Craig Martin

Craig is the Head of Incident Response at Triskele Labs, where he leads investigations into cyber incidents affecting Australian organisations, including many that become public through media reporting.

His work focuses on understanding how incidents actually occur. Working directly with compromised environments, Craig and his team identify the control failures, access pathways, and decision points that allowed attackers to succeed. This frontline view provides a clear perspective on the gap between assumed and actual security posture.

He supports organisations during live incidents, working alongside technical teams, legal counsel, insurers, and executive leadership to coordinate response and regain control under pressure. He also regularly facilitates cyber incident exercises, testing how organisations make decisions, escalate issues, and coordinate in realistic conditions.

Craig is a regular speaker at conferences, industry events, and board briefings, where he shares practical insights drawn from real-world incidents across government, regulated sectors, and critical infrastructure.