Sophia McCall on cyber risks businesses still fail to see

Sophia McCall has built her career at the sharp end of cyber security.

A CREST-certified Threat Intelligence Manager and Senior Threat Intelligence Analyst at an FTSE 100 retailer, she has worked across retail, finance and automotive security, bringing together technical expertise with a clear focus on real-world risk.

She has also used that expertise beyond the workplace. McCall was featured on Channel 4’s Hunted as a cyber hunter and has become a recognised advocate for inclusion, mentorship and greater representation in the industry.

As co-founder of Security Queens and Chapter Administrator of the Ladies of Cheltenham Hacking Society, she has worked to open up cyber security for the next generation of women entering the field.

Her work sits at the point where technical knowledge meets public impact. From threat intelligence and digital forensics to public speaking and outreach, McCall has built a profile that goes beyond cyber expertise alone.

It is why she stands out not just in security, but more broadly among Women in Tech speakers shaping the conversation around leadership, access and change in the sector.

In this exclusive interview with the Female Motivational Speakers Agency, Sophia McCall shares her thoughts on overlooked cyber threats, the human vulnerabilities businesses still underestimate, and why making cyber security more accessible matters.

Q1: Which cyber risks are businesses most likely to overlook until it is too late?

Sophia McCall: “I think one of the biggest risks that a lot of companies face is third-party risk. You can make your internal systems as secure as possible, but unfortunately, if your suppliers or your supply chain is exposed, that’s definitely a way in for adversaries.

“Another thing that we’ve seen rise in recent years, especially with hybrid working, is bring your own device or people working from home. Again, that adds another layer of exposure for companies.

“Something that’s particularly forgotten sometimes is insider risk as well. Not necessarily a malicious insider, but perhaps people that are less informed with security practice and clicking on phishing links, falling for scams, that kind of thing, which again leaves organisations exposed.”

Q2: When businesses think about cyber security, where does the biggest point of weakness usually sit?

Sophia McCall: “There’s a saying that goes humans are the weakest link, and unfortunately I think I am a little bit inclined to believe in that.

“You can invest millions in your firewalls and your defence technologies, but if you do not train your employees and your staff to spot a phishing email, or how to spot a scam or a bit of fraud, it’s unfortunately all for nothing.

“Human error is still quite a big cause of major breaches, and I’m always a big believer that security training is more of a culture that needs to be embedded in an organisation rather than a chore.

“That’s something we can definitely work on, particularly larger businesses that has those kind of threats.”

Q3: What everyday behaviours from employees continue to leave organisations exposed?

Sophia McCall: “A lot of people think security is not my problem, that’s the IT department or the security team. I think one of the biggest things we need to make sure people know is that security is everyone’s responsibility.

“As I previously mentioned, phishing is a really big cause of breaches in many organisations, and that’s something that we definitely need to address.

“It’s all about empowering your employees with the right knowledge and making sure they are trained and have that awareness. Things like simulated phishing campaigns help bring up that security barrier for them.”

Q4: When people leave one of your talks, what do you want them to think differently about cyber security?

Sophia McCall: “I’m a really big believer in learning and not gatekeeping knowledge. Whenever I deliver a talk, I really want people to feel empowered and curious and wanting to learn more.

“Cyber security isn’t just for the elite technical folks in the room. It is for everyone. Whether I’m speaking at a bank or a school, my goal is to demystify the subject so it can be accessible for everyone, quite exciting almost, and actually quite impactful.

“I hope people don’t see diversity as a buzzword, but actually as a strength to their team, and that mentorship and inclusion can help that journey and process as well.”

This exclusive interview with Sophia McCall was conducted by Tabish Ali of the Motivational Speakers Agency.