Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cybersecurity risk management starts with understanding the risk you are trying to address rather than blindly following a checklist. A risk mindset helps security professionals step beyond policies and procedures and focus on what matters when decisions need to be made.

Will AI replace cybersecurity jobs? AI already helps with repetitive work such as analysing logs and producing documentation, but information security still relies on judgement, strategic thinking and understanding risk.

AI governance is becoming a regulatory race as standards bodies compete to define how organisations manage AI and AI agents. Growing compliance requirements risk creating duplicated frameworks, more noise and a commercial battle over which standard becomes dominant.

Cybersecurity communication skills matter when you need people across an organisation to engage with security rather than avoid it. Trust, empathy and translating risk help security teams become useful advisers instead of people who arrive quoting policies and saying no.

Cybersecurity vendors are struggling to get the attention of CISOs, and having a good product isn't necessarily enough. In this Razorwire Raw, James Rees looks at why traditional cybersecurity sales and marketing tactics are increasingly ineffective, particularly for newer vendors building products for AI security, and what vendors need to understand about the people they're trying to reach.

Cybersecurity for beginners does not require you to arrive with years of technical experience. Feeling like an outsider, learning unfamiliar terminology and building knowledge as you go are all part of developing the skills needed to work in information security.

What does it actually look like to break into InfoSec from the outside, with no technical background, no industry contacts and no idea what half the acronyms mean? Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I'm Jim and in this interview episode, I'm joined by Irina Sordiya, a GRC and compliance professional based in Montreal who came into information security from a finance background.

GRC cybersecurity careers rely on far more than knowing policies, frameworks and technical terminology. Risk thinking, communication, trust and the ability to work with different stakeholders sit at the centre of a career spanning security auditing, compliance and AI governance.