Sometimes the best security strategy is to look boring to attackers. In Inverted Podcast #16, hosts Jeroen Kemperman, Dana Kaufman, and Dario Salice talk with Olivier Martinet, CISO of TX Group, about unorthodox choices that put detection, response, and damage containment ahead of perfect prevention.
TX Group is Switzerland’s largest private media group, so the conversation spans critical infrastructure, journalism workflows, passwordless authentication, adaptive MFA, supply-chain risk in ad networks, and why investing in defense can beat buying cyber insurance. For inverted product teams, the through-line is clear: measure success by damage contained, not by a vanity count of blocked incidents.
The hosts also press on controversial calls: collaborating with competitors on industry security, training journalists for safer dark-web work, and communicating risk to boards without either panic or complacency. That mix of philosophy and operating detail makes this episode useful beyond media CISOs. Any inverted product team wrestling with detection versus prevention trade-offs will recognize the same product decisions.
About the guest
Olivier Martinet is Chief Information and Security Officer at TX Group. He joins the hosts to share how a large media organization balances modern security practices with digital transformation, journalist safety (including dark-web research), and board-level communication.
Key takeaways
- Aim to be unattractive to hackers: detection and fast response can outweigh brittle total prevention.
- Passwordless authentication and adaptive MFA are practical steps on a cloud-first journey.
- Supply-chain and ad-network risks need brand-protection thinking, not only perimeter controls.
- Defense investment and industry collaboration can beat a pure cyber-insurance bet.
- Damage containment is a better north-star metric than raw incident counts.
- Board communication and leadership questions shape what security can actually ship.
Topics covered
- TX Group security philosophy for a media organization
- Prevention versus detection and Zero Trust
- Passwordless authentication and digital transformation
- Supply-chain risks and brand protection
- Cyber insurance versus investing in defense
- Industry collaboration and AI challenges
- Board communication and nation-state threats
Chapters
00:00 Intro & Guest Introduction
01:13 TX Group Overview & Security Philosophy
03:02 Modern Security Practices & Digital Transformation
06:01 Prevention vs. Detection: Embracing Zero Trust
10:03 Supply Chain Risks & Brand Protection
12:00 Cyber Insurance & Controversial Decisions
14:37 Industry Collaboration & AI Challenges
16:01 Board Communication & Leadership Questions
18:10 Nation-State Threats & Real-World Attacks
20:05 Closing Thoughts & Outro
FAQ
Who should watch this episode?
CISOs, security leaders in media and publishers, product managers owning detection and response, and teams weighing insurance versus engineering investment.
What does “unattractive to hackers” mean in practice?
Raise the cost and lower the reward for attackers through boring hygiene, strong authentication, fast detection, and response so opportunistic campaigns move on.
How does this connect to inverted products?
Inverted products succeed when damage stays rare and contained. Olivier’s focus on detection, response, and damage metrics matches that outcome-first mindset.
Related on Inverted PM
- Podcast #20: Targeted Attacks
- Podcast #26: Hacklore with Bob Lord
- Podcast #23: Account Recovery
- Podcast #17: Bug bounty
- Meet the hosts
- All Inverted Podcast episodes
Connect with the hosts and guests on the video or on LinkedIn to continue the conversation.
🎧 Find the Inverted Podcast on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio, or invertedpm.com.
Explore more
Browse all Inverted Podcast episodes, read the blog, or meet the hosts.
Related: Episode 20 – Targeted Attacks · Episode 26 – Hacklore with Bob Lord