Speaking

Executive Briefings and Keynotes on Cyber Incidents and Decision-Making

Helping leaders understand what actually happens during a cyber incident, and how to make better decisions when it matters most.

Seth is a cybersecurity speaker and DFIR specialist who helps leaders and technical teams understand how incidents really unfold, and what drives effective decision-making under pressure.

Drawing on real investigations across enterprise and critical infrastructure, his sessions translate complex incidents into clear, practical insight that audiences can immediately apply.

About Seth

Seth is Director and Principal Analyst at Lykos Defence, specialising in digital forensics, incident response, and cyber resilience across enterprise and industrial environments.

He speaks to both technical and non-technical audiences with a focus on clarity and realism. Seth breaks down complex incidents into practical lessons, showing what matters, what doesn’t, and how organisations can respond more effectively when it counts.

Seth has delivered keynotes, conference talks, and workshops for leading cybersecurity and critical infrastructure audiences, including:

What Seth Focuses On

Seth’s sessions centre on a simple question:

What actually happens when a serious cyber incident unfolds, and how do effective teams respond?

Audiences leave with a clearer understanding of:

• What typically breaks in the first hour of an incident
• How high-performing teams make decisions under pressure
• Where organisations overestimate their readiness
• What regulators, insurers, and boards focus on after the fact

Speaking Formats

Executive Discussion Topics

Below is a selection of Seth’s most requested sessions. Each can be delivered as a keynote, conference session, or executive briefing, and is tailored to your audience, sector, and event objectives.

Incident Response Under Pressure: How Leaders Make Decisions When It Matters Most

When incidents occur, teams don’t fail because they lack tools. They fail because decision-making collapses under uncertainty. This talk shows how high-performing organisations reduce confusion, avoid common traps, and execute with clarity in the first critical hours.

What’s Really Happening in Cyber Attacks on Critical Infrastructure

A practical look at attacker behaviour in OT and industrial environments, grounded in real investigations. This session demystifies what’s actually happening in the field, what defenders routinely miss, and how organisations can strengthen resilience without overengineering their approach.

Digital Forensics for Executives: What You Can Actually Trust During a Breach

Executives are often asked to make irreversible decisions without understanding what evidence can reliably support. This session explains how investigations really work, what “confidence” means in DFIR, why timelines slip, and how leaders can make informed decisions under uncertainty.

The Five Ways Organisations Fail at Incident Readiness (and What High Performers Do Differently)

A pattern-based breakdown of the most common readiness failures: unclear authority, untested playbooks, weak evidence handling, poor communication, and unrealistic assumptions about tooling. Audiences leave with practical ways to strengthen capability without unnecessary complexity.

The Future of Cyber Risk: What Leaders Need to Prepare For

A forward-looking but grounded view of what’s changing in incident response and cyber risk, based on real-world trends rather than hype. This session helps leaders prioritise investment and capability development for the next wave of incidents.

Why Book Seth

• Clear, engaging delivery for both technical and executive audiences
• Real-world insight grounded in live investigations and incident response
• Practical takeaways audiences can apply immediately
• Strong credibility across both enterprise and industrial environments
• Consistently relevant content that resonates with security leaders and decision-makers

“Seth Enoka’s expertise contributed immensely to the success of the inaugural Cyber and Infrastructure Security Conference, attended by critical infrastructure leaders from across Australia.”

— Cyber and Infrastructure Security Conference organisers

“Seth delivered a highly relevant and practical session on incident response readiness, focusing on what actually matters in the first 60 minutes of a cyber incident. The content resonated strongly with our audience and sparked meaningful discussion.”

— Smitha Gehlot, Growth Marketing Manager, APJ, Exterro

Audience Fit

• Security leaders and incident response teams
• Boards and executives seeking practical cyber risk insight
• Critical infrastructure operators and OT engineering stakeholders
• Government and regulators focused on national resilience
• Cyber insurers, legal teams, and governance stakeholders

Media and Speaking Highlights

Seth has delivered keynotes, conference talks, workshops, and research briefings for global cybersecurity and critical infrastructure audiences.

Selected Speaking Highlights

• What’s Really Happening in OT Cyberattacks in 2025 — Australian Cyber Conference (Melbourne) Session page

• Process Code Injection: Detection, Response, and Mitigation — SANS Webcast (2024) Recording

• E-MIMICS: Extended Malware in Modern ICS — SANS ICS Security Summit (2021) Recording · Slides (PDF)

• Responding to Ransomware in ICS — AISA AdelaideSEC Conference (2022) Slides (PDF)

• Cybersecurity for Small Networks — No Starch Press (Book) Publisher page

Book Seth

For speaking enquiries, availability, and tailored sessions, contact Seth directly: contact@lykosdefence.com