EXPOSURE — The board game that builds security instincts in management

Turn a 60-minute session into a lasting shift in how your leadership team thinks about security risk. No technical knowledge required. Built around NIS2 Article 21(2)(g).

I can help you with a different take on your cyber security marketing

You want to do it differently. But how? I have a simple suggestion: address the cyber security community; a powerful but often overlooked marketing channel. Doing so both requires understanding of the target group and the ability to get ideas no one else does. I can assist you with both.

Where should you focus your security effort?

I help organisations think through their security strategy: what actually matters, how to prioritise it, and how to make it land with the people who need to act on it.

Explore the powers of game-based learning

Game-Based Learning (GBL) is a dynamic educational method that infuses the principles of gaming into learning activities to increase engagement, motivation, and retention of knowledge. By creating an interactive environment, learners are encouraged to apply theoretical concepts through gameplay, facilitating an active and immersive learning experience.

Contact me if you need my help in any of the following areas:

Community Marketing

Forge lasting connections with the infosec community through tailored content and strategic mentorship. Unlock talent, trust, and brand loyalty.

&

Gamified Incident Response training

Transform IR training into an engaging game experience. Play realistic scenarios, uncover weaknesses, enhance empathy, and build teams effectively.

&

Talk: Living with AD(H)D in infosec

I can be engaged to do a talk or join a panel on neurodiversity, inclusion and ADHD built on my own journey from being diagnosed at the age of 44 after a long career in infosec.

The talk will focus on my journey and my learnings, I can talk about being an employee and which challenges neurodiverse people usually have in the workplace, what employers should focus on to be more inclusive or whatever is important to you.

In my experience neurodiversity is very widespread in infosec and IT in general so when I do my talk in front of these audiences, it always sparks a lot of talks and personal stories. To me it’s important to educate and inspire. I’ve been so lucky to do this at several conferences around Europe and US where I’ve been invited to talk about this, a subject very dear to me.

Reach out if you’re interested in continuing the conversation.

 

Two decades as an Infosec Professional

My professional journey is driven by a singular mission: leveraging my expertise to enhance individual and organizational comprehension of cybersecurity, emphasizing storytelling, pragmatism, and sound judgment.

How I Work

5

Incident Response Training: Equip businesses with strategies to counteract threats, including ransomware, via immersive role-playing and board games.

5

Community-Centric Marketing: Advocate for community building, value-driven content marketing, and more.

5

Public Speaking & Workshops: A seasoned speaker, I’ve captivated both intimate gatherings and large audiences with enlightening workshops, talks, and seminars.

Work Experience

Where I’ve Worked

Strategic security work across enterprises including Deloitte, KPMG, NCC Group, Pandora, NNIT and others.

What I’ve Built

5

Designed Malware & Monsters, a TTRPG-based incident response training game used at BSides conferences.

5

Co-founded KbhSEC, Copenhagen’s independent infosec practitioner community.

5

Security awareness programme at Pandora, multi-channel, risk-based, global workforce.

5

Co-founder and organiser of BSides København since 2019.

5

Bridged marketing, technology, and community as Head of Community at CrowdSec.

From the blog

Stop Running Boring Incident Response Tabletop Exercises

Stop Running Boring Incident Response Tabletop Exercises

I have seen this scene too many times.A group of people in a meeting room. Coffee on the table. Laptops open. A slide deck on the screen. The title says something like Ransomware Scenario Q2.Someone from security reads the scenario. People nod. A few people answer...

We don't use cookies

Notice there’s no cookie banner here.
That’s intentional and the site is still GDPR-compliant. I chose to avoid cookies and stick to basic, privacy-friendly stats.
Instead of Google Analytics, I use Altcha (altcha.org), an open-source, cookie-free approach.
Result: no annoying popups, and I can still see if people visit.

Everybody wins.