People-Centric Security & Nudge Theory - Episode 58 - Tim Ward, Redflags
The Cyber Security Matters PodcastShow Notes
In Episode 58 of the Cybersecurity Matters podcast, we sit down with Tim Ward, Co-Founder and CEO of Redflags, to explore how behavioural science is transforming cybersecurity. With nearly 30 years of experience in corporate IT and cybersecurity consulting, Tim shares why traditional security awareness training often fails and how real-time contextual nudges can create lasting behaviour change.
We discuss the limitations of phishing simulations, the importance of measuring actual behaviour change rather than training completion, and how data-driven insights can identify the 10% of users causing 80% of risk. Tim explains practical behavioural models like EAST and Mindspace that security teams can implement immediately, and why the industry is shifting from security awareness to human risk management.
Whether you're a CISO, security leader, or cybersecurity professional looking to reduce human risk more effectively, this episode offers actionable insights on applying psychology to security challenges.
Key Topics Covered: • Why phishing simulations don't create lasting behaviour change • Applying nudge theory and behavioural science to cybersecurity • Real-time contextual interventions vs traditional training • Measuring behaviour change and demonstrating ROI • Using data analytics to identify risk outliers • Managing AI risks and LLM usage • Critical security decision points to focus on • Building security teams and startup culture • Career advice for cybersecurity professionals
Chapters: 00:00 Introduction and Guest Welcome 01:01 Journey into Cybersecurity 02:10 Entrepreneurial Influences and Early Ventures 04:37 Challenges and Growth in Entrepreneurship 09:18 Recruitment and Company Culture 17:29 Cybersecurity Awareness and Industry Insights 25:40 Future of Human-Centric Security 32:27 Advice for Aspiring Cybersecurity Professionals
About Tim Ward: Tim Ward is the Co-Founder and CEO of Redflags (previously Think Cyber), a company that applies behavioural science to reduce operational risk in cybersecurity. With nearly 30 years of experience, Tim has worked in corporate IT and cybersecurity consulting, including serving as Global Head of Information Systems for BAE Systems. He studied Computer Science and AI at university and completed an MBA, with a particular interest in motivation and behavioural psychology. Tim is passionate about understanding what makes people tick and how to apply that knowledge to make security more effective.
RedFlags - https://redflags.io/
The Cybersecurity Matters Podcast is brought to you by neuco, a global recruitment agency that specialises in sourcing brilliant people for groundbreaking companies. https://www.neuco-group.com/
More from The Cyber Security Matters Podcast
In this episode of the Cyber Security Matters podcast, hosts Tom Wilding and Matt Rose are joined by Geoffrey Mattson, CEO, and Mark van Oppen, Chief Revenue Officer at SecureAuth, to explore how the rise of AI agents is changing cybersecurity and why identity is becoming increasingly important in controlling what those agents can do.
In this episode of Cyber Security Matters, hosts Harry Baldwin and Matt Rose speak with Yuval Itzchakov, Co-Founder and CTO of A Security, about how artificial intelligence is reshaping cyber security. Yuval explains how AI is increasing the speed and scale of cyber attacks, why security teams need to look beyond individual vulnerabilities, and how exploitable attack paths and attacker kill chains are changing the future of cyber defence.
In this episode of Cyber Security Matters, hosts Harry Baldwin and Matt Rose are joined by Quincy Castro, Chief Information Security Officer at Chainguard.
In this episode of Cyber Security Matters, hosts Harry Baldwin and Matt Rose are joined by Alfredo Hickman, Chief Information Security Officer at Kai.
In this episode of Cyber Security Matters, hosts Harry Baldwin and Matt Rose are joined by Gal Ordo, Co-founder and Chief Product Officer at Native. Gal shares his journey from studying mathematics and developing early expertise in cybersecurity to leading product at AWS Security Hub and later founding Native.