I participate in talks, workshops, and sessions that connect cybersecurity, risk, technology strategy, and applied AI for cybersecurity with decisions people can understand and use.
I am especially interested in translating technical complexity without trivializing it: providing context, explaining implications, and leaving questions or criteria that remain useful after the session.
The topics that work best as talks usually start from problems I am also documenting in Ideas and Work. That makes it possible to take the same question from reflection into design examples, decisions, and practical lessons.
Topics where I can add the most value
Cyber risk, resilience, and decisions
Conversations for leaders and teams that need to prioritize, understand exposure, and connect technical controls with real consequences and organizational capabilities.
Technology strategy
Sessions on architecture, capabilities, investment, and execution when the important question is not which tool to buy, but which decision makes sense and can be sustained.
Applied AI for cybersecurity
Talks about concrete uses of AI to interpret security information, enrich analysis, support decisions, and improve workflows while maintaining judgment and control.
Topics I can develop
These are not a closed catalog, and they do not imply that every topic has already been delivered under this exact title. They are conversations I can structure and adapt to the audience, level of depth, and context of the session.
From vulnerabilities to priorities: thinking about RBVM beyond CVSS
How to move from a long list of findings to treatment decisions based on criticality, exposure, threat, remediation capacity, and residual risk.
Incident response starts before the incident
What makes a response plan genuinely executable: roles, severity criteria, escalation, playbooks, evidence, communications, and learning.
More security tools do not mean more security capability
How to distinguish products, controls, processes, and capabilities, and why technology investment only creates value when it can be operated, measured, and sustained.
A technically correct architecture can be a bad business decision
How to incorporate operations, skills, complexity, dependency, lifecycle cost, recovery, and reversibility into architecture decisions.
Applied AI for cybersecurity: where it adds value without replacing judgment
Where AI can reduce friction, add context, or accelerate analysis, and which decisions should retain human responsibility and judgment.
Email is not just a channel: attacks against critical business processes
How phishing, fraud, impersonation, and account compromise can affect payments, vendors, clients, and other business decisions even when no obvious malware is involved.