Security vs Ops - Bridging the Gap

Explore the critical topic of bridging the gap between security and operations teams in this 27-minute conference talk from Derbycon 2016. Delve into the root causes of conflicts between these departments, including poor staff structure and misaligned goals. Learn practical suggestions for improving collaboration, such as restructuring teams, clarifying responsibilities, and implementing signed policies. Discover strategies for handling common scenarios like new application installations and security tool implementations. Gain valuable insights and additional tips to foster a more cohesive and effective relationship between security and operations teams in your organization.

Bridging the Gap
So what are the causes?
Issue #1 - Bad Staff Structure
Suggestion #1 - Align Staff Structure
– Each Group Has Different Goals
Align or Merge Goals
Who is doing what?
Get signed policies
Patching and Secure Configuration
Suggested Solutions
Ops installs new application or Capability
Security implements new tool/process
ADDITIONAL TIPS