Information pack · Dr. Alexander Krause · Hannover

Information pack for organisers and clients

Choose topics, format and audience. The pack sums up what I offer on them and what it is based on. You can save it as a PDF, and at the end the request is ready as an email.

Information pack · Dr. Alexander Krause

Talk or keynote, 45 minutes, on site, in English

From Phishing to Prompt Injection: Cybersecurity in the Age of AI

Last given on 28 October 2026: Bundesverband Schwimmbad & Wellness e.V. (bsw), bsw-Konferenz plus, Berlin. Programme

I adapt content and depth to your audience: Management.

Talk at the bsw-Konferenz plus in Berlin, October 2026 (photo: Tom Bendix) — bsw-Konferenz plus, Berlin, 28 October 2026Photo: Tom BendixPrint-quality version on request.

Topics

AI security and language models
Language models make phishing cheaper and more convincing. Organisations that use them in-house have to deal with prompt injection and data leaving the company, and need to know what the EU AI Act requires.

Given for

12 May 2026
Mittelstand-Digital Zentrum Franken
FranKI, Online
as part of DAISEC
Programme
6 May 2026
TU Braunschweig
IT-Security Awareness Days (IT-SAD) Sommersemester 2026, Online (WebEx)
as part of DAISEC
Programme Recording
5 May 2026
Transferstelle Cybersicherheit im Mittelstand
KI mAI, Online
as part of DAISEC
Programme
16 April 2026
Handelskammer Hamburg
Webinar, Online
as part of DAISEC
Programme
14 April 2026
Wirtschaftsförderung Region Hannover
KIWI – KI-Netzwerk der Wirtschaftsregion Hannover, Hannover
as part of DAISEC
Programme
12 March 2026
Handwerkskammer Magdeburg
CYBERsicher – Transferstelle Cybersicherheit, Online
as part of DAISEC
Programme

3 more: akrause.de/vortraege.html

Scheduled

11 November 2026
ARGE Beton, KOMZET Bau Bühl
Fortbildung für E-Schein-InhaberInnen und BetoningenieurInnen, Online
as part of DAISEC
Programme
23 November 2026
Agentur für Erwachsenen- und Weiterbildung Niedersachsen (AEWB)
Erwachsenenbildung – stark in Krisen, stärkt in Krisen?!, Online
as part of DAISEC
Programme

I gave the talks marked “as part of DAISEC” for CISPA in the EU-funded Innovation Hub DAISEC, where I am responsible for CISPA's cybersecurity and AI offerings.

Short bio

Dr. Alexander Krause is an independent IT security consultant and researcher at CISPA Helmholtz Center for Information Security. At CISPA's site at Leibniz University Hannover, he conducts research in the TeamUSEC group, supervises Bachelor's and Master's theses, and teaches in the area of usable security. He also serves as an IT security expert in the EU project DAISEC2.0. His research focuses on usable security and privacy: the interaction between security mechanisms and the needs, practices, and limitations of both software professionals and end users. He is the author or co-author of nine scientific publications, including papers at USENIX Security and ACM CCS.

Other lengths or first person in the bio generator

Practical details

What it includes: Conference talk of 20 to 45 minutes, keynote of 30 to 60 minutes, also as an in-house talk or on a panel.
Based in: Hannover. Working in Hannover, Braunschweig, Bremen, Hamburg and across Germany, on site or online, in German and English.
Fee: On quotation, after a short call.
Contact: contact@akrause.deakrause.de

As of 6 November 2026 · akrause.de/vortragsmappe.html

Request a talk

The email is ready. Fill in the details marked with an ellipsis (…).

Request by email

Show email text

Subject: Talk request: From Phishing to Prompt Injection Dear Dr. Krause, we would like to invite you to give a talk. Suggestion from your information pack: “From Phishing to Prompt Injection: Cybersecurity in the Age of AI”. Topics: AI security and language models Format: Talk or keynote, 45 minutes, on site, in English Audience: Management Event: … Date: … Venue: … Attendees: … Kind regards

Nothing is sent until you press send in your mail program. This page transmits nothing.

All topics and formats

The pack above shows one selection. Any of these topics can be requested in any format.

AI security and language models
Language models make phishing cheaper and more convincing. Organisations that use them in-house have to deal with prompt injection and data leaving the company, and need to know what the EU AI Act requires.
Current threat landscape
Ransomware, phishing and attacks through suppliers hit small firms as well as large ones. The question is which threats are real for your sector and which protective measures work with simple means.
Security awareness
Spotting phishing and social engineering, handling passwords and confidential data, communicating securely and working from home. With exercises and real examples.
Passwords and multi-factor authentication
Password policies, MFA and passwordless methods, and how security and usability fit together. It draws on studies of password updates on 111 top-ranked websites and of MFA account recovery.
Secrets in code repositories
API keys, passwords and certificates end up in Git repositories by accident, and deleting the file afterwards is not enough. It draws on my survey of 109 developers and on the duties a leak can trigger under the GDPR and NIS2.
Secure software development
Building security into the development process, from requirements through code review to deployment. For development teams, with exercises on secure coding and authentication.
Cryptographic updates and the move to post-quantum
Why replacing cryptographic code is so often difficult in practice and what that means for the move to post-quantum cryptography. It draws on my interview study with 21 experienced software developers.
Usable security
A security measure that gets in the way of daily work gets bypassed. Using my own studies, I show where processes leave users and developers on their own and how to build them better.
NIS2 and GDPR
Whether your organisation falls under NIS2, what NIS2 and the GDPR require technically and organisationally, and which deadlines apply.
Security concepts, BSI IT-Grundschutz and ISO 27001
From the current state through threat modelling and risk assessment to an action plan your team can work with. If you like, with a view to ISO 27001 or BSI IT-Grundschutz certification.
Handling security incidents
How to prepare for an incident and what to do afterwards: playbooks, communication and the review once it is over.
Formats
- Talk or keynote: 20 minutes, 45 minutes, 60 minutes. Conference talk of 20 to 45 minutes, keynote of 30 to 60 minutes, also as an in-house talk or on a panel.
- Training or workshop: Briefing, 2 to 3 hours, half day, full day. With practical exercises and examples, handouts for every participant and, if you like, a follow-up session after four to six weeks.
- Consulting or security concept: IT security consulting, Security concept, Scoping and reviewing a pentest. Consulting, a security concept or support with a pentest, depending on what you need.
- First call: 30 to 60 minutes. We talk about your situation and what you need. Afterwards you receive a quotation.