Skip to content
← Insights

The Untold Story of The Atlantic Security Conference: Reframing the Cybersecurity Talent Landscape

March 19, 2026 · 5 min read

AI Summary
Generating summary…

Fifteen years ago, there were doubts that Atlantic Canada had a cybersecurity community large enough to sustain a conference. What happened next shows what communities can achieve once momentum begins.

When the first ATLSECCON was organized in 2011, the question that surfaced again and again was, "is there enough here?" Enough talent, enough interest, enough organizations to make it worthwhile? The implicit assumption behind the question was that serious cybersecurity conferences, programs and even careers only happened outside of our eastern shores. Atlantic Canada was a place people left when they wanted to build those careers.

Forty-two people came to that first conference in Halifax, Nova Scotia. By the following year over 120 showed up. This year, ATLSECCON will draw approximately 1,700 attendees. The talent was always here; the question was whether anyone would build the infrastructure to surface it, connect it, and enable it to grow.

Building What Mattered

ATLSECCON was never just a conference. From the beginning, the intent was to create a gravity point for the Atlantic cybersecurity community regardless of your starting point. A place where a first-year computer science student and a CISO could both walk away having learned something.

It was priced to be financially accessible and programmed to include first-time speakers alongside experienced practitioners. A space was created for conversations that do not always happen in corporate contexts: honest discussions about what was not working, what people were afraid to try, and lessons learned from failures that could not be shared internally.

Today's attendees extend well beyond Atlantic Canada with professionals across Canada, and even south of the border, making the trip to Halifax and bringing their teams because they know this conversation is worth it.

A Community Hard at Work

The ATLSECCON alumni network is not formally tracked; however, over 15 years the patterns are visible. People who gave their first presentation are now leading cybersecurity programs at major Canadian organizations. Students who attended through subsidized tickets are now the practitioners those same organizations rely on.

The value of a cybersecurity community may be difficult to quantify, but its impact is unmistakable. When practitioners know each other across organizational boundaries, threat intelligence moves faster. When students connect with mentors through community events, career development accelerates. When local talent can see viable career paths in the region, retention improves. Community isn't a byproduct — it's infrastructure.

None of this happened because of a workforce development strategy or a government program, though both have their place. It happened because a group of people decided to build something and continued to build it, year after year.

What's Next

The ATLSECCON story is not one of regional pride but instead a proof of concept. Rather than accept an assumption, test it. The talent is there, the question is whether the infrastructure to activate it exists alongside it. ATLSECCON started with volunteer effort, community goodwill and a conviction that the gap in cybersecurity conversations was worth fixing. Fifteen years and 1,500 annual attendees later, the conversations are now viral.

The 2026 edition of ATLSECCON runs April 9th and 10th in Halifax, Nova Scotia. This will be the fifteenth conference in a series that started with 42 people and the question of whether anyone would show up; they showed up and kept showing up. The cybersecurity talent story of Atlantic Canada is still being written by the people in those rooms.

If you have not been, I hope to see you there.

You cannot fully predict the incident that will test your organization. You can absolutely control the quality of the people, processes, and authority structures that respond to it. That preparation is the difference between organizations that recover in days and those that recover in quarters.

Next Step

Ready to strengthen your organization's resilience?

A 30-minute discovery call to discuss your cybersecurity posture, incident readiness, and whether advisory support is the right fit.