ISSA Polska local — Wrocław chapter
ISSA Polska's local chapters run on a deliberately small format — twenty or thirty people in a room, free to attend. I have spoken at the Wrocław chapter five times between 2022 and 2025.
Updated
The format
A meeting is free to attend and runs about a hundred minutes of presentations, workshops and discussion. Every full thirty minutes counts as 0.5 CPE, so an evening is worth two credits. Attendance is twenty to thirty people, and an afterparty follows. The audience is explicitly mixed: people already in IT alongside people planning to enter it. Wrocław sessions have been held at Politechnika Wrocławska, Uniwersytet Ekonomiczny, Uniwersytet Wrocławski, C-16 Technopolis, the Szczytnicka 9 offices and Uniwersytet Dolnośląski DSW.
Talks at the Wrocław chapter
| Date | Talk (Polish) | Subject area |
|---|---|---|
| 7 Dec 2022 | Chore bezpieczeństwo. Co manager zdrowia publicznego wnosi do security | What a public health manager brings to security. |
| 20 Jul 2023 | Skuteczne odnajdywanie informacji i wyciąganie trafnych wniosków czyli jak grać w OSINT | Finding information effectively and drawing sound conclusions in OSINT. |
| 16 Nov 2023 | Modelowanie zagrożeń. «Duże modele językowe (LLMs) na produkcji» | Threat modeling large language models in production. |
| 20 Feb 2025 | Forteca w przestworzach czyli jak chronić latający cyrk | A short presentation about what CloudSec is. |
| 26 Mar 2025 | Storm-2372 przeprowadza kampanię wyłudzania kodu urządzenia | Lightning talk on the Storm-2372 device code phishing campaign. |
Why I keep returning to the local format
This is a personal view rather than anything the chapter claims for itself. A room of twenty is small enough that nothing passes through it unexamined. An audience mixing people already working in IT with people trying to enter the field will not let a mechanism be waved through — the explanation has to hold from first principles or it does not hold at all.
- The CPE structure rewards depth: thirty focused minutes is the unit of value, not a headline.
- A lightning talk slot suits a campaign that is current, where defenders need the shape of it quickly rather than a full treatment.
- Free entry and a university venue widen who is in the room, which changes the questions asked.
- Meeting the same people every month is how a local professional network actually forms.
Frequently asked questions
Are these talks recorded?
No. The ISSA Polska local chapter pages publish agendas only, and no recordings of these five talks exist.
Is there a published abstract for each talk?
No. The chapter agendas list titles and times. The only additional description on record is the note that the February 2025 talk was a short presentation about what CloudSec is.
Related
OSINT exposure awareness
What OSINT reconnaissance actually finds about an organisation and its executives, how AI voice cloning changes the pretext, and the awareness training that measurably reduces exposure.
STRIDE for AI systems
Applying STRIDE to LLM and agentic applications: what each category means when untrusted text can act as instructions, where STRIDE stops covering multi-agent failure modes, and the controls per element.
Multi-cloud baseline
How to express a single set of security requirements — including AI workload guardrails — across Azure, Google Cloud and Alibaba Cloud without maintaining three unrelated standards.
Identity attack paths
Using BloodHound and Entra ID review to find privilege escalation paths across on-premises Active Directory and cloud identity.
AI security assessment
Security assessment of GenAI and LLM systems: prompt injection, tool and agent abuse, data leakage, model supply chain and monitoring gaps.
AI security
How to secure GenAI, LLM and agentic AI systems: current OWASP threat classes, layered controls, agent authority, retrieval isolation and monitoring.