Craig Martin
Craig is the Head of Incident Response at Triskele Labs, where he leads investigations into cyber incidents affecting Australian organisations, including many that become public through media reporting.
His work focuses on understanding how incidents actually occur. Working directly with compromised environments, Craig and his team identify the control failures, access pathways, and decision points that allowed attackers to succeed. This frontline view provides a clear perspective on the gap between assumed and actual security posture.
He supports organisations during live incidents, working alongside technical teams, legal counsel, insurers, and executive leadership to coordinate response and regain control under pressure. He also regularly facilitates cyber incident exercises, testing how organisations make decisions, escalate issues, and coordinate in realistic conditions.
Craig is a regular speaker at conferences, industry events, and board briefings, where he shares practical insights drawn from real-world incidents across government, regulated sectors, and critical infrastructure.
Safety not guaranteed: What ransomware victims have in common with 1970s construction workers
Hundreds of ransomware incident responses show the same preventable causes each time, proving the failure is now governance, not technology.
A good tabletop should ruin your day
Why an effective incident tabletop exercise should expose real gaps and hard decisions rather than reassure the room that the plan already works.
World-Class Speakers
Hear from the most influential leaders and experts who will discuss pressing issues and emerging trends in cyber security.
