Skip to content

War Room Roundtable

The First 24 Hours of a Live Incident

An invitation-only roundtable for security, risk and business leaders. Craig Martin, Head of Incident Response, runs a facilitated walkthrough of a real first 24 hours, pausing at key decision points to ask how the room would have called it. Almost everything expensive about an incident gets decided before it starts: who you call, whether privilege is agreed in advance, whether anyone is watching at 2am, whether the logs even exist. This session shows cost compounding in real time.

Date

Wednesday 16 September 2026

Time

12:00 PM - 1:30 PM AEST

City

Brisbane, QLD

Venue

TBC

Type

Restricted Attendance

Executive Roundtable

After-Hours Risk, Identity Exposure and the Limits of In-House Security Operations

An invitation‑only roundtable for security leaders focused on where operational coverage breaks down, how risk is being absorbed, and what organisations are doing in practice to manage growing exposure. This roundtable is designed for CISOs, CIOs, risk and compliance leaders, and senior security and technology executives responsible for governance, assurance, and incident response.

Date

August 2026

Time

12:00 PM - 3:00 PM AEDT

City

Melbourne

Venue

Private Fine-Dinning

Type

Restricted Attendance

Overview

If you're based in Brisbane or nearby, we would love to see you.
This is a private, invitation-only Triskele Labs event with a small guest list.

What to Expect

Craig Martin takes the room through a real first 24 hours. At each decision point, he'll stop and open the floor: what would you have done here?
At each point, we'll look at what it set in motion: the delay while someone works out who to call, evidence left untouched because privilege wasn't sorted, logs that weren't there when they were needed. Cost as cause and effect, decision by decision.

Who Should Attend
  • CISOs, CIOs and Security Leaders
    Anyone responsible for incident governance and business continuity, across sectors.
  • Risk, Compliance and Executive Leaders
    Those who'd be in the room when an incident actually happens.
  • Brisbane-Based Contacts
    You're welcome whether or not you're attending the AHECS summit itself.
Speakers

 

 

 

 

 

Craig.Martin_001_600

Craig Martin

Head of Incident Response

Craig leads the Incident Response team at Triskele Labs, guiding organisations through live cyber incidents with clear direction and decision-making under pressure.

Agenda

12:00 PM        Arrival and networking

12:30 PM        Roundtable discussion

1:30 PM         Close

Three things you can do right now

Worth checking before your next incident, not during it. A retainer buys the prepositioning, not the panic response. 

  • Do you know who you'd call, and is it agreed in writing?
  • Is privilege pre-arranged with your lawyers?
  • Can you actually pull your own logs?
Venue

To be confirmed shortly.

 
Register

Register Your Interest

This is a private Triskele Labs event. Please register your interest below, and a member of our team will confirm your place directly.