Risk + Safety + Security + Sciences

This episode interrogates the assumptions behind modern security practices, drawing on Tony Ridley’s research to show how static frameworks like CPTED and corporate travel advisories fail in dynamic, hyper-contextual environments. Hosts explore phase transitions in personal risk, cultural blind spots in environmental design, and the danger of relying on rigid acronyms instead of adaptive, evidence-based strategies.

This episode unpacks my position paper "The Measured and the Unmeasured" and reveals how the business travel industry precisely tracks spending but systematically ignores traveller harm.
It explains the dangers of using financial averages and generic country maps as proxies for safety, the legal risks created by detailed ledgers with no journey-specific risk assessments, and offers practical remedies: shift the unit of analysis from dollars to journeys, assess value-at-risk, ensure competent security authority, and perform the vendor-failure test.

This episode decodes the "Reasonable Officer Knowledge Standard," explaining how courts judge leaders by what they should have known, not what they did know.It walks through a five-tier hierarchy of authoritative sources, the irreducible core of responsibility, and the Knowledge Baseline Register (KBR) — a practical system leaders can use to document knowledge, gaps, and decisions to build a defensible record.

This episode decodes the UK Government's Orange Book, revealing its core argument: public sector organisations cannot be risk-averse if they want to succeed.
We cover how leaders set a mathematical risk appetite, the role of the accounting officer, the extended enterprise and horizon scanning, and the menu of risk treatments from avoidance to deliberate retention.
Finally, we explain the Risk Control Framework—four pillars and the three lines model—and how assurance mapping organises oversight, enabling governments to take strategic risks responsibly. The episode closes with practical takeaways for applying these ideas to careers and projects.

A deep dive into a Global Security Operations Centre’s travel risk briefing, showing how analysts synthesise simultaneous crises—from drone strikes and earthquakes to strikes and disease outbreaks—into actionable decisions. Highlights include real-world red alerts, data audits that expose misinformation, and the trade-offs between real-time intelligence and gold-standard verification.

This episode examines Tony Ridley’s August 2026 working paper arguing that merging risk and compliance roles creates structural vulnerabilities. It clarifies the difference between compliance (backward-looking rule conformance) and risk management (forward-looking uncertainty treatment), and introduces Strength of Knowledge as a way to evaluate confidence in risk assessments.Using case studies like Wells Fargo, Volkswagen, and Enron, the hosts show how box-checking compliance can obscure real hazards. The episode concludes with a practical governance solution: declare accountability splits, document competencies, and require escalation paths when combined roles are necessary.

Professional security expert Tony Ridley argues that the core concepts of security, risk, and safety suffer from extreme linguistic inconsistency across academic literature and industry standards.
By analysing several influential texts, he demonstrates that these terms often lack objective research or scientific foundations, relying instead on the subjective opinions and biases of various authors.
Many practitioners continue to use outdated frameworks like HB 167:2006, which provides a prescriptive, checklist-style approach that ignores essential social and community contexts.
This lack of a unified curriculum or body of knowledge leads to significant confusion, as definitions shift depending on the specific timeline and geography of the source.
Consequently, Ridley urges organisations and governments to use extreme caution when implementing management models that may be built on theoretical errors or distorted perspectives.
Ultimately, he challenges the industry to move beyond buzzwords and verify whether their endorsed definitions are supported by rigorous science rather than mere curation.

This discussion is based on a technical working paper by Tony Ridley that critiques the travel risk management industry for prioritising media-driven "noise" over scientific risk analysis. 
I argue that modern travel alerts and country ratings are artifacts of a twenty-four-hour news cycle designed for entertainment and engagement rather than actual safety.
Through a quantitative case study and an extensive review of the academic literature, the paper demonstrates how high-volume alerting triggers cognitive biases and alarm fatigue while failing to provide specific, actionable intelligence.
My research highlights the ecological fallacy of using broad city- or country-level designations to assess individual risk, noting that these methods often overlook more frequent dangers, such as road trauma.
Ultimately, the source advocates a shift toward threat- and location-specific analysis and warns that current industry practices may create legal and psychosocial liabilities for organisations.

These executive travel risk briefings for late July 2026 provide a comprehensive global security synthesis across the EMEA, APAC, and Americas regions.
We track four confirmed forecast hits, including the scale of Mediterranean wildfires and the trajectory of an Ebola outbreak in the Democratic Republic of the Congo.
High-priority alerts focus on a fragile pause in the Gulf-Levant conflict, which is complicated by a newly emerged bidirectional front between Saudi Arabia and Houthi forces.
In the Americas, we highlight a constitutional standoff in Colombia and a significant escalation of internal armed conflict in Ecuador.
The briefings also implement rigorous governance corrections, specifically updating stale reporting on airport closures in Venezuela and the fallen status of El Fasher in Sudan.
Ultimately, the sources serve as a decision-support framework to ensure corporate duty of care and operational safety in high-risk jurisdictions.

This discussion illustrates a maturity timeline that tracks how an organisation’s approach to risk appetite evolves over time.
It categorises growth into five distinct stages, ranging from a basic risk-naive posture to a highly sophisticated risk-enabled state. 
As companies progress, they transition from utilising uncoordinated, ad hoc controls to implementing a fully embedded process characterised by continuous improvement. 
Key milestones in this journey include securing senior management commitment, establishing a unified governance framework, and maintaining regular communication across the entity.
Ultimately, the chart serves as a visual guide for achieving enterprise risk management through increasing levels of structural integration and strategic oversight.