The Alldus Podcast - AI in Action

Today's guest is Stéphanie Paul, ServiceNow Consultant at Thales. Founded in 2000, Thales Group is a French multinational technology company that specializes in aerospace, defence, cybersecurity and digital identity solutions, serving governments, critical infrastructure operators and industrial clients worldwide. Thales designs and delivers advanced systems in areas such as avionics, radar, communications, space and secure information systems, with a strong focus on innovation and mission-critical technologies.
For over 10 years, Stéphanie has led IT Service Management (ITSM) transformations at scale within complex international organizations. Stéphanie helps enterprises evolve ServiceNow from a ticketing platform into a true governance and operating model enabler. Stéphanie operates at the intersection of strategy and delivery: designing target operating models, building robust ITSM governance frameworks, structuring CMDB/CSDM architecture and driving adoption across large, distributed environments.

In the episode, Stéphanie discusses:
0:00 Her journey to becoming a people-first ITSM leader driving standardised ServiceNow transformation
2:51 How excessive customization harms scalability, upgrades and long-term support
4:16 Overcoming change resistance, balancing priorities and avoiding over customization
6:52 Being people and culture-focused and building governance for lasting impact
10:08 Encouraging women in IT, including to learn, certify, build confidence and network
12:25 ITSM will evolve as foundational platform and strong data enables AI integration
15:35 Plans to strengthen ITSM foundation, deepen AI expertise and improve customer impact

To find out more about all the great work happening at Thales, check out the website www.thalesgroup.com

Today's guest is Karl Kilmurray, Chief Information Security Officer at Dublin Bus. Founded in 1987, Dublin Bus is Ireland’s largest public transport provider, delivering bus services across the Greater Dublin Area. Carrying over 140 million passengers annually, Dublin Bus' services include high-frequency city routes, commuter services and night services, supporting the social, economic and environmental needs of Dublin through safe, reliable and increasingly sustainable transport.
Karl leads the cyber security programme and team at Dublin Bus, overseeing governance, risk management and compliance across the enterprise security function, as well as the cyber security budget and key initiatives. Prior to Dublin Bus, Karl worked at IBM as a cyber security engineer and cyber compliance manager. He also worked with Ekco, where he delivered CISO-as-a-Service support to state and semi-state organisations, and conducted NIS-D assessments for essential services and critical infrastructure providers.In the episode, Karl talks about:
0:00 His journey from programming to cybersecurity, ethical hacking, compliance and consulting
4:03 Seeing that public sector has fewer resources vs private sector with more oversight
5:21 How NIS2 expands cybersecurity rules, enforcement and team growth
6:50 Dublin Bus’ advanced cybersecurity with a growing team facing new threats
8:25 An insight into his role from team building, operations, training and future threats
10:54 A look at Dublin Bus upgrading GPS, Wi-Fi, CCTV, electric and connected systems
14:19 How team building enables managing daily tasks and learning simultaneously
15:52 How AI introduces cybersecurity risks, requiring balance of innovation and security
18:11 Seeing the CISO role evolving, demanding, with team growth and specialisation

To find out more about all the great work happening at Dublin Bus, check out the website www.dublinbus.ie

Today's guest is Jason Scanlon, Chief Information Security Officer & Head IT GRC at Numata Business IT. Founded in 2004, Numata is a global managed IT services provider helping small and medium-sized businesses align technology with their goals. They deliver enterprise-grade solutions, including cybersecurity, cloud services and strategic IT advisory, through a subscription model. With an international presence, Numata enables organisations to improve efficiency, reduce risk and scale effectively using smart, reliable technology.
Jason is an IT Leader with over 20 years of experience across consultancy, computer services and managed services. He specialises in complex systems troubleshooting, logical problem solving and network administration. He has designed, implemented and supported network infrastructure, and has worked with multinationals and government bodies on large-scale deployments and consultancy. He later progressed to IT Manager, leading IT functions, developing strategic roadmaps and aligning technology with business goals.

In the episode, Jason discusses:
0:00 His career background from IT professional to service desk to CISO
3:26 Why MSPs must differentiate through measurable business outcomes, not just IT support
4:49 GRC is evolving, but governance gaps remain biggest organisational weakness
6:43 How AI will aid cyber defence, but requires controlled adoption
9:47 How AI vendor surge requires risk-based decisions and strong governance
11:19 The need to focus on gradual cybersecurity maturity before pursuing ISO certification
14:03 Why success as a CISO needs collaboration and strong support

To find out more about all the great work happening at Numata Business IT, check out the website www.numata.co

Today's guest is Geraldine Powderly, CISO and VP at SkySpecs. Founded in 2012, SkySpecs is transforming how renewable energy assets are managed. Its platform combines autonomous drone inspections, advanced analytics and financial intelligence to deliver unified insights across the asset lifecycle. Serving wind and solar operators worldwide, SkySpecs helps organizations maximize performance, reduce downtime and optimize maintenance decisions through data-driven asset management and AI-powered solutions.
Geraldine leads enterprise cybersecurity and IT strategy at SkySpecs, aligning cyber risk, AI governance and business growth across a global, multi-product organization. She has built and scaled risk-based security programs, embedded governance aligned to ISO 42001, and elevated maturity across SOC 2 and ISO 27001. A trusted executive advisor, Geraldine brings over two decades of leadership experience, including fintech CISO roles. She is also a recognized voice on AI risk, cyber resilience and security-driven innovation.

In the episode, Geraldine discusses:
Her career journey from software to cybersecurity leadership
Her passion for mentoring women in male-dominated fields
Why women’s technical contributions are often unknowingly underestimated
Encouraging women to embrace opportunities despite self-doubt
The importance of managing AI in cybersecurity through basics
As AI adds complexity, the basics still matter
The need for documenting decisions amid rapidly evolving AI risks
Staying current by training her entire team in AI literacy
Educating herself with conferences, webinars and peer stories

To find out more about all the great work happening at SkySpecs, check out the website www.skyspecs.com

Today's guest is Jane Corr, Head of Cyber Security at CIE (Córas Iompair Éireann). Founded in 1945, CIE is Ireland’s state-owned public transport group, providing rail and bus services nationwide through its operating companies Iarnród Éireann, Dublin Bus and Bus Éireann. Headquartered in Dublin, the group plays a central role in connecting communities, supporting economic activity and delivering sustainable mobility, carrying hundreds of millions of passenger journeys across Ireland each year.
Jane is an accomplished Information Security and IT leader with a proven track record of building high-performing teams and delivering results. Known for her “can-do” attitude and strong customer focus, Jane brings a structured approach to solving complex challenges. Her expertise spans information security, technology risk, programme delivery, IT operations and data centre management within large organisations. She is also highly experienced in presenting to Boards and executive leadership.

In the episode, Jane discusses:
0:00 Her journey from Infrastructure leader to cybersecurity
2:55 Why cyber leaders must communicate concisely and confidently
5:36 Her broad CSO role including AI, regulation, talent and influence
7:14 Advice to start with strategy, align people, roadmap and governance
8:55 The need to embed cyber as accessible service, balance risk and compliance
11:52 How cyber is maturing toward measurable, compliance-driven continuous improvement

To find out more about all the great work happening at CIE (Córas Iompair Éireann), check out the website www.cie.ie.