The HIDDEN Podcast by Babble

Cyber security is one of those things every growing business knows they should have under control… but very few feel truly confident about. This weekly podcast is designed to change that. Hosted by Lynn Murape, this show cuts through the noise, jargon, and scare tactics that often surround cyber security, and focuses instead on what actually matters for small and medium-sized businesses in the UK. Whether you’re a business owner, an IT manager stretched thin, or someone unexpectedly responsible for “keeping things secure,” you’ll find practical, real-world guidance you can actually use. Each episode tackles cyber security from a different angle. Sometimes, we break it down using the HIDDEN framework — a simple way to understand the six essential areas of protection. Other times, we unpack real-world events like major breaches, new regulations, or emerging threats, translating what they mean for your business in plain English. <p

The HIDDEN Podcast by Babble is a business podcast hosted by Lynn Murape, with 13 episodes on record and a Required Pod Score of 80. PitchCentric scores this show on Booking Probability, Listen Score, and live audience signals refreshed every 24 hours.

Lynn Murape hosts The HIDDEN Podcast by Babble, a business show with 13 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #12

  Episode 12: Is your IT provider your cyber security team?

  Sep 8, 202628 minS2

  Your IT provider might be doing an excellent job. But does that include actively watching for threats, investigating suspicious activity, and taking action if something goes wrong? In this episode, Lynn is joined by Nikoo Fullerton to unpack a distinction that catches a lot of businesses out: everyday IT management and specialist cyber security monitoring are not the same thing, even when they sound like they should be. Nikoo explains what a typical IT contract reasonably covers, why a genuinely good MSP can still fall short of providing round-the-clock threat monitoring, and why that gap usually comes down to an untested assumption rather than poor performance. The conversation also strips away the acronym soup around SOC, MSSP, MDR and MXDR, focusing on what buyers should actually be asking about outcomes, scope and authority to act. Nikoo walks through how to decide between managing security internally, outsourcing it, or blending both, why cyber security strategy can never be fully handed off to a third party, and the signs that a business is either under protected or quietly paying twice for overlapping cover. Because the goal isn’t more tools or more providers. It’s knowing exactly who’s watching, who’s investigating, and who’s authorised to act, agreed before anything goes wrong. If this episode leaves you with more questions than answers, join Babble’s upcoming Managed Cyber Security webinar, where we’ll unpack what to buy, how to buy it, and the questions worth asking before you do. Register for the webinar: How to Buy Managed Cyber Security Key takeaways: Why a good IT provider isn’t automatically your security team What a SOC actually is (hint: not a room full of analysts) How to cut through SOC, MSSP, MDR and MXDR by focusing on outcomes How to choose between internal, outsourced and hybrid models Why cyber security strategy can’t be fully outsourced The exclusions and costs that catch businesses out Chapters: 00:00 Doing it well isn’t the same as watching for threats 00:50 Welcome to HIDDEN 01:43 Meet Nikoo Fullerton 03:07 Who’s actually responsible? 04:17 What your IT provider can reasonably cover 05:24 Where IT ends and security begins 06:28 How escalation actually works 07:17 Doing a good job doesn’t mean doing it all 08:34 What a security operations centre actually is 09:42 Cutting through the acronyms 11:02 Internal, outsourced or hybrid 12:37 Why you can’t outsource accountability 13:41 Why playbooks matter 15:24 Signs you’re under protected or overpaying 17:01 Know what you’ve got before you shop around 18:17 MSP, SOC, MSSP, MDR and MXDR explained 22:02 What 24/7 actually means 23:46 The costs that catch people out 25:56 The one thing that needs a named owner 27:22 Closing thoughts

  ListenShow Notes
• 

  Episode #11

  Episode 11: Is anyone watching your business at 2am?

  Sep 2, 202635 minS2

  Your security software just flagged something suspicious. It’s 2am, your team’s asleep, and the office is closed. So what happens next? In this episode, Lynn sits down with Steve Hennessy to unpack what an alert actually means, and why it’s only ever the beginning of the story. Because detecting a threat isn’t the same as understanding it, containing it, or knowing who’s responsible for dealing with it once the noise starts. Steve walks through why not every alert carries the same weight, what genuinely happens in the hours between a 2am alert and a 9am login, and why expecting a small internal IT team to catch everything around the clock often isn’t realistic. He also breaks down what triage, investigation and containment mean in practice, and who should have the authority to isolate an account or device when the business itself can’t be reached. The conversation moves beyond the alert itself and into the harder questions: what a genuine 24/7 monitoring service should include, why the cost of proper cover is often more accessible than people assume, and why there’s no single right answer for every business. Because the real risk usually isn’t the alert. It’s not knowing who’s watching, what they’ll do, and when. If this episode leaves you with more questions than answers, join Babble’s upcoming Managed Cyber Security webinar, where we’ll unpack what to buy, how to buy it, and the questions worth asking before you do. Register for the webinar: How to Buy Managed Cyber Security Key takeaways: Why an alert is a warning sign, not a resolution Why not every alert requires the same response What can happen in the hours before a 2am alert gets noticed Whether a small internal IT team can realistically provide round-the-clock cover What triage, investigation and containment actually involve Why 24/7 monitoring means very little without a clear plan behind it Chapters: 00:00 Alerts are not the all clear 00:20 Welcome to HIDDEN 01:20 The 2am scenario 02:06 What an alert actually tells you 04:37 Ownership comes up again 05:28 Where does the alert actually go? 06:23 Breaking down MDR and MXDR 07:21 Six hours in the dark 09:04 Alert fatigue is real 12:33 What investigation needs to establish 15:51 What containment actually looks like 17:38 Who has the authority to act? 19:55 The run book as an incident response plan 22:07 What 24/7 monitoring should include 23:50 Does round-the-clock cover cost a fortune? 26:51 Build it in-house or bring in support? 29:06 Does every business need the same cover? 31:51 The one question to ask your MSP 33:54 Closing thoughts

  ListenShow Notes
• 

  Episode #10

  Episode 10: Are you getting the cyber protection you’re paying for?

  Aug 25, 202618 minS2

  You’re already paying for antivirus, Microsoft Defender, or an IT provider to keep your laptops and phones secure. So why do gaps still slip through? In this episode, Lynn sits down with Nisha Sondhi to unpack a pattern that shows up again and again in Babble’s HIDDEN assessments: businesses that have the right tools in place, but can’t always say how they’re configured, who’s checking them, or whether they cover every device accessing company data. Because having security software installed isn’t the same as being protected. Nisha explains what “fully managed” should actually mean in practice, why bring-your-own-device (BYOD) policies often have more grey area than businesses realise, and how personal privacy and business security can coexist without one compromising the other. The conversation also covers what happens when the person responsible for a security platform leaves the business, and why it’s usually ownership, not the technology, that quietly falls apart. This isn’t about pointing fingers or selling another tool. It’s about understanding what you already have, who’s accountable for it, and what evidence proves it’s actually working. Because before you consider buying anything else, it’s worth knowing whether your existing protection is doing its job. If this episode raises more questions than it answers, join Babble’s upcoming Managed Cyber Security webinar, where we’ll unpack what to buy, how to buy it, and the questions worth asking before you do. Register for the webinar: How to Buy Managed Cyber Security Key takeaways: Why installed security software doesn’t automatically mean protection What “fully managed” should really include The BYOD grey area many businesses overlook How personal privacy and business security can coexist Why ownership, not technology, is usually what fails Why MFA and zero trust remain non-negotiable basics Chapters: 00:00 Why installed doesn’t mean protected 00:27 Welcome to HIDDEN 01:44 What “protected” actually means 04:02 The BYOD blind spot 05:37 Who really owns your security 07:04 Getting more from Microsoft Defender 08:01 Where privacy ends and security begins 10:44 Policy vs. device management 12:58 When the person managing your tools leaves 14:15 Installed isn’t the same as managed 15:13 MFA, zero trust and the human check 17:17 Closing thoughts

  ListenShow Notes
• 

  Episode #9

  Episode 9: Inside the TPI: Why some businesses make technology work and others don’t

  Jul 14, 202627 minS2

  Why do some businesses seem to get more value from technology than others? It’s a question that goes beyond budgets, sectors, or the latest AI tools, and it’s exactly what Babble set out to answer through the Technology Performance Index (TPI): an independent study of 1,000 UK SMB leaders. In this episode, Lynn is joined by Mark O'Dell and Jeremy Langley to unpack the findings, revealing three distinct groups of technology adoption: Tech Vanguards, Emerging Adopters, and Tech Bystanders. The conversation explores what separates these groups, why some organisations consistently turn technology into a driver of growth, while others find themselves stuck firefighting, and how businesses build confidence through structure, governance, and a clear focus on outcomes. You'll also hear why treating technology as a business investment (not simply an IT cost) changes the way organisations make decisions, prioritise projects, and measure success. Perhaps most importantly, this episode challenges the idea that successful technology adoption is about buying the right tools. Instead, it's about starting with the outcome you want to achieve and building the right strategy to get there. Whether you see your business in the Vanguard, Emerging Adopter, or Bystander category, this conversation offers practical insights to help you move forward with greater confidence, and a clearer understanding of how technology can become a genuine driver of productivity, growth, and resilience. Key takeaways: The three technology mindsets shaping UK SMBs What separates Tech Vanguards from everyone else Why confidence comes from structure, not bigger budgets How firefighting prevents long-term progress Why outcomes, not technology, should drive every investment How AI and cyber security are widening the gap between businesses Explore the Technology Performance Index 📊 Take the free Technology Performance Index Assessment https://info.babble.cloud/tpi-assessment2026?hsCtaAttrib=425604937930 📖 Download the full Technology Performance Index Report https://145811431.hs-sites-eu1.com/hubfs/TPI/Report/The%20Babble%20Technology%20Performance%20Index%202026.pdf?hsCtaAttrib=425516543165 🔍 Explore more insights and resources https://www.babble.cloud/tpi Chapters: 00:00 Welcome: Meet Mark O'Dell and Jeremy Langley 01:39 What is the Technology Performance Index (TPI)? 02:34 Why did Babble ask 1,000 business leaders this question? 03:29 What really separates a Vanguard from a Bystander? 05:24 Which group does your business belong in? 06:37 The Bystander: Why are a third of UK businesses falling behind? 12:04 The Emerging Adopter: What’s stopping them from becoming a Vanguard? 15:51 The Vanguard: What are they doing differently? 19:03 Mark's advice for Bystanders, Emerging Adopters and Vanguards 22:22 How did this research change Babble's thinking? 24:58 Where will UK businesses be this time next year? 26:37 Conclusion

  ListenShow Notes
• 

  Episode #8

  Episode 8: What Network & Cloud Security Means in the AI Era

  Jun 16, 202631 minS1

  For years, cyber security was built around a simple idea: protect the perimeter. But what happens when your applications live in the cloud, your data is spread across multiple platforms, and AI systems can access information, automate tasks, and make decisions on your behalf? In this episode, Lynn sits down with Keith Archer to explore how network and cloud security is evolving in the AI era, and why many of the security assumptions organisations have relied on for years no longer hold up. Because AI isn't just changing how businesses work. It's changing how cyber threats operate too. From agentic AI and prompt injection to shadow AI and tool hijacking, this conversation unpacks some of the newest risks emerging as organisations race to adopt AI-powered tools and platforms. Keith explains why traditional security controls often struggle to detect these threats, how attackers are beginning to weaponise AI, and why visibility has become one of the most important capabilities an organisation can have. The discussion also explores the growing challenge of shadow AI — where employees introduce AI tools without formal oversight — and the business impact of not knowing what systems, data, or applications those tools can access. Most importantly, this episode isn't about avoiding AI. It's about adopting it responsibly. Because organisations that balance innovation with governance will be far better positioned than those that either ignore AI altogether or deploy it without understanding the risks. A HIDDEN Cyber Security Snapshot helps organisations identify gaps across people, identities, data, recovery, devices, networks, cloud environments, and emerging AI usage; creating a clearer picture of where exposure actually exists. Key takeaways: Why traditional security perimeters no longer exist What agentic AI means in practical terms The risks associated with prompt injection and AI manipulation How shadow AI creates visibility and governance challenges Why traditional security tools struggle with AI-driven threats Where organisations should focus first to improve resilience in the AI era Chapters: 00:00 Introduction 01:12 Meet Keith Archer 02:59 The evolution from perimeter to cloud 05:20 Understanding agentic AI 07:11 Why traditional security tools are struggling 10:34 Jailbreaking and prompt injection explained 14:58 The rise of indirect prompt injection 16:19 The real business impact of AI threats 18:17 Shadow AI and the visibility challenge 19:58 When AI tools become attack paths 21:31 Where organisations are getting AI wrong 23:27 Immediate actions for security teams 25:49 Why human risk still matters 27:46 Keith’s wake-up call for business leaders 30:05 Conclusion

  ListenShow Notes

Recent guests on The HIDDEN Podcast by Babble. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.