Security Tech Talk

In this episode of Security Tech Talk, host Steve Kenny is joined by Shane Garner, Head of Security and ICT at Pure Data Centre Group. Together, they take a deep dive into one of the world's fastest-growing technology sectors: data centres. From their growing role as critical infrastructure across Europe to the rapid expansion underway across the UAE and Saudi Arabia, Steve and Shane explore what's driving the data centre boom—and what it means for security.Drawing on a career that began "sitting on a roll of cable" as a systems integrator, Shane shares how his hands-on engineering experience has shaped his approach to security, ICT, cyber security, and operational technology (OT). Along the way, Steve and Shane explore the shift from traditional cloud infrastructure to AI-driven data centres, the growing demands on power, liquid cooling, structural design, and fibre infrastructure, and why resilience, efficiency, and security are becoming increasingly important as data centres evolve.About Our Guest:Shane Garner is Head of Security and ICT at Pure Data Centre Group. With a hands-on background spanning systems integration, engineering, and design, Shane now oversees a broad range of systems across data centre design and build, including security, ICT, cyber security, OT networks, building management systems (BMS), power management systems (PMS), and extra-low voltage (ELV) infrastructure.Chapters:(0:00:16) – Introduction & The GCC Data Centre ExpansionSteve and Shane open the episode discussing the global surge in data centre construction, its classification as Critical National Infrastructure (CNI), and the massive expansion currently taking place across the UAE and Saudi Arabia.(0:01:45) – From "Sitting on a Roll of Cable" to Head of Security & ICTShane reflects on his journey from configuring servers and working in communications rooms to overseeing security and ICT, and why understanding technology at a granular level remains invaluable when designing complex data centre environments.(0:04:12) – The Convergence of IT, OT, and Cyber SecurityA look at the thousands of Ethernet-connected controllers across cooling plant rooms, generators, and power management systems. Shane emphasizes the importance of collaborating with operations teams early to safeguard critical OT networks.(0:08:32) – Defence in Depth & Zero Trust and AIShane explains why modern physical security relies on layered perimeter controls, air-gapped zero-trust networks, active directory authentication (802.1x), and AI analytics to highlight alarms by exception rather than overwhelming control room operators.(0:10:47) – Audits, Threat Detection, and Wireless RisksHow data centre operators navigate stringent tenant cyber security audits. Shane discusses the strict prohibition of wireless protocols (like Bluetooth or Wi-Fi) on critical plant equipment to protect against airborne drone threats and signal interception.(0:16:29) – Breaking Down Closed ProtocolsAddressing the challenge of proprietary, closed protocols in access control and surveillance. Shane highlights the necessity of open protocols (BACnet, Modbus, open APIs) to integrate tailgating detection and anti-passback systems cleanly.(0:21:27) – The Shift to AI: Power, Liquid Cooling, and Structural LoadsHow the industry is adapting as rack densities jump from 20kW to over 120kW. Shane details the architectural, electrical, and mechanical shifts required to implement liquid-to-chip cooling and high-density fibre infrastructure for AI workloads.(0:32:15) – Hyperscaler Audits and Supply Chain Due DiligenceSteve and Shane discuss how major global technology tenants evaluate vendors, conducting deep-level physical and cyber audits down to the clear-desk policies and hardware component origin.(0:35:44) – Digital Twins, NDAA Compliance, and Future RegulationA look ahead at the future of data centre design. Shane explains how digital twins will allow operators to stress-test environmental conditions and network telemetry in non-live environments, alongside the rising complexity of chipset-level NDAA compliance.Resources:Learn more about global data centre infrastructure at Pure Data Centre Group.Explore cyber security frameworks for critical infrastructure via NIST Guidelines and ISO/IEC 27001.Read about hardware and physical security compliance standards under the National Defense Authorization Act (NDAA).Integrated security solutions for data centers : Smart Data Center Solutions, Intelligent Video & Analytics | Axis Communications] | Axis Communicati…Securing critical infrastructure: https://www.axis.com/solutions/critical-infrastructureNavigating cybersecurity and supply chain transparency: Cybersecurity | Axis CommunicationsMeet your host Steve Kenny:Steve has spent 15 years in the security sector undertaking various roles that have seen him take responsibility for key elements of mission critical, high profile projects across a number of different vertical markets. For the last several years, Steve has focused his attention on how technologies can best compliment day to day operations and specifically address operational issues by supporting the A&E consultant community across EMEA. Steve is a committee member for ASIS International focusing on Education for the security sector and the UK technology advisor for TINYg (Terrorist Information New York group).Connect with Steve on LinkedInMore about Axis Communications: Axis enables a smarter and safer world by improving security, safety, operational efficiency, and business intelligence. As a network technology company and industry leader, Axis offers video surveillance, access control, intercoms, and audio solutions. These are enhanced by intelligent analytics applications and supported by high-quality training.Axis has around 5,000 dedicated employees in over 50 countries and collaborates with technology and system integration partners worldwide to deliver customer solutions. Axis was founded in 1984, and the headquarters are in Lund, Sweden.Find out more about Axis Communications - Innovating for a smarter, safer worldhttps://www.axis.com/

In this episode of Security Tech Talk, host Steve Kenny sits down with Eddie Reyes, a US law enforcement veteran whose career spans frontline policing, emergency communications, and public safety technology. Describing Eddie as a rare "security unicorn," Steve highlights his unique ability to combine decades of operational experience with a genuine passion for emerging security technologies. Together, they explore how AI, cloud connectivity, drones, and intelligent video are reshaping command centres—and why experience on the ground remains essential for making technology truly effective. Drawing on more than three decades of experience - from carrying six-shot revolvers and shoulder-mounted VHS cameras in 1980s Washington, D.C., t to directing a 120-person 911 emergency communications centre and managing security for luxury megaprojects in the Middle East—Eddie reflects on how public safety technology has evolved. Along the way, Steve and Eddie explore why cameras should now be viewed as intelligent "super sensors" and discuss AI-powered analytics, live video dispatch, drones as first responders, and why human-in-the-loop AI is essential for saving lives, reducing administrative burden, and helping security professionals make better-informed decisions. About Our Guest: Eddie Reyes is a decorated US law enforcement veteran with 28 years of frontline policing experience and four years as Director of a 120-person 911 emergency communications centre outside Washington, D.C. Eddie has spent the latter part of his career advising municipalities, public safety organisations, and high-profile private sector developments across the UAE on public safety technology, command centre operations, and emergency communications. Chapters: (0:00:38) – The Security "Unicorn": Where Experience Meets Technology Steve introduces the episode by discussing the industry divide between operational practitioners (law enforcement/military backgrounds) and technical engineers, identifying Eddie as an expert who bridges both worlds. (0:02:51) – From Revolvers to Shoulder-Mounted VHS Cameras Eddie shares how he accidentally fell in love with public safety technology in 1989, testing early tire-deflation pursuit systems and carrying heavy VHS video cameras in his patrol car. (0:05:01) – Transitioning to Command & Control: The 911 Dispatch Experience Eddie details his shift from field patrol officer to managing a major 911 communications centre, highlighting how real-time data feeds empower dispatchers to act as vital crime-fighters for officers in the field. (0:06:43) – Cameras as "Super Sensors" Why modern cameras are no longer mere "CCTV." Eddie explains how combining AI-driven visual analytics, environmental sensing, and two-way radio communication creates an indispensable operational asset. (0:09:02) – Beyond Security: Lost Children and Megaprojects Steve and Eddie discuss how surveillance sensors deliver daily operational value beyond crime prevention—ranging from locating lost children in busy resorts to managing emergency response at pools. (0:13:02) – Overcoming False Positives with 5G, Cloud, and AI How information overload and false alarms erode operator trust. Eddie and Steve review how cloud routing, 5G wireless transmission, and AI processing have restored confidence in control room analytics. (0:19:43) – Live Video Dispatch and Real-Time Bodycam Translation Eddie shares ground-breaking public safety developments in the US, including live video caller streaming to 911 centres and AI body-worn camera language translation in the field. (0:23:59) – Drones as First Responders (DFR) Using autonomous drones for building inspections, remote maintenance, and rapid first-responder deployment to beat patrol cars to emergency scenes. (0:26:30) – AI Documentation & Human-in-the-Loop Validation Eddie explains how AI can automatically generate comprehensive incident timeline reports, saving hours of manual paperwork while keeping humans in the loop for critical decision-making. (0:32:51) – Retention, Complacency, and the 3-Year Technology Refresh Addressing operator fatigue in 12-hour shifts, overcoming technology complacency, and why organisations must evaluate their security hardware lifecycle every three years to mitigate cybersecurity risks. Resources: Learn more about public safety technology and emergency communications at APCO International. Explore guidelines on the Drone as a First Responder (DFR) operational framework. Read about cloud connectivity and edge analytics at Axis Communications. Understand the shift from basic documentation to real-time, actionable insights provided by today’s body worn solutions. Meet your host Steve Kenny: Steve has spent 15 years in the security sector undertaking various roles that have seen him take responsibility for key elements of mission critical, high-profile projects across a number of different vertical markets. For the last several years, Steve has focused his attention on how technologies can best compliment day to day operations and specifically address operational issues by supporting the A&E consultant community across EMEA. Steve is a committee member for ASIS International focusing on Education for the security sector and the UK technology advisor for TINYg (Terrorist Information New York group). Connect with Steve on LinkedIn More about Axis Communications: Axis enables a smarter and safer world by improving security, safety, operational efficiency, and business intelligence. As a network technology company and industry leader, Axis offers video surveillance, access control, intercoms, and audio solutions. These are enhanced by intelligent analytics applications and supported by high-quality training. Axis has around 5,000 dedicated employees in over 50 countries and collaborates with technology and system integration partners worldwide to deliver customer solutions. Axis was founded in 1984, and the headquarters are in Lund, Sweden. Find out more about Axis Communications - Innovating for a smarter, safer world https://www.axis.com/

In this live episode of Security Tech Talk, host Steve Kenny sits down with an expert panel of former law enforcement, military, and corporate security leaders to unpack the impending Terrorism Protection of Premises Act - widely known as Martyn’s Law or the UK Protect Duty.Together, the panel cuts through the industry myths and high-pressure sales tactics to offer a practical, common-sense reality check. They explore why compliance is about driving safe outcomes rather than just buying new hardware, how large-scale franchises are already preparing, and why the "people side" of security - training, confidence, and culture - is the most critical element of any protective strategy.About Our Guests:Tim Molden: Board Director for ACES and Head of Security and Licensing for Capital Archers (the UK's largest McDonald's franchise). Tim brings the practical perspective of an organization responsible for protecting thousands of premises and millions of daily customers.Rachel Webb: Director of Security and Strategy for Mitie, and a former Intelligence Corps officer in the British Army. Rachel specializes in risk management and strategic organizational security.John Campbell: Founder of Campbell Sutherland Crisis Leadership and former Chief Constable of Thames Valley Police. John previously served as the National Police Lead for Protection and Prepare as part of the UK’s counter-terrorism Contest Strategy.Chapters:(0:00:00) – Introduction & Reality Checking Martyn’s LawSteve introduces the panel and kicks off an honest discussion on cutting through the misconceptions surrounding the Terrorism Protection of Premises Act. The panel emphasizes that the Act is fundamentally about good risk management and evolving existing security practices.(0:03:21) – Debunking the Technology & Compliance MythsJohn and Rachel demystify the compliance landscape, reminding listeners that there is no such thing as "certified compliant equipment." They discuss the lessons learned from the Manchester Arena attack, highlighting why failures usually occur in human response and training, not a lack of hardware.(0:05:21) – The Franchise Perspective: Standard Tier PreparationTim explains why Capital Archers is choosing to implement standard-tier compliance across all of their units early, regardless of size. He touches upon the logistical realities of managing a transient workforce and the benefits of standardized security awareness.(0:12:45) – Grey Spaces and Public-Private PartnershipsThe panel tackles the challenge of "grey spaces" - the public areas right outside a business's front door. They discuss how businesses, local councils, and police must collaborate to protect busy high streets and commercial districts.(0:15:20) – Regulator Readiness & The True Cost of TrainingA look ahead at the SIA (Security Industry Authority) public consultations. Tim and Rachel debate the commercial realities and hidden costs of mandatory staff training, emphasizing that any security tool is only as good as the human operating it.(0:26:30) – Next Steps and Strategic RecommendationsThe panel shares their final top tips for businesses over the next two years: identify a Senior Responsible Officer (SRO) today, complete honest gap analyses, utilize official government resources, and focus on creating safe environments rather than ticking regulatory boxes.Resources:Visit the official ProtectUK Website for official tools, guidance, and legislation updates.Download the official Home Office Martin’s Law Myth Buster two-pager.Meet your host Steve Kenny:Steve has spent 15 years in the security sector undertaking various roles that have seen him take responsibility for key elements of mission critical, high profile projects across a number of different vertical markets. For the last several years, Steve has focused his attention on how technologies can best compliment day to day operations and specifically address operational issues by supporting the A&E consultant community across EMEA. Steve is a committee member for ASIS International focusing on Education for the security sector and the UK technology advisor for TINYg (Terrorist Information New York group).Connect with Steve on LinkedInMore about Axis Communications: Axis enables a smarter and safer world by improving security, safety, operational efficiency, and business intelligence. As a network technology company and industry leader, Axis offers video surveillance, access control, intercoms, and audio solutions. These are enhanced by intelligent analytics applications and supported by high-quality training.Axis has around 5,000 dedicated employees in over 50 countries and collaborates with technology and system integration partners worldwide to deliver customer solutions. Axis was founded in 1984, and the headquarters are in Lund, Sweden.Find out more about Axis Communications - Innovating for a smarter, safer worldhttps://www.axis.com/

In this episode of Security Tech Talk, host Steve Kenny sits down with Mike Petty, Managing Director for EMEA and APAC at Thermal Radar and the current Chair of the ASIS Foundation. Steve and Mike take a look behind the scenes of one of the industry's most impactful charitable organizations, exploring how it helps security professionals worldwide advance their careers. The conversation covers the vital importance of professional development, the prestige of certifications like the CPP and PSP, and how the "Foundation Five" corporate sponsorship model (championed by organizations like Axis Communications) directly funds life-changing scholarships. About Our Guest: Mike Petty: Managing Director for EMEA and APAC at Thermal Radar Imaging, LLC, and Chairman of the ASIS Foundation Board of Trustees. A dedicated industry volunteer since 1996, Mike has climbed the ranks from local chapter leadership to regional management, succeeding Martin Gill as the global head of the ASIS Foundation. Chapters: (0:00:30) – Introduction & The Lifelong Volunteer Journey Steve and Mike open the episode with some light-hearted banter before diving into Mike’s 30-year journey as an industry volunteer. Mike details his progression from local chapter leadership in the United States to his current role leading the global ASIS Foundation. (0:02:43) – What is the ASIS Foundation? Mike outlines the core mission of the Foundation as a charitable entity designed to support the 35,000 members of ASIS International. He explains how corporate sponsorships fund certification grants for those who are changing careers or navigating financial hardship. (0:05:09) – Academic Research and Defining "Security Culture" A preview of the Foundation's upcoming PhD-level research paper focused on security culture. Mike describes the difference between an organisation's corporate culture and an industry identity, challenging technical engineers and guarding forces to see themselves truly as "security professionals" rather than just camera technicians or guards. (0:10:23) – Fair Access: Scholarships for Emerging Markets and Veterans Mike details the formalised annual application process for grants. The Foundation targets specific funding toward law enforcement and military veterans transitioning into corporate security, alongside professionals operating within economically developing markets. (0:12:22) – The Summer Fitness Challenge: Global Camaraderie A look at the annual June-to-August Fitness Challenge. Steve and Mike discuss the healthy (and highly competitive) rivalry between the UK, New York, and Mexico City chapters as they track steps and distance to raise thousands of pounds for the charity. (0:14:57) – Optimism Bias, Apathy, and Managing Executive Stress Steve shares his research into workplace stress and executive apathy. Because security directors are explicitly paid to worry about worst-case scenarios, Mike explains how physical exercise acts as a crucial safety valve to alleviate the intense day-to-day pressure of risk accountability. (0:17:10) – The "Mothership" and Local Chapter Engagement How the Foundation operates independently but remains aligned with the global ASIS board. Steve shares his 12 years of experience with the UK Chapter, emphasizing how continuous professional education (CPE) requirements ensure that professionals never stand still after gaining their qualifications. (0:21:36) – The Global "Black Book" of Connections Steve and Mike celebrate the unique, tight-knit network of global security professionals. They swap stories about international travel, the protective mindset inherent in security peers, and why you will never have to dine alone when visiting a chapter colleague anywhere in the world. (0:25:41) – The "Foundation Five" and the ROI of Doing Good Mike talks about the brand-new "Foundation Five" diamond-level corporate sponsorship model. Steve explains Axis Communications' perspective on corporate social responsibility, illustrating why investing in the next generation of security leaders doesn't always need a direct monetary return on investment. Resources: Learn more about grants, scholarships, and research at the official ASIS Foundation Website. Sign up, donate, or track the leaderboard for the ongoing ASIS Fitness Challenge. Explore global professional certifications including the CPP, PSP, PCI, and APP via ASIS International. Meet your host Steve Kenny: Steve has spent 15 years in the security sector undertaking various roles that have seen him take responsibility for key elements of mission critical, high profile projects across a number of different vertical markets. For the last several years, Steve has focused his attention on how technologies can best compliment day to day operations and specifically address operational issues by supporting the A&E consultant community across EMEA. Steve is a committee member for ASIS International focusing on Education for the security sector and the UK technology advisor for TINYg (Terrorist Information New York group). Connect with Steve on LinkedIn More about Axis Communications: Axis enables a smarter and safer world by improving security, safety, operational efficiency, and business intelligence. As a network technology company and industry leader, Axis offers video surveillance, access control, intercoms, and audio solutions. These are enhanced by intelligent analytics applications and supported by high-quality training. Axis has around 5,000 dedicated employees in over 50 countries and collaborates with technology and system integration partners worldwide to deliver customer solutions. Axis was founded in 1984, and the headquarters are in Lund, Sweden. Find out more about Axis Communications - Innovating for a smarter, safer world https://www.axis.com/

In this live recording of Security Tech Talk, host Steve Kenny explores the rapidly evolving world of offensive cybersecurity with Kevin Kersley, Regional Director for EMEA at Bugcrowd. Fresh off being featured by the BBC, Kevin shares how Bugcrowd connects global organizations with a massive network of ethical hackers to identify hidden vulnerabilities before malicious actors can exploit them. Steve and Kevin dive deep into the fundamental shift from traditional penetration testing to continuous crowdsourced security. They unpack the real-world implications of the UK’s Product Security and Telecommunications Infrastructure (PSTI) Act, examine how malicious actors are moving from "AI as a threat" to "AI as a target" via data poisoning, and discuss why leading physical security manufacturers like Axis Communications are championing transparent public and private bug bounty programs. About Our Guest: Kevin Kersley: Regional Director across EMEA for Bugcrowd. Kevin is an expert in crowdsourced threat intelligence, helping enterprises navigate compliance, manage vulnerability disclosure programs (VDPs), and harness the ingenuity of the global ethical hacking community to secure both hardware and software systems. Chapters: (0:00:06) – Introduction & The Limits of Pen Testing Steve welcomes Kevin to the show. Kevin breaks down the core difference between a standard penetration test (a rigid, time-boxed checklist of known flaws) and a bug bounty program, which unleashes creative human ingenuity to find completely unknown vulnerabilities. (0:02:40) – Inside Bug Bounty Programs & Vetting Ethical Hackers Kevin highlights Axis Communications’ forward-thinking stance on public and private bug bounty programs. He addresses common misconceptions about the hacking community and explains how Bugcrowd monitors and maintains strict trust frameworks. (0:04:30) – The PSTI Act & Online Neighborhood Watch A deep dive into the UK's Product Security and Telecommunications Infrastructure (PSTI) Act. Kevin explains the mandatory shift toward Vulnerability Disclosure Programs (VDPs) and why giving security researchers a clear, non-monetary path to report bugs is essential for modern business transparency. (13:18) – AI as a Target: Data Poisoning and Chatbot Hallucinations The conversation shifts to large language models (LLMs) and the emerging threat of data poisoning. Kevin shares a fascinating case study on breaking multilingual logic and reviews the infamous Air Canada chatbot legal precedent, demonstrating why organizations must treat AI systems as highly exploitable targets. (18:37) – Offensive AI: Lowering the Barrier to Entry? Steve and Kevin discuss whether generative AI tools allow anyone to become a hacker. They analyze how automation is boosting efficiency in offensive security while simultaneously lowering the technical bar for entry-level malicious cybercriminals. (22:22) – Proactive Hardening & The Rise of Hardware Hacking Kevin outlines the future of Bugcrowd, underscoring the critical necessity of keeping a "human in the loop." He details the surging industry trend of hardware hacking, including real-world stress tests on retail point-of-sale (POS) systems, vehicles, and network-connected physical cameras. Resources: Learn more about the Bugcrowd Platform and crowdsourced security solutions. Read about the landmark legal ruling: Moffatt v. Air Canada (2024 BCCRT 149) regarding AI chatbot liability. Review official UK government guidance on the Product Security and Telecommunications Infrastructure (PSTI) Regime. Explore more about Axis bug bounty program in cooperation with Bugcrowd Meet your host Steve Kenny: Steve has spent 15 years in the security sector undertaking various roles that have seen him take responsibility for key elements of mission critical, high profile projects across a number of different vertical markets. For the last several years, Steve has focused his attention on how technologies can best compliment day to day operations and specifically address operational issues by supporting the A&E consultant community across EMEA. Steve is a committee member for ASIS International focusing on Education for the security sector and the UK technology advisor for TINYg (Terrorist Information New York group). Connect with Steve on LinkedIn More about Axis Communications: Axis enables a smarter and safer world by improving security, safety, operational efficiency, and business intelligence. As a network technology company and industry leader, Axis offers video surveillance, access control, intercoms, and audio solutions. These are enhanced by intelligent analytics applications and supported by high-quality training. Axis has around 5,000 dedicated employees in over 50 countries and collaborates with technology and system integration partners worldwide to deliver customer solutions. Axis was founded in 1984, and the headquarters are in Lund, Sweden. Find out more about Axis Communications - Innovating for a smarter, safer world https://www.axis.com/