Speaker

Cybersecurity that lands with the room

I talk about information security so that the board and the engineers in the same room take away the same thing – with real cases instead of buzzword bingo. From a 20-minute impulse to a live crisis simulation on stage.

  • German or English
  • 20 to 90 minutes
  • On site or remote
  • CISSP · ISO 27001 Lead Auditor
Enquire about speaking
Can Yildiz giving a talk on information security

Formats

Four ways I can take your stage

Can Yildiz presenting to the audience at CIO SmartStack

Keynote

The impulse that sets the tone for the day: the current threat landscape, NIS2, the CRA or security culture – tailored to your industry and audience, with three things that are actionable on Monday.

20–45 minutes

Expert discussion & panel

Panel participation, fireside chat or moderation. I keep the discussion concrete, translate the jargon for the audience and take a position instead of mumbling consensus.

30–60 minutes

Live hacking

An attack demonstrated live and explained step by step: phishing, passwords, misconfigurations. Followed by the countermeasures – the penny-drop moment sticks far longer than any statistic.

30–60 minutes

Crisis simulation on stage

A security incident in real time: the audience makes the calls, I escalate the situation – ransomware, reporting deadlines, the press, customers. It shows without mercy where decision paths jam in reality.

45–90 minutes

References

Where I have spoken

Conferences, industry events and closed decision-maker sessions – from a technical audience through to the management board.

Audience at Can Yildiz’s talk on security organisation at CIO SmartStack
CIO SmartStack, Frankfurt am Main

Identity First Security Summit 2026

Frankfurt am Main

Cyber Security Summit

Hamburg

MySecurityEvent

Berlin

CIO SmartStack

Frankfurt am Main

Topics

What I speak about

  • NIS2 and the CRA: who is affected and what does it mean in practice?
  • ISO 27001 as a tool rather than a ring binder
  • The EU AI Act and the security of AI systems
  • Security culture: why awareness slides rescue no one
  • Incident response: the first 24 hours decide everything
  • Zero trust beyond the marketing promise
Can Yildiz speaking at CIO SmartStack in Frankfurt

What I need for your enquiry

Date and venue

Date, time and venue – or whether it takes place remotely.

Audience

Who is in the room: specialists, executives, a mix? And how many?

Format and length

Keynote, panel, live hacking or crisis simulation – and how much time I have.

Objective

What the audience should do differently afterwards. I build the talk around that.

I usually get back to you within one working day with an assessment and a proposed topic.

Looking for a speaker?

Send me the occasion, the audience and the length you have in mind – we will sort out the rest in a short call.