Nick Klein is a founder and Executive Director of CyberCX, where he leads the Digital Forensics & Incident Response practice (DFIR).
Nick is an internationally recognised expert and industry leader with over 25 years of experience in cyber security, with a speciality in digital forensic investigations and cyber breach response. His team at CyberCX helps clients respond to hundreds of cyber incidents every year, from malware outbreaks to destructive cybercrimes involving ransomware, data theft and extortion, to sophisticated intrusions into sensitive networks by foreign nation state actors. Nick also has deep expertise in traditional digital forensic investigations, including presenting expert evidence and testimony in criminal and civil proceedings across Australia and internationally for over 20 years.
Nick leverages his technical expertise and practical experience to regularly guide senior executives and boards through the strategic challenges they face during major cyber incidents, including response coordination, forensic investigation, threat hunting, engagement with cyber criminals, ransomware negotiations, stakeholder management, crisis communications and collaboration with law enforcement and other government agencies.
His personal experience includes roles within government, industry and consulting, including with the Australian Federal Police where he worked on international police investigations and intelligence operations including counter terrorism, computer hacking, and traditional crimes facilitated by new technologies.
As a Certified Instructor with the SANS Institute, Nick has also taught advanced digital forensics, incident response and threat hunting to hundreds of students around the world over many years, and spoken at numerous international events, sharing his knowledge and experience based on his years of hands-on technical work.
Nick has personally advised boards and executives on some of the most significant and complex cyber incidents in modern times. Through his coal-face experience, Nick provides unique insight into what actually occurs during a cyber incident, and detailed understanding of threat actors, their attack methods, and the most effective ways to prevent and respond.