Welcome to Communicating Cyber - the series where cybersecurity leaders go beyond the jargon to share the stories, strategies, and real-world lessons that earn trust and gain buy-in for your programme.
In each episode, we’ll explore how CISOs and cyber leaders tackle one of the industry’s biggest challenges: communicating complexity in a way that’s clear, compelling, and connects with people.
This is your space to learn, share, and be inspired by your peers.
In this episode of Communicating Cyber, I’m joined by Jonny Mattey, CISO at Forge Holiday Group, for a conversation that pulls back the curtain on the true reality of stepping up into enterprise leadership. Jonny brings an incredibly grounded perspective, charting his unique journey from the heavy industrial safety of an oil refinery to managing risk for major UK staycation brands like Sykes Cottages and Forest Holidays.We explore the unspoken hurdles of a first-time directorship, challenging the idea that a CISO role is just a simple title bump. Jonny shares the unexpected psychological impact of simply moving his team's seating plan away from IT operations, and details how he uses powerful commercial metaphors - like asking if an executive would willingly close their shop front at 3pm -to make abstract cyber security risks immediately tangible to the business.Whether you are an aspiring CISO or a business leader trying to break the "invisible value" trap of your security function, this episode offers a practical blueprint on how to move past technical jargon and lead risk across the entire enterprise.
24 Apr 2026
Episode 10: Cyber Security Without Bosses - Inside Mindera’s ‘Teal’ Model
In this episode of Communicating Cyber, we explore what happens when you dismantle the traditional chain of command within a security function.
Stefano Mazzucco from Mindera discusses how they manage cyber security across a global team of 1,200 people without a single boss or hierarchy in sight. We dive into the realities of working in a "teal" organisation where peer-to-peer accountability and horizontal communication replace the standard top-down mandates.
Stefano explains how trading the traditional chain of command for a culture of psychological safety allows for faster incident reporting and deeper personal responsibility.
We also discuss the shift from being an enforcer to being a coordinator, using risk-based evidence to influence autonomous teams rather than relying on authority.
It is a thought-provoking look at whether a rigid chain of command is actually a barrier to building a truly resilient security culture.
24 Mar 2026
Episode 09: Beyond traffic lights - A new era of cyber risk quantification
In this episode of Communicating Cyber, Robin Oldham, Founder of Cydea sits down with Julian Meyrick, UK Managing Director at Eraneos, to discuss the evolution of cyber risk reporting.
For too long, cyber security has relied on subjective "Red-Amber-Green" status updates. Julian and Robin explore how the new government Cyber Action Plan and the move toward cyber risk quantification are changing how organisations prioritise their security investments and communicate with the board.
In this episode we discuss:
The fundamental flaws of subjective risk reporting.
What the government’s Cyber Action Plan means for public and private sectors.
The "WannaCry factor": Using historical data to prove the value of cyber investment.
How to engage plant managers and process owners to find the true cost of disruption.
The growing pressure on the supply chain from the MoD and NHS.
23 Feb 2026
Episode 08: From Minecraft to national security - the evolution of the young hacker
In this edition of Communicating Cyber, we sit down with Fergus Hay, CEO of The Hacking Games and former global advertising leader, to discuss why the cyber security industry needs a radical shift in how it tells its story.Fergus shares his journey from running world-class marketing agencies to discovering the "parental paranoia" of youth hacking on gaming platforms like Roblox and Minecraft. We dive into the psychology of "lions and crocodiles" in the workplace, why we need to move past the "hoodie in the basement" stereotype and how we can attract more talent by recruiting for aptitude rather than just degrees.If you’ve ever felt that cyber security communication is too technical or too fearful, this conversation is a must-watch.
13 Feb 2026
Episode 07: The stories we’re not telling about cyber crime
In this special episode of Communicating Cyber Live, we’re joined by cyber security journalist Joe Tidy to talk about how cyber crime is changing and why the way organisations respond to attacks is becoming more secretive, not more open.
From the disturbing rise of teenage cyber criminals to the growing lack of transparency after major incidents, Joe challenges us to rethink what good leadership and honest communication really look like in cyber today.
15 Jan 2026
Episode 06: Security is an optimist’s game
In this episode, Michelle Tolmay, CISO at Tracsis, reframes the security professional as an optimist and explores the art of ‘answering the so what’. She explains how to translate technical risks into the financial language of the board. From managing ‘security poverty’ in startups to fixing the talent pipeline at the grassroots level, she emphasises that effective security is about empathy, communication, and a genuine desire to help people.
13 Oct 2025
Episode 05: The story is the strategy
In this episode of Communicating Cyber, Robin sits down with Simon Goldsmith, Chief Information Security Officer at OVO, to explore how to make security meaningful when change is constant and technology moves fast.
Simon shares lessons from a career that’s taken him from mechanical engineering in Turin, to electronic warfare for the MOD, to retail, financial services, and now leading security at a digital-first energy company.
We talk about why systems thinking beats simply “adding more armour”, how storytelling and analogies open doors with executives and the challenge of “good enough” security and how to reframe it.
13 Oct 2025
Episode 04: Why and so what?
In this episode of Communicating Cyber, host Robin Oldham sits down with technology leader Larry Tompkins to unpack the art of making complex cyber risks crystal clear. With over two decades of experience bridging the gap between IT and business, Larry shares how to earn trust, secure buy-in, and adapt your message for audiences from the boardroom to the warehouse floor.
From the “Why, So What, and What Haven’t I Told You” framework to the power of visuals, real-world M&A lessons, and the importance of empathy, this conversation is packed with actionable strategies for any cyber leader looking to connect, persuade, and lead with confidence.
13 Oct 2025
Episode 03: From Basements to Boardrooms
In this episode of Communicating Cyber, we get into what it really takes to make security land with impact and clarity – even when that means sending a phishing email to the executive committee!
Our guest, Nisha Patel, CISO at Ocorian, has spent 20+ years on the front lines of cyber, and she’s here to share how she cuts through noise, wins boardroom buy-in, and builds security cultures that stick. From real-world incidents to bold new approaches, Nisha brings sharp, human insight into leading in high-stakes environments. If you've ever wrestled with getting your message heard, or making people actually care, this one’s for you.
13 Oct 2025
Episode 02: How one crisis turned into 600 burgers
In this episode of Communicating Cyber, we explore what it really takes to lead and communicate cyber during times of intense change, when pressure’s high and stakes are real.Our guest Phil Clayson, acclaimed CTO, turns real-world lessons learnt from the TalkTalk incident into practical insight, drawing on deep experience in the boardroom, in crisis, and everywhere in between. If you’ve ever felt the uphill battle of getting cyber taken seriously, or struggled to cut through the noise when it matters most, this one’s for you.
10 Oct 2025
Episode 01: The Storytelling Playbook
In this kickoff episode of Communicating Cyber, we dive into one of the most overlooked yet powerful tools in the cyber security leader's arsenal: storytelling. Our guest Tim Grieveson, ‘Chief Storytelling Officer’ and Chief Security Officer at ThingsRecon, shares his personal playbook for aligning cyber security communication with business strategy - not by talking tech, but by talking outcomes, risk, and relevance.If you've ever struggled to make cyber security resonate with senior stakeholders, or felt like the “no” department, this episode is your new blueprint.
Contact Communicating Cyber
Guest appearances
Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of Communicating Cyber?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
