About the episode
Andrew Speer speaks with Irfahn Khimji about cybersecurity experience and suspicious requests. Andrew’s first-episode release post describes the near-miss premise behind the episode title. The show release record identifies Irfahn as Field CTO at BackBox.
The recording above remains the original audio. This is an editorial summary, not a verified transcript or a collection of independently authenticated case quotations. The summary was revised in October 2026 to correct the company attribution and remove unsupported technical and product claims.
A practical question for the listener
How does your team verify an unexpected request involving payment, account access or sensitive information? Staff need an established approval route and a way to report concerns without relying only on whether a caller or message seems familiar.
The NCSC phishing guidance describes layered technical and organisational controls. A culture of asking questions supports those controls; it does not replace them.
Current Certifyd scope
The episode is a cybersecurity conversation. Certifyd currently helps organisations manage worker evidence, review dates and attendance. It does not offer universal authentication for every phone call, email or meeting.