Security leadership from the work, not just the slides.

Before you change the security function

For: CISOs, CIOs, CTOs and security leadership teams

Format: 30–40 minute talk or 45–60 minute leadership session

New leaders are under pressure to show movement before they understand what is already protecting the business.

Takeaways

• What to map first
• What useful capability is easily lost
• How to separate urgent containment from structural change
• Practical first-30-days questions

AI governance starts with the basics

For: CISOs, CIOs, data/AI leaders and technology executives

Format: 30–40 minute talk or panel/session discussion

The temptation is to start with AI policy and new tooling before checking the basics: the business case, data ownership, identity and access.

Takeaways

• Start with a real business case
• Data ownership and classification
• Human and non-human identity
• Access boundaries
• Human approval and stop points
• Governance that enables adoption rather than automatically saying no

Decisions before dashboards

For: Boards, executives, CISOs and technology leaders

Format: 30 minute executive session or 45 minute workshop

Cyber reporting can produce large amounts of information without making the decision clearer.

Takeaways

• Identify the small number of risks needing executive attention
• Show options and trade-offs
• Assign clear ownership
• Distinguish operational metrics from executive decisions
• Make risk acceptance visible