hour rule Why slow Cyber Hiring is now a board risk

The 24-hour rule
Why slow Cyber Hiring is now a board risk