In this extended final episode of our Cyber Resilience series, Aron Robertson answers real questions from business owners just like you. From AI-powered deepfakes to managing employee mobile devices, from understanding the Notifiable Data Breach scheme to the uncomfortable truth about email security, this Q&A session covers the practical concerns and tough questions that keep business owners up at night. Aron provides honest, detailed answers that cut through the confusion and give you clear next steps.
Questions answered in this episode:
- AI and emerging threats: How is AI making attacks more sophisticated? (Voice impersonation, deepfakes, and what’s coming in 2026)
- Device management: Should we require phones and tablets to be managed corporate devices? (Risk assessment framework)
- Notifiable Data Breach scheme explained: What triggers a reportable breach? Who do you notify? What is the “harm” test?
- ISO 27001 certification: Will it soon be required for professional services firms? (Spoiler: It’s already happening in government tenders)
- The first action to take tomorrow: What’s the single most important step to strengthen your defences?
- Email security reality check: How unsecure is email really? Should you avoid sending personal data via email?
- Supply chain risk: Why your client’s poor security becomes your problem
- Building a safety culture: How to create an environment where employees report suspicious activity without fear
- Token theft attacks: The emerging threat that bypasses MFA
- Ransomware evolution: New “double extortion” tactics—stealing data before encrypting it
- Social engineering in the AI era: Why verbal confirmation isn’t foolproof anymore
Key Takeaway:
The human element—building a culture where your team understands their value to attackers and feels safe reporting concerns—is your most powerful defense, even as technology evolves.
