Why I Attend Cybersecurity Conferences—and What They Bring to Research

I'll be at Infosec World in Orlando October 12–15. For me, cybersecurity conferences are an important part of staying connected to the people and questions behind our research.

Through RSAC, Black Hat, SecureWorld, BSides and company-sponsored events, I spend time in a community where security priorities, technology decisions and communications challenges meet. Black Hat in August was a particularly important part of this year's calendar. Infosec World is the next opportunity to listen and connect.

A research brief often begins with a broad topic: AI security, buyer priorities or employee behaviour. The useful work is turning that topic into a question a defined audience can answer.

What makes a product difficult to evaluate? Which priorities compete for budget? Where might organisational expectations differ from people's reported experiences?

Time in the community helps keep those questions grounded in the issues people are discussing. It also helps identify language worth clarifying before it becomes a survey question.

An interesting conference conversation can inspire a study. It cannot establish how widespread a view is across the market.

That distinction matters. Cybersecurity market research defines the audience, develops neutral questions and investigates the issue systematically. The findings may reinforce an observation or show that experiences differ by role, company context or market.

Cybersecurity marketers need more than broad statements about risk. Useful research can help explain buying criteria, adoption barriers, governance questions and operational priorities.

Those findings may support a timely story for media outreach, a thought-leadership report or executive discussion, product marketing and buyer education, sales conversations about market challenges, and conference presentations and follow-up content.

PR survey research considers these uses early while keeping the questionnaire neutral. Intended use guides the design; it does not dictate the answers.

CISOs, practitioners, IT buyers and employees offer different perspectives. A study should recruit the people qualified to answer its specific question.

B2B market research can qualify professional respondents by relevant responsibilities, company characteristics and decision involvement. Interviews can add depth where a topic needs closer exploration.

I'm looking forward to meeting cybersecurity leaders and marketers in Orlando and discussing where original evidence could be useful.

The goal is to identify questions worth answering—and design research that produces findings people can understand, communicate and use.

Connect with CITE Research to discuss a cybersecurity research question.