Episode 3: Boring Habits that Fix Scary Risks

The biggest wins in security are rarely exciting, no one ever got a trophy for keeping an asset register updated. But those boring habits are the reason nothing explodes at 2am.

In this episode, Tim and Kaz walk through the unglamorous routines that stop small issues turning into big incidents. The goal? Making attackers bored and building managers happy. No heroics required.

What we cover:

• Why most physical security failures aren't clever attacks — they're familiar IT problems attached to the doors
• The habit that underpins everything: a living asset list of what you actually have
• Locking down who can log in — named accounts, single sign-on, and MFA on privileged actions
• Patching as a calendar activity, not a 2am emergency — plus se ...