NormCyber CTO Paul Cragg joins Richard Beeston, COO at Digital Space, to discuss why technology alone cannot make an organisation resilient – and why boards need a clearer, quantifiable view of cyber health.
Cyber security is now a regular fixture on board agendas. But how many boards can confidently answer a more fundamental question: how cyber resilient are we today?
In this podcast, Paul Cragg and Richard Beeston explore the organisational realities behind cyber resilience – from people, culture and AI governance to leadership accountability and the limitations of point-in-time compliance.
Their central message is clear: cyber resilience cannot be managed through annual assessments, technical updates or a collection of disconnected security metrics. Risk changes continuously, so organisations need a consistent, understandable way to measure their cyber health, identify where improvement is needed and demonstrate progress over time.
Watch the conversation
In this episode,
Paul and Richard explore:
- Why emerging regulation could help turn cyber resilience from a “should” into a “must”
- How boards can move from general awareness to measurable accountability
- The limitations of annual assessments and point-in-time compliance
- Why people remain one of the most underestimated areas of cyber risk
- How organisations can build an embedded security culture rather than rely on annual trainingHow to enable AI adoption without losing governance, visibility or control
About the speakers
Paul Cragg
Chief Technology Officer, NormCyber
Paul leads NormCyber’s technology strategy and the continued evolution of its cyber security services. He is passionate about making cyber resilience measurable, understandable and actionable – combining effective technology with the governance, culture and human judgement needed to reduce business risk.
Richard Beeston
Chief Operating Officer, Digital Space
Richard is an experienced technology and business leader with a practical perspective on digital transformation, operational performance and cyber resilience. As COO of Digital Space, he helps organisations use technology securely and effectively while navigating changing risks, skills requirements and business priorities.
