Incident Response Evolved - A Preventative Approach to Incident Management

Explore a preventative approach to incident management in this 57-minute conference talk from ANYCon 2017. Delve into the evolving threat landscape, examining historical and current cybersecurity challenges. Analyze notable incidents like QuackBot, SamSam, and the Oak Data Breach, understanding their motives, methods, and timelines. Learn how to enhance your incident response teams through continuous evolution, proper documentation, advanced tools and technology, and relevant education and certifications. Discover the importance of testing your response plan and gain valuable insights to strengthen your organization's cybersecurity posture.

Introduction
Old Threat Landscape
No Destruction
Statistics
Current Landscape
QuackBot
SamSam
Oak Data Breach
OPM
Stolen Data
Former NSA Senior Council
Real World Impact
Motive
How they did it
The time line
What we found
How it happened
Improving your own teams
Continuously evolving
Documentation
Tools Technology
Education and Certification
Test Your Response Plan
Conclusion
Any Questions