ASIAL Security Insider

Cybersecurity professionals spend enormous amounts of time and money building sophisticated systems designed to keep attackers out. But attackers do not always need to defeat the technology. Sometimes, they simply need to convince a person to open the door.

In this episode of the Security Insider Podcast, we speak with professional mentalist and illusionist Andy Nunn about what decades of deliberately deceiving intelligent, attentive audiences can teach us about social engineering, cognitive bias and human vulnerability.
Andy is not a psychologist or a self-proclaimed psychic. His perspective comes from the practical mechanics of illusion: directing attention, exploiting assumptions, creating convincing narratives and watching how quickly people can become certain that their interpretation of events must be correct.

We explore why high intelligence does not necessarily lead to good judgement, why expertise can sometimes create dangerous overconfidence, and how our tendency to look for evidence that confirms what we already believe can make even experienced security professionals vulnerable to manipulation. The conversation also examines the rapidly changing threat landscape created by artificial intelligence.

When attackers can clone voices, generate convincing video, imitate writing styles and manufacture highly credible identities, traditional trust signals such as “I recognised the voice” or “I saw them on video” may no longer be sufficient.

So how do we protect ourselves when seeing is no longer believing?
Andy introduces a simple but powerful question:

“What evidence could prove me wrong?”

It is a question designed to challenge certainty, expose flawed assumptions and force us to distinguish between genuine verification and simply finding evidence that supports what we already want to believe.

We discuss:
Why intelligence and expertise do not make us immune to deception
How confidence can become a security vulnerability
The similarities between stage misdirection and social engineering
How attackers exploit authority, urgency, familiarity and expectation
Why confirmation bias can prevent us from recognising warning signs
How AI-generated voices, video and identities are changing the nature of trust
Why independent verification is becoming increasingly important
How asking “What evidence could prove me wrong?” can interrupt manipulation
Why humility may become a competitive advantage in cybersecurity

The central question of the episode is simple:
What if the greatest vulnerability in social engineering isn’t ignorance — but certainty?

In Part One, we explored the key findings from ASIAL’s landmark Security 2030 report, discussing regulatory reform, procurement challenges, industry visibility and the structural issues that must be addressed if the sector is to meet the demands of the future.

Today, we shift our focus from the challenges to the solutions. Joining me once again are Dr Nicola Lockhart, Deputy Lead of Edith Cowan University’s Security & Intelligence Research Group, and Dr Warren Doudle, Lead of the Research Group and Senior Lecturer in Security Science. Together, they led the research behind the ASIAL-commissioned Security 2030: A Five-Year Future Report on the Australian Private Security Industry—a study examining the trends, risks and opportunities that will shape the industry over the remainder of the decade. 

In this episode, we examine what it will take to professionalise the industry, improve public confidence, build the workforce needed for tomorrow’s challenges, assess the industry’s current level of maturity, and discuss why the next five years could be the most important in the sector’s history.

If you work in security—or rely on security to protect your people, assets or operations—this is a conversation you won’t want to miss.

For more information, visit www.asial.com.au

Australia’s private security industry is entering a period of significant change. New technologies, evolving threats, workforce challenges, regulatory reform and increasing expectations around professionalisation are reshaping what security will look like over the next five years.

In this episode of the Security Insider podcast, we speak with Dr Nicola Lockhart and Dr Warren Doudle from Edith Cowan University’s Security & Intelligence Research Group about the forthcoming Security 2030 report commissioned by ASIAL.

Dr Nicola Lockhart is a Lecturer in Security Science at Edith Cowan University and Deputy Lead of ECU’s Security & Intelligence Research Group. She completed her PhD in Security Risk in 2025, examining how corporate security functions influence organisational decision-making, priorities and outcomes. Her teaching and research span areas including security risk, counterterrorism, surveillance and threat detection. ECU

Dr Warren Doudle is a Senior Lecturer in Security Science at Edith Cowan University and leads ECU’s Security & Intelligence Research Group. He brings extensive experience across defence, government, critical infrastructure, resources and corporate security, with a background encompassing security, investigations, business continuity, information security, governance and risk management. ECU
Together, Nicola and Warren are leading the research behind ASIAL’s Security 2030 project, which is intended to provide practical insights and recommendations capable of informing future policy, standards and industry investment.

We explore the major forces likely to shape the industry through to 2030, what the research is telling us about the challenges and opportunities ahead, and what security professionals, organisations and policymakers should be thinking about today.

The Security 2030 study is designed to establish an evidence base for the future direction of Australia’s private security sector and provide recommendations to help create a more resilient, professional and future-ready industry.

For more information, visit www.asial.com.au

Australia’s critical infrastructure operators are entering a new phase of security and risk management. With enhanced obligations under the Security of Critical Infrastructure (SOCI) Act, rapidly advancing artificial intelligence, and growing supply chain vulnerabilities, organisations must rethink how they identify, manage, and respond to emerging threats.

In this episode of the Security Insider podcast, Dr Maher Magrabi, Director of Security, Cybersecurity & Risk at Lote Consulting Pty Ltd, discusses the changing landscape in “From Compliance to Resilience: SOCI Reforms in an AI-Driven Threat Landscape.”

The conversation explores the purpose of the SOCI Act, what the 2026 Critical Infrastructure Risk Management Program (CIRMP) reforms mean for regulated entities, how AI is transforming both cyber threats and defensive capabilities, and why supply chain resilience has become a critical priority for security leaders.

Whether you’re responsible for security, cybersecurity, risk, governance, compliance, or executive leadership, this episode provides valuable context for understanding Australia’s evolving critical infrastructure obligations and the practical steps organisations should be taking today.

In this episode:
The original purpose of the SOCI Act
What changed under the 2026 CIRMP reforms
How AI is reshaping the threat landscape
Why supply chain risk is becoming a major security challenge
Practical advice for security and risk leaders
A preview of Dr Magrabi’s presentation at the Security Expo and Conference

Listen now for an insightful discussion on moving beyond compliance and building genuine resilience in an increasingly complex threat environment.

To hear Dr Magrabi present live, book tickets for the Security Conference running from September 2-3 at the ICC in Sydney at securityexpo.com.au

Crowded public spaces present a unique security challenge. They must remain safe and resilient while also feeling open, welcoming and accessible.

In this episode, we speak with Lauren Campbell, Security Manager at South Bank Corporation, ahead of her presentation at the Security Expo conference this September.
Lauren discusses the changing role of security in major public precincts, the limitations of traditional guarding models, and the need for a more visible, proactive and coordinated approach. We also explore how security teams can balance public safety with customer experience, strengthen collaboration between agencies and stakeholders, and prepare for the evolving risks facing crowded places.

The conversation offers a preview of Lauren’s upcoming session, Changing of the Guard: Redefining Security in Crowded Places, without revealing the key operational insights and strategies that will be presented at the conference.

To book your place at this year's Security Conference, visit: https://securityexpo.com.au/whats-on/conference/