Risk + Safety + Security + Sciences

This episode dissects a leaked Global Travel Risk Weekly Report (Oct 26, 2026), revealing how military attacks, epidemics, regulatory traps and cyber vulnerabilities now govern corporate movement. It explains red/black zone designations, insurance-driven maritime shifts, airspace liability rules, health lookback mandates, and device/data restrictions.Through concrete examples — airport attacks in Saudi Arabia, Strait of Hormuz shipping halts, Ebola-related 21-day travel restrictions, Starlink prohibitions, exit bans, and mandatory travel insurance — listeners learn why routine business travel increasingly requires intelligence-level planning and operational security.

This episode unpacks a leaked corporate intelligence briefing that reduces global destinations to a four-colour risk matrix and reveals how companies decide who can travel and how.
Learn how airport attacks, shipping strikes, epidemics, cyber exploits, device laws, and exit bans translate into vetted transport, land extractions, sterile devices, and travel bans — and what that means for the future of business travel.

This episode decodes a classified Global Consolidated Executive Travel Risk Briefing that shows how geopolitical conflict, disease outbreaks, natural disasters, civil unrest, and cyberattacks reshape global movement.
Listeners learn how algorithms and corporate intelligence instantly reroute people and goods, the cascading costs that reach consumers, and why modern security must merge physical and digital defences.

This episode examines Tony Ridley’s paper, which argues that corporate risk registers often create a comforting illusion of control while leaving real hazards unaddressed and exposing organisations to legal liability.
It traces historical causes, exposes flaws in risk matrices and aggregation, and offers practical remedies—document sensemaking, rate confidence, map dependencies, and prioritise action over polished reporting.

This episode explores Tony Ridley’s analysis showing that Australian critical infrastructure boards often lack explicit security mandates in their committee charters, leaving essential services exposed.It outlines the key findings—security mentions are scarce, responsibilities default to audit committees, safety and cyber oversight are siloed—and offers clear reforms: create a named all-hazards committee, require joint safety-security reporting, run exercise-based tests, and add security expertise to boards.

This episode dives into Tony Ridley’s working paper "Job Title Proxies as Legitimised Naivety," exploring how Australia’s Security of Critical Infrastructure regime requires all-hazards risk management but is silent on who is competent to design it. Hosts unpack how regulatory design, occupational classification bias, and colonising professions (IT, consultants, lawyers, ex‑military, engineers) lead boards to rely on job titles and clearances as substitutes for real security expertise, the legal exposure that creates under the standard of "reasonably practicable," and practical reform ideas such as credentialed registers like the UK Chartered Security Professionals.

This episode decodes a restricted executive travel-risk briefing (week 41, 2026) and shows how kinetic, cyber, and health threats create a fragile, interconnected system that reshapes global travel logistics.Listeners hear concrete examples — Gulf airspace and maritime attacks, a cockpit assault, an Ebola outbreak, and active cyber exploits — and learn the operational mitigations corporations use: alternate routings, named backup carriers, satellite permits, sheep-dipped devices, and offline check-in plans.

This episode examines the clash between quantitative risk models and human judgment inside major banks, drawing on a 2011 Harvard Business School study and a 2026 critique. It explores how mathematical models can become political tools, how intuition can be misremembered as foresight, and why an integrated approach—documented judgment plus disciplined measurement—is essential for true risk management.

This episode explores my critique of the security and risk industry, showing how titles, brief certificates, and military backgrounds are often treated as proxies for real expertise.
It explains the "security decay" paradox, shows why legal and insurance scrutiny demand empirical qualifications, and outlines how frameworks like the AQF and an evidence scale can separate true experts from illusionary competence.

This episode breaks down NIST Special Publication 800‑82 Revision 4, explaining how connected operational technology (OT)—from ships and rail to water and farms—is now a target for cyberattacks and requires new defences.
Key takeaways include zero trust and identity convergence for OT, biometric and post‑quantum protections for long‑lived systems, supply‑chain governance, resiliency through redundancy and fault tolerance, and the surprising importance of analog backups and out‑of‑band management. The draft is open for public comment Sept 21–Nov 30, 2026.