Risk + Safety + Security + Sciences

This episode breaks down the CIPR handbook on crisis communication for boards, explaining why reputation is now a financial asset and crises are inevitable in a connected world.It walks through the five crisis phases, the "golden hour" response, and the difference between capability and character crises using real case studies—Grenfell, the Post Office Horizon scandal, Jaguar Land Rover, BP, and a modern viral leadership scandal.The hosts highlight culture, cognitive diversity, and the urgent, paradoxical role of AI in both causing and mitigating crises, and close with a warning about relying solely on digital systems when disaster strikes.

This episode breaks down CISA’s September 2026 Insider Threat Mitigation Guide, explaining how insider risks often stem from trusted people, not external hackers. It outlines the six-stage pathway from grievance to attack, distinguishes accidental versus intentional insiders, and shows why zero-tolerance policies and siloed departments worsen risks. The episode also covers human and digital sensing (UBA/UAM), leakage indicators, multidisciplinary threat teams, and how AI (deepfakes and data poisoning) complicates mitigation.

This episode unpacks a leaked Global Consolidated Executive Travel Risk Briefing (Sept 14–20, 2026) that shows how military strikes in the Gulf, insurance repricing, and pipeline attacks are disrupting global energy and aviation.We trace cascading impacts from a Miami runway crash and Anak Krakatau’s ash cloud to conflicting government travel advisories and active cybersecurity exploits—revealing how physical, bureaucratic, and digital failures strand people, spike costs, and break contingency plans.

This episode breaks down the 2026 State of Risk Oversight report, showing how most organisations are surprised by major operational shocks and treat risk as compliance rather than strategy.
We explore why ERM adoption is low, how boards are pressuring executives, and how shifting to proactive, long-term scenario planning can turn risk into a competitive advantage.

This episode unpacks Nicholas E. Lockhart's 2026 PhD thesis on why corporate security warnings often fail to reach CEOs. It explains the difference between safety and security, traces security's operational legacy, and shows how structural positioning, cultural biases, and lack of professionalisation limit security's influence.
The hosts explore frameworks (Pettinger, Mintzberg, and others) that reveal why technical expertise alone is insufficient, and how translation, networking, and AI-driven risk convergence can help security gain strategic authority. The episode ends by asking who will be held accountable when converged hybrid threats cause catastrophe.

This episode unpacks Tony Ridley’s analysis of why technical C‑suite roles (CRO, CSO, CISO, Chief Resilience Officer, etc.) often have impressive titles but little real authority, showing how formal charters create the illusion of power.
Using frameworks from French & Raven, Etzioni, Mintzberg, and Kotter, the discussion explains how these executives must rely on expert and referent power, avoid coercive "compliance theatre," and run deliberate influence campaigns rather than sit on a nonexistent throne.
The episode closes with a practical one‑hour Powerbase Audit—three checks to map actual power bases, evaluate the tools used, and audit key relationships—plus a call to cultivate expertise and networks before you need them.

This episode analyses an EMA Global intelligence brief from September 7, 2026, showing how national travel ratings miss the micro-level realities that determine traveller safety—including a massive volcanic ash plume grounding Jakarta, fragmented Gulf airspace rules, and planned transport shutdowns in Europe.
It also highlights administrative and cyber threats—ambiguous exit laws, tariff-driven border chokepoints, and large-scale identity data breaches at rental and airport services—and offers practical mitigation steps such as demanding written routing, using alternative transit options, and conducting aggressive identity monitoring.

This episode breaks down the Edith Cowan University "Security 2030" report, revealing that private security now makes up 54% of Australia’s national security mix and supports a $11.82 billion market with over 170,000 licensed personnel. It explains how the industry goes far beyond traditional guarding to include converged cyber‑physical roles, critical infrastructure protection, and frontline first responders.
The episode highlights escalating threats—retail organised crime, mass‑casualty events, agentic AI, governance lag, and quantum vulnerabilities—while exposing a workforce crisis driven by low wages, fragmented regulation, and skills shortages. It outlines proposed fixes, such as national qualifications (AQF mapping), better pay, and regulatory reform, ahead of major events such as Brisbane 2032.

Is your organisation’s travel risk strategy built on a dangerous illusion? In this episode, we dive deep into Tony Ridley’s groundbreaking conceptual paper, "The Traveller at the Triple Point," to dismantle the security industry's reliance on static, geographic country ratings. We explore why traditional travel risk management (including typical ISO 31030 audits) averages out the very variations that cause actual harm, leaving travellers exposed during critical, unmonitored moments of their journeys.
Our discussion breaks down how to apply thermodynamics to human movement, transitioning from a linear travel sequence to the dynamic "Triple Point" model. Under this framework, a traveller at their destination does not occupy a single "safe" or "unsafe" phase. Instead, they sit at a point of coexistence where multiple parallel threats—including opportunistic crime, organised cartels, state surveillance, and environmental hazards—are simultaneously active and in a fragile, shifting equilibrium.
Key Topics Covered in This Episode:
The Three Phases of Travel: Understanding how the journey shifts from the ordered Solid state of origin, through the disorganised Liquid transit phase, to the highly "legible" Gas destination where local threat actors read strangers better than strangers read local cues.
The "N-Body Problem" of Threat Assessment: Why trying to aggregate complex, coupled risk vectors moving on their own clocks into a single number is an analytical impossibility.
The Heisenberg-like Trade-off: The practical reality that focusing heavily on resolving one threat vector in extreme detail inevitably blurs our view of others, and why honest statements of analytical confidence are the true currency of risk analysis.
High-Sensitivity Transition Points: Why security resources must be disproportionately deployed at critical decision points—such as the arrival hour, transfers, and hotel check-in—where a single "small forcing" determines safety.
Building a Forensic-Ready Duty of Care: Moving beyond deductive compliance checklists to combine deductive rules, inductive base rates, and abductive context so your organisation is fully defensible in front of a board, regulator, or coroner.
The central takeaway of this interview: The map is not the risk. True, forensic-ready duty of care requires focusing on the specific person, in their specific condition, at their specific moment, and within their specific context.

Is your organisation purchasing genuine traveller safety, or are you paying for an expensive corporate liability shield? In this episode, we sit down with independent risk practitioner and doctoral researcher Tony Ridley, MSc CSyP FSyI SRMCP, and his recent research paper to unpack a forensic audit of ISO 31030:2021 (the international guidelines for travel risk management). We dive into the controversial commercialisation of this standard, exposing how voluntary guidance is being rebranded as "certification".
What You Will Learn in This Episode:
The Linguistic Breakdown (259 vs. 1): Why a corpus analysis of the 58-page standard reveals 259 "shoulds", 240 "cans", and only one single "shall"—which sits in the Foreword to protect the publisher's patent liabilities, imposing zero requirements on the reader.
The Commercial Closed Loop: How the same commercial entities that sat on the drafting committee are now profiting by selling unaccredited audits, training, and "certification" storefronts under their own philanthropic brand names.
The Ecological Fallacy in Travel Risk: Why country-level geographic risk ratings cannot predict an individual traveler’s exposure to harm, and how ISO 31030 fails by naming individual assessment as a principle but offering zero mathematical or analytical methods to calculate it.
The Ritual of Verification: How companies fall into the "equivalence fallacy," treating document compliance as a legal shield rather than actively managing physical, on-the-ground dangers like crime, road safety, and medical emergencies.
Featured Guest Researcher: Tony Ridley, MSc CSyP FSyI SRMCP, is an independent security and risk researcher conducting doctoral work on travel risk management and corporate duty of care. He specialises in applying hermeneutics and corpus linguistics to expose structural weaknesses in private regulation and private standards.
Who Should Listen? This episode is essential listening for Chiefs of Security, Chief Risk Officers, travel procurement managers, and corporate Board members who are relying on ISO 31030 audits as a legal and operational defence.