Most security training dies quietly, months after somebody ticked the box that said it worked.

In episode three of The Cybersecurity CEO Podcast, I speak with Martin Smith, MBE, founder of SASIG and the man who wrote the British military's first computer security training back in 1981. He was handed the chapter to fill and found a single line waiting for him on the page: this page left intentionally blank. He has spent four decades filling it.

Martin is best known for building one of the largest security communities in the UK and for arguing that the human layer is where the risk actually sits.

We discuss why the bulk of the budget guards technology while the bulk of breaches walk in through people, why boards hear the cyber message and still fail to act, and why Martin puts that squarely on the profession rather than the boardroom.

If you lead a business or sit on a board, this one's for you.

About the guest:
Martin Smith MBE is the founder of The SASIG, the Security Awareness Special Interest Group, and has spent more than forty years working on the human side of security. Find him here on LinkedIn and at https://www.thesasig.com/.

About the host:
I am the Co-Founder and Chairman of Safe Harbour Security and the founder of MetaCompliance. I have spent over 20 years helping private and public sector organisations build cyber resilience, and I write under the banner The Cybersecurity CEO. My forthcoming book, Cyber First: Security Above All, is due for release in January 2027.

Join me here:

• Follow on LinkedIn - https://www.linkedin.com/in/thecyberceo/

• Subscribe on Youtube here - https://www.youtube.com/@TheCyberCEO

New episodes of The Cybersecurity CEO Podcast are released monthly. Subscribe to make sure you don't miss the next conversation.