DarwinSEC Presentation Hub

Time: 1:00 pm - 1:50 pm

Location: Hilton Grand Ballroom

Speaker:  Kat McCrabb, Managing Director, Flame Tree Cyber 

Overview:      

Kat was implementing AI across one of Australia’s largest education systems before there was much of a rulebook to follow.

There were no mature standards, no clear assurance frameworks and very little practical guidance. The team had to make decisions about where AI could be used, what data was appropriate, who owned the risk and what controls were needed.

In this session, Kat will share the things that worked, the things that created unnecessary friction, and the lessons she now when helping organisations adopt AI safely.

She'll also look at what has changed now that frameworks and standards are catching up, and where organisations can still get stuck when they try to turn requirements into something pragmatic.

Time: 1:50 pm - 2:30 pm

Location: Hilton Grand Ballroom

Speaker:  Bruce Large, Founder and Principal Cyber Security Architect at BLARGE 

Overview:    

In this presentation, Bruce will describe the approach he uses to design and deliver Cyber Security Programs for Critical Infrastructure Entities. Bruce has developed and delivered multiple Cyber Security Programs and has found over time learnings that have helped. Topics for the presentation will include:

• The cyber security landscape for Critical Infrastructure entities in Australia
• Program Methodologies and what works
• How to work with your Sponsor(s)
• Stakeholder Management
• What cyber security frameworks and standards to scope to use to inform your program
• Change Management 

Time: 2:50 pm - 3:30 pm 

Location: Hilton Grand Ballroom

Workshop & Session

Overview:   

CyberPath is an industry-led, industry-shaped initiative to build and grow Australia’s cyber workforce in a way that reflects real-world practice, local needs and emerging capability demands. This session will provide an update since our first Darwin consultation in March, including current design thinking with a focus on how the model can support a stronger, clearer and more accessible cyber profession in a disruptive landscape.

The session will also involve consultation with Darwin and NT practitioners, drawing on the region’s unique mix of government, enterprise, and SMB multi-hat cyber roles. You will be invited to contribute to shaping the Pathways and Recognition Frameworks, so they better reflect how cyber capability is built, demonstrated and validated in practice.

We want to ensure the NT continues to have a voice in shaping the solution, and perspectives will directly inform the frameworks, so they are practical, utilitarian and fit for the region.

This is a chance to have your voice heard, challenge assumptions, and help build a model that works not just in theory, but on the ground in the NT.

Time: 3:30 pm - 4:10 pm

Location: Hilton Grand Ballroom

Speaker:  Riley Schafer, Lead Investigator, DFIR, CyberCX 

Overview:     

Business email compromise remains an often-overlooked security risk to organisations. However, BECs have become increasingly lucrative for criminals and frequently serve as entry vectors for deeper compromise. This presentation will explore the trends we've observed, how attacks have evolved, and practical steps you can take to detect and mitigate the most common threats.

Key takeaways:

• BEC trends we've observed, how the  attacks have evolved
• How threat actors are gaining financially
• Detection strategies your organisation can employ
• Practical mitigation strategies to protect your organisation 

Time: 4:10 pm - 5:00 pm

Location: Hilton Grand Ballroom

Speaker:   AJ Kulatunga, Business Strategist and Global Keynote Speaker 

Overview:       

The Art of Influence for Cyber Security Professionals

Cyber professionals are increasingly expected to influence executives, boards, operational leaders and cross-functional teams, often without direct authority over any of them. The recommendations may be technically sound, but the real challenge is getting the wider business to understand the risk, make the decision, assign the priority and act before a known vulnerability becomes an incident.
 

This practical, high-energy keynote will give you a framework to:

· Position technical recommendations around business priorities and risk

· Challenge assumptions and decisions without losing trust

· Influence action across stakeholders without relying on title or authority

· Turn insights from DarwinSEC into action back at work