Risk + Safety + Security + Sciences

On June 22, 2026, the five leading cyberintelligence agencies issued an urgent joint warning that frontier A.I. has compressed the window for catastrophic cyberattacks from years to months, making breaches effectively inevitable unless organisations act now.
The statement prescribes immediate actions — reduce attack surface, accelerate patching, replace legacy systems, enforce zero-trust access, and prepare incident response — and calls for AI-driven defences and whole-of-organisation collaboration to build cyber resilience.

This episode decodes internal global travel risk forecasts (June 22, 2026) and shows how concurrent disruptions across three continents are bottlenecking global aviation capacity. It explains how events—from a peace deal and a closure of the Strait of Hormuz to airport attacks, bureaucratic pullouts, heatwaves, typhoons, cyber rules and disease outbreaks—cascade into cancellations, reroutes and soaring costs.
We examine the legal duty of care and foreseeability standard that forces corporations to adopt extreme mitigation (flexible fares, clean devices, heat buffers) and explain what that means for executives and everyday travellers planning international trips today.

This episode explains how organisations translate mission and values into a measurable risk appetite using the COSO framework, through a case study of a premium organic food company.
It traces how high-level ideals like sustainability become concrete strategies, unit objectives, and hard performance targets (e.g., an R&D pipeline target of 8 with a tolerance of 6–10), explaining why permeation, monitoring, and mathematical limits are essential to prevent catastrophic failures.

This episode explains Structured Professional Judgment (SPJ), a six-step framework professionals use to assess risk and threat by combining evidence-based tools with human judgment to inform prevention and management plans.The hosts explore SPJ's strengths and limits — including subjectivity, base-rate challenges, and cultural biases — and consider safeguards, multidisciplinary practice, and AI's emerging role in risk assessment.

This episode unpacks Tony Ridley’s 2026 paper arguing that the familiar phrase "duty of care" is parochial and often legally meaningless across jurisdictions, and proposes a universal "protective obligation."We explain Ridley’s two‑limb analytical spine (is protection owed and what must discharge it), the recurring tests of foreseeability and what’s reasonably practicable, and compare how common law, civil law, and Sharia/hybrid systems enforce protection differently. We close by examining the rise of statutory public protection (e.g., the UK’s Martin’s Law) and the practical takeaway: govern to the protective function, not the marketing label.

Corporate transformations fail at staggering rates—often cited at 88%—because organisations treat adaptive challenges like technical projects. This episode breaks down the data, explains how culture, cyber debt, and short leadership tenures create a cluster of governance and legal risks, and shows why many change programs simply inherit old problems.
We cover the risks regulators now care about, from operational and supply‑chain exposure to insider threats, and outline a risk governance fix: a mandatory pre‑commencement assessment, clear board accountability with succession provisions, and a disciplined counterfactual test to ask whether not transforming is the safer choice.

This episode unpacks Australia’s new Enhanced Critical Infrastructure Risk Management Program (CIRMP) rules, effective June 2026, and explains why the government expanded protections for nine critical asset classes.
It summarises the episode’s key takeaways: intelligence‑informed risk assessments, stricter cybersecurity controls (phishing‑resistant MFA, network segregation enabling 90‑day operational independence), enhanced personnel vetting, supply‑chain FOCI checks, and phased compliance timelines for affected entities.

This episode explores Tony Ridley’s argument that organizations obsessively assure management systems while neglecting the human capability to lead under extreme pressure. Drawing on military doctrine, crisis scholarship, safety science and organizational resilience, it explains why intent‑led, decentralized judgment and rehearsed leadership matter more than rigid checklists.Listeners will learn the asymmetry of assurance, the physiological limits of panic and fatigue, and the practical fix: boards must name accountable owners and assess leadership as a built capability through rehearsal, guided adaptability and everyday trust‑building.

This week's risk assessment reports provide a comprehensive global intelligence briefing for corporate executives regarding travel conditions as of 15 June 2026. We have analysed geopolitical instability in the Middle East, specifically highlighting a fragile pause in hostilities that continues to affect aviation capacity and fuel costs worldwide.

This discussion examines the critical tension between security management and security leadership, arguing that the industry often confuses these two distinct roles. I contend that while security leadership is frequently romanticised through subjective anecdotes and military-style narratives, it lacks a foundation of empirical research and universal standards.