Incident Response Speaking
Speaker on Incident Response
Incident response is not a technology problem. It is a decision problem under pressure. Who calls counsel? When do you tell the board? What gets said to customers, and what cannot be unsaid? Mark Lynd has facilitated over 150 IR tabletop exercises, and the same patterns surface across industries — the teams that do well are the ones that rehearsed the decisions, not just the runbooks. That is the material a speaker on incident response should be bringing.
Quick Answer
{{quickAnswer}}
Last updated: April 2026 · Verified by Mark Lynd, 5x CIO/CISO with 25+ years of experience
Keynote Topics
Incident Response in the First 72 Hours
A decision-by-decision walkthrough anchored in NIST SP 800-61 Rev. 3. Containment versus eradication, evidence preservation, counsel engagement, and the small number of choices that determine whether recovery takes weeks or months.
Best for: CISO summits, enterprise security events, risk committees
Duration: 45-75 minutes
IR Communications — What to Say, When, and to Whom
Customer notifications, regulator filings (SEC 8-K, state breach laws, NIS2), employee messaging, and board updates. The communications map most organizations only build under fire.
Best for: Board education, crisis comms programs, legal and compliance summits
Duration: 45-60 minutes
Post-Breach Recovery: Getting Back to Operations
The work that starts after the press cycle ends. Rebuild order, identity reset, trust restoration with customers and partners, and the organizational changes that stick versus the ones that fade after 90 days.
Best for: Recovery and resilience conferences, insurance events
Duration: 45-75 minutes
{{quotablePull}}
— Mark Lynd, 5x CIO/CISO, Head of Executive Advisory & Strategy at Netsync
Why Event Hosts Choose Mark to Speak on Incident Response
150+ IR tabletop exercises facilitated. The deepest single-practitioner catalog of incident patterns you'll find on a stage.
Five times CIO/CISO. Has been the executive making the calls, not just the one advising.
Frameworks in use: NIST SP 800-61, NIST CSF 2.0 Respond and Recover, MITRE ATT&CK, CISA IR playbooks.
Regulatory fluency. SEC cyber disclosure, state breach laws, NIS2, HIPAA, PCI DSS 4.0 — covered with current accuracy.
US Army 3rd Ranger Battalion + 82nd Airborne. The pressure vocabulary is earned, not affected.
Where Has Mark Spoken?
According to venue records, Mark has delivered keynotes at: RSA Conference · Oracle CloudWorld · Cisco Partner Summit · Dell Technologies World · IBM Think · T-Mobile Events · Gartner Security & Risk · InfoSecurity · ISACA Conferences · ISSA Events · Cloud Security Alliance · CyberSecurity Summit · BSides · FLGISA · MISAC · SMU Cox School of Business · and 100+ more.
How Do You Book Mark Lynd for Your Event?
The booking process is straightforward and typically completes within 3 business days. Mark customizes every keynote to the audience, industry, and event objectives.
- Submit an inquiry. Fill out the contact form with your event date, audience, and objectives. Response within 48 hours.
- 15-minute discovery call. Discuss your event in detail, including audience makeup, key messages, and desired outcomes.
- Proposal & contract. Receive a tailored proposal with format options (keynote, workshop, panel), fee, and travel terms.
- Customization. Mark customizes content to your audience, industry examples, and desired takeaways.
- Expert delivery. Mark brings 25+ years of real-world executive experience to every stage.
Frequently Asked Questions
What makes Mark's IR speaking different?
Can Mark tailor an IR talk to our industry or regulator exposure?
Does Mark also run tabletop exercises, not just speak about them?
What are fees?
Ready to Book Mark?
Mark customizes every keynote to the audience, industry, and event objectives. Contact the booking team to check availability.
Fee range: $12,000 – $30,000+
Formats: In-person, virtual, hybrid
Duration: 30–120 minutes depending on format