Meet Chris Newton-Smith, CEO of IO and Cybersecurity40 Judge…

Tell us about yourself

 

I’m Chris Newton-Smith, CEO of IO. I’ve spent my career leading technology businesses through growth and transformation, with a focus on scaling globally, driving innovation, and helping organisations adapt in fast-moving industries. Before joining IO, I held senior leadership roles at Boku, iRiS Software Systems, and Redknee Solutions, which provided me with a front-row view of how technology can unlock resilience and opportunity when applied effectively.

At IO, my role is to build on the company’s strong foundations, continuing its impressive growth, supporting our customers worldwide, and ensuring we’re anticipating the next wave of challenges in cybersecurity and compliance. What drives me is a belief that security and compliance shouldn’t be seen as barriers; they’re enablers of trust, progress, and long-term success.

 

 

Tell us about your company.

 

At IO, we believe compliance should fuel progress, not hold it back. Our SaaS platform helps organisations simplify, strengthen, and scale their approach to information security, privacy, AI and risk management. Supporting more than 100 global standards, including ISO 27001, SOC 2, ISO 27701, ISO 42001, GDPR, and NIS 2, we give teams everything they need to stay secure and audit-ready in one place.

Our approach combines people, process, and platform, because lasting compliance isn’t achieved through automation alone. With structured workflows, guided support, and integrations that fit how businesses already operate, IO makes it easier to embed compliance into everyday work. From first-time certifications to mature multi-framework programmes, we help organisations reduce duplication, surface the right insights, and build confidence, turning compliance from a box-ticking exercise into a strategic advantage.

 

 

What advice do you have for companies entering the Cybersecurity40 2025?

 

Cybersecurity40 is about celebrating innovation. My advice is to focus on showing the impact of your work: how you’re solving real problems, enabling resilience, or changing the way businesses approach security. Judges will be looking for more than technical achievement; they’ll want to see how you’re driving outcomes that matter. If your work addresses emerging areas like AI regulation or supply chain resilience, highlight that. It shows you’re not only responding to the current landscape but preparing for the future.

 

How do you suggest entrants should stand out from the crowd?

 

Clarity and authenticity go a long way. Cybersecurity is full of jargon, but the stories that resonate are grounded in real customer challenges and results. Share specific examples of the difference you’ve made, and don’t be afraid to include lessons learned along the way. What will also set you apart is connecting your work to the bigger picture – how you’re contributing to a safer, more trusted digital ecosystem in your market. That broader relevance, especially in areas like AI governance, will help you stand out.

 

Any final thoughts?

 

Cybersecurity is one of the most dynamic industries, and the Cybersecurity40 highlights the innovators who are making a real difference, whether by defending against threats, navigating new regulations, or enabling responsible adoption of technologies like AI. For entrants, my advice is simple: be bold, be clear, and demonstrate how your work fosters trust and resilience, enabling safer and more profitable businesses to flourish.