From submarines to boardrooms: Executive risk lessons from hacking military hardware
Lessons from hacking a submarine's control systems shape five principles for communicating technical risk in terms executives will act on.
Session Details
What happens when a penetration test goes wrong in the most literal sense possible? When your "test environment" is a multi-billion-dollar submarine capable of carrying nuclear weapons, and your mistake could literally crush the vessel?
Join Adam Cassoni Cunningham for a rare glimpse into the untold story of how military-grade hacking experiences shaped one cybersecurity leader's approach to executive risk management. This isn't another technical deep-dive into vulnerabilities—it's a masterclass in translating life-or-death security lessons into boardroom decisions.
The Story That Changed Everything:​
In 2001, before the cyber security industry even had proper tools, within a test Adam gained unauthorised access to submarine systems. The attackers could manipulate critical depth readings, potentially sending the vessel to crush depth. No penetration test reports, no compliance frameworks—just pure, unadulterated risk where mistakes meant lives, not just data breaches.
Five Principles That Will Transform How You Communicate Risk:​
- The Illusion of Choice: Why giving executives options beats pushing solutions
- Screenshot or It Didn't Happen: How to cut through theoretical risks and focus on real threats
- The Three F*s Framework: The brutally simple test for every security message
- Blast Radius Thinking: Prioritising by actual business impact, not CVSS scores
- The Attacker's Economics: Why boards fear the wrong things and how to fix it
You've seen the technical presentations. You've read the compliance guides. But have you learned how to make a CFO understand why that vulnerability actually matters? This session bridges the gap between hacker instincts and executive communication, showing you how to protect systems by first protecting the truth.
Perfect for:​
- CISOs, CIOs, COOs, CEOs and Security Directors
- Security professionals ready to transition to leadership
- Anyone who's ever struggled to explain technical risk to business executives
This isn't theory. These are battle-tested principles forged in the crucible of real consequences, where security failures could literally mean the difference between surface and crushed steel.
Warning: May cause permanent changes in how you approach risk communication.
There's More Where This Came From
Browse hundreds of sessions and build an agenda around the topics that matter to you.








