Cyber Security Trainings
Milena-Mercedes May
Cyber Security Trainings
With a background in Software Engineering, I am focusing on Cyber Security nowadays.
Growing excellence in this cross cutting concern, I support leadership building high performing teams by training them to become more resilient to cyber attacks.
While deepening my own education by pursuing a master's degree in cyber security, I am sharing my learnings in this constantly evolving field that is currently challenged by the recent development in the context of AI.
Backdoors and Breaches
Goal: Raise Cyber Security Awareness
If you want to find out how a D20 can help your team to level up their cyber security knowledge, book my Backdoors and Breaches workshop!
It’s a fun and lightweight activity that sparks conversations around cyber security defense. Every scenario is unique as the participants‘ knowledge shapes this experience. The participants play as a team with a constrained number of actions and work together to handle a security incident.
This training is a good opportunity for your team to meet onsite and expand their knowledge off-screen. There's also the option to play this game in a remote setup.
You team will leave this workshop with new insights about how to protect their systems — playfully.
-
For technical roles like Security Engineers, Dev(Sec)Ops Engineers, Software Engineers...
-
One or two hours
-
Raise Cyber Security Awareness playfully
-
As an onsite team building activity – or in a remote setup
Threat Modeling with Attack Trees
Goal: Challenge Your Security Strategy
Starting with Threat Modeling doesn't have to be hard: put your team in one room, provide them with pens, loads of sticky notes and a big blank wall and let me activate their criminal minds.
With Attack Trees, the team members first assume the role of an attacker, brainstorming pathways to infiltrate, manipulate and destroy the systems they are building.
After acknowledging their vulnarabilities they then take the opposite position, proposing technical or organisational measures to avoid or detect the before mentioned attack pathways.
If you are unsure of your Security Strategy, this workshop can support you in revising it as a collobarative kickoff meeting.
-
For technical roles like Security Engineers, Dev(Sec)Ops Engineers, Software Engineers...
-
One morning or afternoon
-
Collaborate on creating your system's attack tree
-
Best onsite before a big blank wall to bring your team on the same page
EXIN AI Security Professional
Goal: Train AI Specific Security Engineering
Coming soon: Based on the materials of the OWASP AI Exchange, your team will learn the following topics. If you wish, they can also earn the EXIN certificate to ensure their learning outcome.
The EXIN ASIP certification was launched in September 2026 and uses the open standard by the OWASP AI Exchange, that is already shaping ISO and EU AI Act security guidance worldwide.
-
For technical roles like Security Engineers, Dev(Sec)Ops Engineers, Software Engineers...
-
Multiple days / sessions, remote or onsite
-
Organizing AI security in the enterprise
-
Threat modeling and agentic AI risk
-
Recognizing input, development, and runtime threats
-
Implementing AI security controls
-
Testing AI systems for security
-
Privacy, compliance, and regulation