Advertise on podcast: ASIAL Security Insider

Cybersecurity professionals spend enormous amounts of time and money building sophisticated systems designed to keep attackers out. But attackers do not always need to defeat the technology. Sometimes, they simply need to convince a person to open the door. In this episode of the Security Insider Podcast, we speak with professional mentalist and illusionist Andy Nunn about what decades of deliberately deceiving intelligent, attentive audiences can teach us about social engineering, cognitive bias and human vulnerability. Andy is not a psychologist or a self-proclaimed psychic. His perspective comes from the practical mechanics of illusion: directing attention, exploiting assumptions, creating convincing narratives and watching how quickly people can become certain that their interpretation of events must be correct. We explore why high intelligence does not necessarily lead to good judgement, why expertise can sometimes create dangerous overconfidence, and how our tendency to look for evidence that confirms what we already believe can make even experienced security professionals vulnerable to manipulation. The conversation also examines the rapidly changing threat landscape created by artificial intelligence. When attackers can clone voices, generate convincing video, imitate writing styles and manufacture highly credible identities, traditional trust signals such as “I recognised the voice” or “I saw them on video” may no longer be sufficient. So how do we protect ourselves when seeing is no longer believing? Andy introduces a simple but powerful question: “What evidence could prove me wrong?” It is a question designed to challenge certainty, expose flawed assumptions and force us to distinguish between genuine verification and simply finding evidence that supports what we already want to believe. We discuss: Why intelligence and expertise do not make us immune to deceptionHow confidence can become a security vulnerabilityThe similarities between stage misdirection and social engineeringHow attackers exploit authority, urgency, familiarity and expectationWhy confirmation bias can prevent us from recognising warning signsHow AI-generated voices, video and identities are changing the nature of trustWhy independent verification is becoming increasingly importantHow asking “What evidence could prove me wrong?” can interrupt manipulationWhy humility may become a competitive advantage in cybersecurity The central question of the episode is simple: What if the greatest vulnerability in social engineering isn’t ignorance — but certainty?

In Part One, we explored the key findings from ASIAL’s landmark Security 2030 report, discussing regulatory reform, procurement challenges, industry visibility and the structural issues that must be addressed if the sector is to meet the demands of the future. Today, we shift our focus from the challenges to the solutions. Joining me once again are Dr Nicola Lockhart, Deputy Lead of Edith Cowan University’s Security & Intelligence Research Group, and Dr Warren Doudle, Lead of the Research Group and Senior Lecturer in Security Science. Together, they led the research behind the ASIAL-commissioned Security 2030: A Five-Year Future Report on the Australian Private Security Industry—a study examining the trends, risks and opportunities that will shape the industry over the remainder of the decade.  In this episode, we examine what it will take to professionalise the industry, improve public confidence, build the workforce needed for tomorrow’s challenges, assess the industry’s current level of maturity, and discuss why the next five years could be the most important in the sector’s history. If you work in security—or rely on security to protect your people, assets or operations—this is a conversation you won’t want to miss. For more information, visit www.asial.com.au

Australia’s private security industry is entering a period of significant change. New technologies, evolving threats, workforce challenges, regulatory reform and increasing expectations around professionalisation are reshaping what security will look like over the next five years. In this episode of the Security Insider podcast, we speak with Dr Nicola Lockhart and Dr Warren Doudle from Edith Cowan University’s Security & Intelligence Research Group about the forthcoming Security 2030 report commissioned by ASIAL. Dr Nicola Lockhart is a Lecturer in Security Science at Edith Cowan University and Deputy Lead of ECU’s Security & Intelligence Research Group. She completed her PhD in Security Risk in 2025, examining how corporate security functions influence organisational decision-making, priorities and outcomes. Her teaching and research span areas including security risk, counterterrorism, surveillance and threat detection. ECU Dr Warren Doudle is a Senior Lecturer in Security Science at Edith Cowan University and leads ECU’s Security & Intelligence Research Group. He brings extensive experience across defence, government, critical infrastructure, resources and corporate security, with a background encompassing security, investigations, business continuity, information security, governance and risk management. ECU Together, Nicola and Warren are leading the research behind ASIAL’s Security 2030 project, which is intended to provide practical insights and recommendations capable of informing future policy, standards and industry investment. We explore the major forces likely to shape the industry through to 2030, what the research is telling us about the challenges and opportunities ahead, and what security professionals, organisations and policymakers should be thinking about today. The Security 2030 study is designed to establish an evidence base for the future direction of Australia’s private security sector and provide recommendations to help create a more resilient, professional and future-ready industry. For more information, visit www.asial.com.au

Australia’s critical infrastructure operators are entering a new phase of security and risk management. With enhanced obligations under the Security of Critical Infrastructure (SOCI) Act, rapidly advancing artificial intelligence, and growing supply chain vulnerabilities, organisations must rethink how they identify, manage, and respond to emerging threats. In this episode of the Security Insider podcast, Dr Maher Magrabi, Director of Security, Cybersecurity & Risk at Lote Consulting Pty Ltd, discusses the changing landscape in “From Compliance to Resilience: SOCI Reforms in an AI-Driven Threat Landscape.” The conversation explores the purpose of the SOCI Act, what the 2026 Critical Infrastructure Risk Management Program (CIRMP) reforms mean for regulated entities, how AI is transforming both cyber threats and defensive capabilities, and why supply chain resilience has become a critical priority for security leaders. Whether you’re responsible for security, cybersecurity, risk, governance, compliance, or executive leadership, this episode provides valuable context for understanding Australia’s evolving critical infrastructure obligations and the practical steps organisations should be taking today. In this episode: The original purpose of the SOCI ActWhat changed under the 2026 CIRMP reformsHow AI is reshaping the threat landscapeWhy supply chain risk is becoming a major security challengePractical advice for security and risk leadersA preview of Dr Magrabi’s presentation at the Security Expo and Conference Listen now for an insightful discussion on moving beyond compliance and building genuine resilience in an increasingly complex threat environment. To hear Dr Magrabi present live, book tickets for the Security Conference running from September 2-3 at the ICC in Sydney at securityexpo.com.au

Crowded public spaces present a unique security challenge. They must remain safe and resilient while also feeling open, welcoming and accessible. In this episode, we speak with Lauren Campbell, Security Manager at South Bank Corporation, ahead of her presentation at the Security Expo conference this September. Lauren discusses the changing role of security in major public precincts, the limitations of traditional guarding models, and the need for a more visible, proactive and coordinated approach. We also explore how security teams can balance public safety with customer experience, strengthen collaboration between agencies and stakeholders, and prepare for the evolving risks facing crowded places. The conversation offers a preview of Lauren’s upcoming session, Changing of the Guard: Redefining Security in Crowded Places, without revealing the key operational insights and strategies that will be presented at the conference. To book your place at this year's Security Conference, visit: https://securityexpo.com.au/whats-on/conference/

Facial recognition remains one of the most controversial technologies in Australian security, sitting at the intersection of public safety, privacy, surveillance and corporate responsibility. In this episode, we speak with Alex MacDonald, Director at Vixels and former National Investigations and Security Manager at Bunnings, about the retailer’s use of facial recognition technology and how the issue has evolved since the Office of the Australian Information Commissioner’s ruling. We examine why Bunnings adopted the technology, what it was designed to achieve, where the rollout fell short, and what the subsequent legal and regulatory developments mean for retailers, security professionals and technology providers. The discussion also addresses the key operational questions surrounding facial recognition: when its use may be justified, how consent and notification should be handled, what safeguards are required to reduce false matches and misuse, and whether organisations can balance security outcomes with individual privacy rights. For anyone involved in retail security, loss prevention, surveillance, privacy, compliance or risk management, this episode provides a practical examination of what the Bunnings case means for the future of facial recognition in Australia. For more podcasts, visit www.asial.com.au

In this episode of the Security Insider Podcast, we speak with Alastair MacGibbon, one of Australia’s most experienced cyber security and technology resilience leaders. Alastair has shaped Australian cyber security from almost every angle: as a Federal Agent with the Australian Federal Police, founder of the Australian High Tech Crime Centre, Australia’s inaugural eSafety Commissioner, Special Adviser to the Prime Minister on Cyber Security, National Cyber Security Adviser, and founding executive at CyberCX. Ahead of his September conference presentation, Alastair joins us to discuss how AI is changing the threat environment, why the traditional separation between cyber, physical and insider risk is breaking down, and what physical security managers need to understand now to protect their people, facilities, information and operations. This conversation is designed to give security leaders practical ways to think about converged risk, without pre-empting the full detail of Alastair’s upcoming presentation.

The US–Iran conflict is a sharp reminder that supply-chain security is no longer just a logistics or procurement issue. For Australian organisations, geopolitical instability can quickly become a business continuity, security, insurance, transport and critical infrastructure problem. In this episode of Security Insider, we speak with Andrew Harris from Ironbark Strategic and Bilal Ali Khan from Spinnaker Infrastructure about what senior security managers in Australia should be doing now to understand and reduce their exposure to supply-chain disruption. The discussion explores the impact of conflict on maritime routes, energy costs, freight movement, insurance, critical suppliers, ports, warehousing, contractor risk and organisational resilience. We also examine the secondary risks that often emerge during disruption, including cargo theft, fraud, counterfeit goods, grey-market sourcing, insider threat and organised-crime activity. Most importantly, this episode focuses on practical action: how security leaders can map supply-chain dependencies, identify single points of failure, monitor escalation indicators, brief executives, strengthen crisis plans and build a more resilient supply-chain security capability for future geopolitical shocks. For senior security, risk, resilience, procurement and infrastructure leaders, this is a timely conversation about how to move from reactive crisis management to deliberate supply-chain preparedness. For more episodes, visit www.asial.com.au/news

In this episode of Security Insider, host John Bigelow speaks with Tony Jaques, Director of Issue Outcomes, about crisis communications for security leaders. With cyber incidents, misinformation, deepfakes, regulatory pressure, and geopolitical instability all reshaping the risk landscape, this conversation explores how leaders should communicate during high-pressure events, what mistakes to avoid, and how to build trust when facts are still emerging. A practical episode for CISOs, CSOs, resilience leaders, and executives responsible for security and reputation.   For more information, visit www.asial.com.au

What does the conflict between the US and Iran mean for Australia’s security environment, and what should Australian organisations be doing now to prepare? In this episode of the Security Insider podcast, we discuss the real-world implications of escalating conflict in the Middle East for Australian businesses, critical infrastructure, and security leaders. We examine how this crisis could affect fuel and freight, cyber risk, supply chains, domestic threat conditions, and the broader security posture of Australian organisations. This conversation is especially relevant for security managers in large organisations, security company owners, and systems integrators who need to understand not just the geopolitics, but the practical consequences for people, assets, continuity, and risk planning. Our guest for this episode is is Major General Mick Ryan AM, one of Australia’s most respected military thinkers and commentators on strategy, war, and national security. Mick served for 35 years in the Australian Army and is now a Senior Fellow for Military Studies in the Lowy Institute’s International Security Program. He is widely known for his analysis of modern warfare, military adaptation, and the strategic implications of global conflict for Australia and its allies. For more episodes, visit www.asial.com.au

In this episode of Security Insider, we examine the growing threat of insider risk and the rising importance of counterespionage in the corporate environment. Our guests for this episode are Lou Bladel, Uber’s Director of Insider Threat and former FBI Special Agent in Charge of Counterintelligence in New York, alongside Julian Claxton of Jayde Consulting and Brenton Steenkamp, Partner at Clayton Utz. Together, we discuss how trusted insiders become high-impact risks, why behaviour matters as much as technology, and what organisations must do to better protect people, data, and critical assets.

Incidents like the Bondi and Westfield attacks demonstrate that extreme violence can happen anytime, anywhere, without warning. And in most cases, security personnel will be the first to respond. In this episode of the Security Insider podcast, we speak with Tony Blauer—CEO of Blauer Tactical Systems and founder of the SPEAR System—about “amygdala hijack”: the survival-driven takeover that can bypass cognition and degrade complex performance in fractions of a second. We unpack the startle–flinch response, why “technical” training often doesn’t transfer to real incidents, and how scenario-based training can be engineered to shorten reaction time and improve decision-making under extreme stress.  If you run a security business and want training that holds up when it matters—this is the blueprint. For more podcasts like this one visit www.asial.com.au

In a world where the threat environment is volatile, and tensions are high, security teams are under more pressure than ever—facing verbal aggression, physical incidents, and the constant need to stay vigilant. But mental strain doesn’t always announce itself until performance drops, conflict escalates, or someone quietly burns out. In this, the second part of our exploration of mental health in security, we continue our discussion with Simon Brown-Greaves about how security companies can protect the mental health of their staff without sacrificing operational capability. In the last episode, we covered the biggest mental-health stressors impacting security professionals right now, as well as early indicators of burnout, cumulative stress injury, and trauma exposure. In this episode, you’ll learn: A practical post-incident support approach (what to do—and what to avoid)Training priorities for guards, supervisors, and leadershipHow to build a culture where support is used early, not after crisis If you lead security teams—or you work the front line—this conversation will give you practical steps you can apply immediately. Subscribe for more conversations on security leadership, operational capability, and resilience in high-risk environments.

In a world where the threat environment is volatile and tensions are high, security teams are absorbing more pressure than ever—verbal aggression, physical incidents, and the constant need to stay vigilant. But mental strain doesn’t always announce itself until performance drops, conflict escalates, or someone quietly burns out. In this episode, we speak with Simon Brown-Greaves about how security companies can protect the mental health of their staff without sacrificing operational capability. We cover the warning signs leaders often miss, what to do after critical incidents, how rosters and fatigue drive psychological risk, and what a real mental-health framework looks like on the ground—not just in policy documents. In this episode, you’ll learn: The biggest mental-health stressors impacting security professionals right nowEarly indicators of burnout, cumulative stress injury, and trauma exposureA practical post-incident support approach (what to do—and what to avoid) If you lead security teams—or you work the front line—this conversation will give you practical steps you can apply immediately. Subscribe for more conversations on security leadership, operational capability, and resilience in high-risk environments. visit www.asial.com.au

Drones and robotics are moving from niche capability to mainstream security tools—and at the same time, they’re creating entirely new attack paths for adversaries. In this episode of the ASIAL Security Insider Podcast, we speak with Deborah Evans (Edith Cowan University) about where unmanned systems and robotics are heading, what’s already in use across security and law enforcement, and what the industry must do to prepare.  We discuss current developments in UAVs and other Unmanned Systems (UxS) and robotics, the pace-setting influence of China and the United States, and how modern conflict—especially Ukraine/Russia—is driving rapid innovation, adaptability, and proliferation. From a practical security operations lens, we explore what’s likely to be adopted next: more persistent surveillance and patrol, disaster response, and environmental monitoring, enabled by higher-level data analytics and increasingly autonomous systems. We also look further ahead at emerging capabilities such as micro and nano systems, swarming, and the evolution of Counter-UAS (C-UAS)—including detection methods and the trade-offs between kinetic, non-kinetic, and hybrid defeat approaches. Finally, we address the issues that will shape real-world adoption: preparedness, regulation, social and national security concerns, and why the security industry must lead proactively, accept measured crossover from military development, and invest intelligently in C-UAS readiness. Key topics covered UAV/UxS and robotics: what’s real right nowSecurity use cases: surveillance, patrol, SAR, law enforcement supportHow drones are being used to defeat security and policingWhat’s next: autonomy + analytics + scaleSwarms, micro/nano systems, and autonomous weapons implicationsC-UAS: detection, kinetic vs non-kinetic vs combined approachesRegulation, adoption barriers, and what security should do now