28 Sept 2026 · 53 min
Most Security Problems Are Really Access Control Problems
Thomas Owen, CISO at SoSafe
Thomas Owen explains why he sees almost all security failures as access control failures rooted in human identity, and how measurable, causal testing can actually shift intrinsic staff behaviour rather than just producing a click rate on a dashboard. He also sets out where AI has changed the economics of phishing and deepfakes, and where he draws the line between protecting staff and quietly surveilling them.
Episode notes
_1778603447189-DGEkYDPq.png)







