Travis R BarlowCybersecurity Executive Advisor · VP Enterprise Resilience Services, CyberShell
When a breach becomes a board crisis at 2 a.m., the organizations I work with already know what to do.
Executive advisor for cyber resilience and incident readiness. 26 years, 600+ incident response engagements, founder of AtlSecCon.
Track record
26
Years in cybersecurity
600+
Incident response engagements
1,700+
AtlSecCon attendees each year
Travis has spent 26 years making organizations — and the security community itself — genuinely safer. As VP of Enterprise Resilience Services at CyberShell, he leads advisory programs for leadership teams navigating the incidents that define the modern threat landscape. His track record spans 600+ incident response engagements, executive roles at KPMG Canada and GoSecure, and more than a decade building AtlSecCon into one of Canada's most inclusive security conferences.
What I do
Advisory
Executive and board-level guidance
Crisis readiness, resilience strategy, and the decisions leadership teams have to make under pressure.
Learn more →Speaking
Keynotes and executive sessions
Cyber resilience, incident leadership, AI-era security strategy, and building community that lasts.
Book Travis →Tools
Service gap analyzers
Score what your managed provider actually delivers against what you are paying for, in under an hour.
See the tools →What leaders say
"Travis brings a rare combination of executive presence and deep technical credibility. His guidance during our incident was invaluable."
"His framework for cyber resilience gave our board the clarity they needed to make informed risk decisions."
Latest insights
Code Got Cheap. Trust Didn't.
GitHub took 7.4 billion commits in September, five times a year earlier, and kept falling over. AI didn't kill the need for engineering. It moved the bottleneck from writing code to trusting it.
5 min readAfter the Arrest: What Dubrovsky Changes
ShinyHunters' biggest complaint this year wasn't the FBI. It was a response firm telling victims not to pay. Three weeks after Ed Dubrovsky's arrest, here's what the reporting confirms and what to change before your next incident.
5 min readBy the Time CISA Says It, You're Late
PHP2Shell went from "no confirmed exploitation" to a CISA deadline in six days. If your patch process waits for that confirmation, the process is the vulnerability.
6 min read