Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Security teams weigh strong controls against the need to keep people working productively, often holding on to rigid ways of doing things even when better options exist. A real world example from the automotive industry shows passkeys and FIDO based passwordless authentication personalising in car systems while keeping digital identity and access control secure.

Move beyond OTP. Plan enrolment, recovery, and cross platform sign in so passwordless lands fast across your fleet without derailing delivery.

Match access checks to context. Lower friction for trusted sessions, raise checks for anomalies and improve both security and user experience.

Identity is now a frontline control. Align MFA, governance, and zero trust so daily operations resist account takeover and policy drift.

Is passwordless authentication finally ready for prime time, or are we just replacing one set of problems with another? Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I’m Jim and in this episode, we’re tackling one of the oldest challenges in information security: identity and access management.

Our latest discussion tackles persistent challenges in cybersecurity, specifically focusing on identity and access management (IAM). Experts highlight how attackers are now logging in rather than breaking in, underscoring the critical need for robust password encryption policies. This shift puts a spotlight on effective data protection and online security measures to safeguard against evolving threats.

Rely on insurance after a breach and renewal terms spiral; align effective controls with cover to keep risk and premiums under control.

Keep cyber insurance documents encrypted and offline so extortion demands are not set to your limits.

Targeted invoice fraud and supplier compromise wipe out small firms; strong MFA, email hygiene and verification steps stop the loss.

Set security principles early so changes take days, not months, as headcount grows and avoid retrofitting broken processes at scale.

Cyber Essentials and baseline controls feel inconvenient, yet they cut breach likelihood, reduce claims and pressure premiums in the right direction.

Understand why attackers focus on easy wins and how SMEs can reduce their exposure and move themselves down the target list.

Explore how MDR/MSP support, insurer incident response, PR, legal costs and ICO fines connect, and why SMEs need both controls and cover.

This is why SMEs should align Cyber Essentials controls with cyber insurance to reduce risk, meet insurer expectations and avoid false trade-offs.

Learn how the five Cyber Essentials controls help SMEs reduce common attack paths, harden access, and keep stolen passwords away from core systems.

How can small and medium businesses protect themselves from cyber threats without spending a fortune or just ticking boxes for compliance? Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I’m Jim and in this episode, we’re taking a look into the challenges faced by SMEs on the journey through cybersecurity compliance and insurance.

SMEs face tight budgets and rising threats, so align Cyber Essentials controls with cyber insurance to secure systems and avoid false economies.

Cybercriminals now run trillion-dollar economies, reinvesting profits into AI tools while security budgets struggle to keep pace.

Current AI is underpowered and misused, but the danger lies in releasing ‘dumb’ but fast bots before creative attackers or smart defences arrive.

Nation states invest in AI autonomy for cyber sabotage and warfare, and most attacks likely run in the shadows before detection.

History shows that tech leaps, like AI, outpace our controls as businesses and nations race forward, risking disaster by embracing scale before security.

Digital playgrounds now see AI posing as kids, hiding malicious code in downloads and breaching both business and family boundaries.

AI-powered online scams - using convincing video and emotional manipulation - catch even savvy users, showing the reach of social engineering.

AI-generated CVs and fake interview personas are making it impossible to distinguish genuine candidates from frauds - testing security and HR alike.

AI-driven phishing now has over double the success rate, using translation, text, and media generation to bypass static defence strategies.