


Preparedness Through Practice
Resilience comes from repetition and reflection. CCS designs and facilitates tabletop exercises and full-scale simulations that bring your cyber incident response plans to life. These immersive scenarios are based on real-world threats and industry case studies, helping participants make time-critical decisions, communicate under pressure, and collaborate effectively across business units. Every exercise ends with actionable insights — not just reports — ensuring lessons translate directly into improvement.

Response Frameworks That Work When it Matters
CCS helps organisations move beyond static documentation by developing response frameworks and playbooks that are intuitive, role-based, and ready for activation. These living documents guide teams through detection, containment, communication, and recovery in language that’s clear under stress. Whether refining an existing plan or building one from scratch, CCS ensures your documentation and teams are aligned — in theory and in practice.

Strong Leadership & Communication Under Pressure
Even the best plans falter without confident leadership. Our resilience programs include executive coaching and media response workshops, giving leaders the skills to communicate calmly and credibly when stakes are high. Participants learn how to brief boards, regulators, and the public with accuracy and composure — maintaining trust while guiding their teams through uncertainty.

Learning From Incidents to Build Long Term Strength
Resilience is continuous. CCS supports organisations in conducting after-action reviews and maturity assessments that turn incidents into catalysts for improvement. We analyse what worked, where gaps appeared, and how behavioural or procedural adjustments can prevent recurrence. This cycle of reflection embeds a learning mindset that evolves with emerging threats.

Embedding Readiness Into Organisational DNA
True readiness is cultural, not procedural. CCS helps integrate preparedness practices into everyday operations — from leadership messaging and risk communication to staff engagement and scenario refresh cycles. Over time, readiness becomes part of how people think, plan, and act. The result: an organisation that doesn’t just survive disruption but grows stronger because of it.
CCS
resilience & readiness
When incidents happen, technology responds — but people recover.
Our Resilience & Readiness services prepare organisations to handle disruption with confidence, coordination, and clarity. Cybersecurity desktop exercises form the heart of this approach, acting as realistic simulations that test and strengthen your ability to respond to real-world threats. These exercises create a safe, controlled environment to evaluate and refine incident response protocols — exposing gaps in people, processes, and technology before an actual crisis does.
By linking the Incident Response Plan (IRP) with the Business Continuity Plan (BCP), CCS ensures every part of the organisation knows its role when the unexpected happens. Beyond technical readiness, these programs cultivate a culture of alertness and accountability, helping teams internalise cyber resilience as a shared responsibility that protects operations, reputation, and stakeholder trust in an increasingly hostile digital landscape.
other services
culture services
At CCS, we believe cybersecurity starts with culture—not just technology. Our Culture Services are designed to transform organisations into proactive, resilient defenders, by embedding security-awareness behaviours across every level. From outsourced awareness programs and cyber champions, to maturity models, diagnostics, and leadership development, we deliver industry-leading, intelligence-driven security culture solutions that adapt, scale, and evolve with your organisation.
resilience & readiness
We don’t just teach cybersecurity — we embed it. Our programs go beyond awareness to apply behavioural science, role-based skills, and real-world simulation so your people become active defenders. From organisation-wide cyber education to phishing resilience, executive security and BEC prevention training, we deliver expert, evidence-based learning designed for impact in a dynamic security landscape.
education & training
Security is only as strong as the people behind it. Our Education & Training offerings go far beyond generic awareness—each program is crafted with behavioural science, gamification, and role-specific learning to turn your workforce into your first line of defence. Whether you need organisation-wide cyber awareness, intensive phishing resilience, executive protection (VAPs), or BEC fraud defence, we deliver expert, modern training that empowers teams to act with confidence in a dynamic threat landscape.
managed services
We help organisations go beyond prevention—building resilience and readiness to respond. Our services include desktop cyber-exercises, incident response planning, managed phishing, dark market scanning, and change management. These programs are designed to test, harden, and align your people, processes, and systems, so when inevitable threats arrive, you are agile, prepared, and confident.
WHAT CLIENTS SAY
CCS were engaged as part of our overall security awareness strategy and organisational cultural change program. Their collaboration in the development of the awareness materials clearly showed their intent to customise the training to ensure the best outcome for our organisation. The feedback from the staff who attended the training was resoundingly positive and this reflected not only the deep level of expertise CCS has in this area, but also the quality in the delivery of the training. I would not hesitate to engage them again.
Lachlan McGill from Healthscope
WHAT CLIENTS SAY
If you want to learn to communicate clearly with your executive and board, be respected as a security leader and learn how you can add value to your organisation as I did then this was a really great workshop! Many times I attend trainings and leave with great product information but no concrete practical ideas. I love that I am going back with ideas I will implement right away.
Matthew Mulligan from Adventist
WHAT CLIENTS SAY
I had attended a seminar where Brian had spoken before and thought the staff and company would benefit from the training and his down to earth explanation of computer terms and cyber threats. We had a broad range of staff attend, from those just starting in the work force to those nearing retirement and they all found the content insightful and the presentation engaging. I had 2 staff personally thank me for arranging the training. I would recommend this training to any organisation regardless of their size.
Matthew Costello from Apprenticeship's Queensland
WHAT CLIENTS SAY
Brian has the ability to connect with people of all backgrounds and translate the complicated world of cyber risk into "plain speak". This ability has made him very effective in significantly improving awareness and culture in our organisation.
Mark Nix from Eagers Automotive
WHAT CLIENTS SAY
I have been fortunate to see Brian present at several events over the past few years. Brian is passionate about cyber security which clearly resonates with his audience. He has a relaxed delivery and presents highly interesting content, that connects with, and captures the attention of those in attendance. We have had Brian present to management and staff within our organisation on a couple of occasions. Without a doubt these sessions have been very well received and resulted in tremendous feedback
Jamie Delacey from Attune Hearing
WHAT CLIENTS SAY
Brian's presentation was insightful, engaging and most importantly made a lasting difference for our audience at the recent Cyber Security Asia event in Cambodia. He has the ability to explain complex emerging cyber threats in straight forward and practical terms that can be strategically applied by both executives and general staff. It is rare that a speaker makes such a lasting impression but Brian has done just that!
Thomvell, Kuala Lumpur, Malaysia
WHAT CLIENTS SAY
James has provided House Call Doctor, an after hours doctor service, with valuable insights that have allowed our business to successfully manage a rapid growth phase over. Since commencing in April 2015, House Call Doctor is proud to have become Queensland’s largest after-hours GP service. James has helped guide our organisational culture and provided one-on-one coaching to the leadership team, to support continued high performance and strategic decision making.
Wayne from House Call Doctor
WHAT CLIENTS SAY
James is engaging, pealing back the layers of emotion, and how and why decisions are made.
Mark Roberts, Sales Manager
WHAT CLIENTS SAY
Working with James Carlopio recently was amazing and I can highly recommend his coaching skills. His ability to encourage and guide you, whilst allowing you to find the solution(s) to the issues yourself, is enlightening and empowering. As a Psychologist myself, it is often difficult to self-analyse and having James’ skillset of being perceptive and sharp yet approachable was invaluable in assisting me to gain focus on where I wanted my career to transition to. James’ extensive experience is clearly evident through his everyday demeanour, execution and delivery. I would highly recommend James’ coaching or counselling skills. If you require guidance or assistance, either personally or for business, I would encourage you to contact James directly.
Genevieve Colling
WHAT CLIENTS SAY
To whom it may concern,
Please be advised that Brian Hay has spoken at a number of functions for clients of Hall Chadwick in Queensland and at the Hall Chadwick national conference on his area of expertise. He has a thorough knowledge of cyber security and related matters. We found his presentations relevant and of great assistance to our clients and staff. He was able to make them practical given his wealth of experience. We recommend Brian highly as a speaker to any business or groups who require assistance in his area of expertise.
I would be happy to take any contact from any person who was considering engaging with Brian Hay or his company, Cultural Cyber Security Pty Ltd.
Brendan Vaughan, Hall Chadwick
WHAT CLIENTS SAY
We have worked with Brian since 2018 in a program designed to increase our Cyber Security awareness and improve our culture. To achieve this Brian has made around 20 presentations to diverse groups across our organisation ranging from frontline staff to C Level Execs. These have been general updates on emerging cyber threats and also targeted to specific groups, such as Payroll and People and Culture, which focussed on specific threats that they may face in their day to day work. Feedback to these sessions has been excellent and Brian presented them with the right balance of humour and education drawing on his vast experience as a Cyber Security Expert. Personally I have also shared platforms with him at AUSCert in a wide ranging discussion on cyber security issues which were also extremely well received.
Laurie Joyce, Australian Red Cross Lifeblood
WHAT CLIENTS SAY
Thank you again for putting this presentation on for us. The staff have been incredibly impressed and grateful as a result of being exposed to this very important topic. They are still “buzzing” today in awe of the content and presenter! There were 111 people who were able to experience this presentation and I have received 70 feedback forms so far. This is brilliant as a lot of the staff don’t access their emails on a daily basis. A lot of staff have asked if it was recorded as they would love to view it again!
Online Cyber Safety Presentation Feedback
WHAT CLIENTS SAY
We have been working with Brian Hay and Cultural Cyber Security to develop and deliver our cyber safety program for almost twelve months. This commenced with a series of interviews across the organisation to establish a baseline of cyber safety knowledge across a sample of our employees which has then been used to develop a targeted program. The program has included face to face meetings with various business units at which Brian presented on the reasons why Cyber Safety are important and what our staff can do to keep themselves safe at home and at work. We are about to move into the next phase with some more targeted training rolled out. The feedback from those who have attended the sessions has been fantastic and I have no hesitation in recommending Brian Hay and Cultural Cyber Security as willing and extremely competent partners in delivering these types of cyber safety campaigns.
Laurie Joyce from Australian Red Cross Lifeblood
WHAT CLIENTS SAY
As a fellow event producer with over 18 years experience throughout Europe, America and Australasia, I fully endorse Brian Hay as an excellent keynote speaker. We work with A/NZ CFOs ranging from ASX200 through to all levels of government and the largest not for profits in the region who are notoriously a very ‘tough crowd’, Brian has consistently been our stand out presenter on every occasion. I can not endorse Brian highly enough as he not only bespoke his presentation to our audience and has delivered over 10 outstanding keynotes, but is also genuinely a joy to work and will alway deliver 110% - One of our most recent and important events consisted of over 350 CFOs and Brian was voted the absolute stand out presenter and we look forward to welcoming him back this year.
Richard Mcbride from CFO Series
WHAT CLIENTS SAY
I first met James Carlopio approximately 3-4 months ago, and was immediately impressed by his insight and rational approach on many subjects. As an operator of what is presently a small business, I have found that not having a partner to ‘bounce ideas off’ can sometimes bring about hesitation & procrastination. Consequently, when the opportunity presented itself, without hesitation, I engaged James as my business coach and mentor. In those few short weeks I have noticed an improvement in my approach to a number of matters. Additionally, I find myself looking forward to each session we have together, knowing that my ‘course’ forward is enriched by my new found guide.
Steve Kondra, Sustainable Business Mentor & Blogger
WHAT CLIENTS SAY
My experience with James was nothing short of transformational!
Ash Roy, Business Analyst
WHAT CLIENTS SAY
James is a knowledgeable and experienced trainer. He used his past experience to demonstrate the concepts. I will suggest my husband and friends attend because this brings positive impacts to our lives!
Au-Young Kim Man, Manager, Application Integration Team
WHAT CLIENTS SAY
James is very professional and is a fantastic help with working with me as my business coach. I would recommend James to anyone who would like the direction to be exceptional at what you do. Thank you so much for your time and effort much appreciated.
Melissa Taylor, Business Development Manager
WHAT CLIENTS SAY
Brian Hay has been instrumental in the webinars we have been delivering in our region. His network and knowledge is beyond compare and is always willing to help where and when he can. When it comes to cyber security, he’s your man. Whether the conversation is network, SOC, malware, ransomware, endpoint or operational technology based – he’s very well versed in the greater subject. Due to his extensive network, we have grown our visibility, our database and our business in the region. We are grateful for everything he does, how he conducts himself and the results he gives.
Marie Evans from Nozomi Networks
WHAT CLIENTS SAY
I have had the pleasure of seeing Brian speak on topics of cybersecurity many times over the last several years. He is engaging in a way that makes you want to sit up and listen and take note. He is clearly passionate about the topic and combined with his extensive knowledge and experience in the industry, it makes him a standout speaker on the circuit. I have hired the services of Brian to speak at organisations I work for many times in the past and he has always made a wonderful and lasting impression on staff at all levels.
Lachlan McGill from The Salvation Army
WHAT CLIENTS SAY
We have worked very closely with the team from CCS for several years now. I have found the approach from Brian, James and the team very professional and knowledgeable, with a willingness to always go the extra mile.
Colin Cassell, Manager Security Strategy, Governance and Culture, Australian Retirement Trust