KEYNOTE SPEAKER
Cybersecurity & Threat Intelligence Specialist | Former NCSC Leader
Fee information first. Availability is normally checked once there is a concrete intention to proceed.
WHY TOBY
Toby Lewis helps senior audiences understand cyber risk as an operating and leadership issue rather than a purely technical one. His experience across government incident response and commercial threat analysis connects hostile behaviour, organisational exposure and the decisions required before and during a serious incident.
KEYNOTE TOPICS
Effective defence starts with two disciplined questions: what must the organisation protect, and how is an adversary likely to pursue it? Lewis connects threat intelligence with asset awareness, helping leaders examine exposure, incentives and assumptions so that security priorities reflect the business and the behaviour of real attackers.
State activity, organised crime and rapidly available technology are changing the speed and shape of cyber threats. This session gives leaders a structured view of the landscape, separating durable patterns from headlines and showing how geopolitical events, commercial dependencies and attacker economics can alter organisational risk.
AI changes cybersecurity in more than one direction: it can support analysis and detection while expanding opportunities for deception and automation. Lewis examines where the technology affects attacker behaviour, defensive operations and executive expectations, helping organisations make measured decisions without treating AI as either a universal solution or an autonomous threat.
A major cyber incident exposes decision rights, communication habits and dependencies that routine operations may conceal. This keynote considers how leaders can prepare for that moment, clarify ownership and coordinate technical response with business continuity, stakeholder communication and recovery before the pressure of a live event removes room for improvisation.
Toby Lewis is a cybersecurity and threat intelligence specialist whose career spans UK national security, incident response and commercial cyber defence. His experience includes leading threat analysis at Darktrace and serving in the UK's National Cyber Security Centre, where he held responsibility in incident management. His work focuses on the behaviour of cyber adversaries and on how organisations can turn threat information into decisions.
Lewis worked within the UK intelligence and security environment before moving into private-sector cybersecurity. That background placed him close to the operational realities of state activity, criminal campaigns and major incidents affecting organisations beyond government. At Darktrace, he communicated emerging threats and the implications of artificial intelligence for both attackers and defenders, connecting technical evidence with business-level risk.
His distinctive perspective lies in the bridge between intelligence and executive action. Cybersecurity conversations often separate technical control from leadership judgment; Lewis brings them together by asking what an organisation knows about itself, what an adversary is likely to seek and how assumptions survive contact with an incident. He also addresses the limits of prediction and the importance of recovery when prevention is incomplete.
For leaders, this matters because cyber risk now reaches operations, reputation, supply chains and strategic autonomy. Boards do not need to become security engineers, but they do need a clear view of exposure, ownership and response. Lewis helps audiences interpret a shifting threat environment, challenge false confidence and build the relationships and decision processes required when a cyber event becomes an organisational crisis.
ON STAGE
CONSIDERING TOBY?
Send us the event context and we’ll come back personally with the relevant fee information and next steps.
EXPLORE FURTHER
We use essential technologies to run this site. Optional analytics and measurement help us understand and improve how it is used.
