Arcades and Audits - What Gaming Can Do for Your Security Posture

Explore how gamification can revolutionize security posture and disaster preparedness in this engaging conference talk from BSidesSF 2019. Discover the surprising connection between arcade games and improved operational resilience as the speaker combines research on gaming's cognitive benefits with real-world experience in organizing security events. Learn how to leverage NIST standards and create immersive exercises that transform dull disaster recovery audits into engaging, memorable experiences. Gain valuable insights into best practices for developing effective operational resiliency roadmaps while making the process enjoyable for operations, engineering, and security teams alike. Understand the psychology behind gamification and its applications for both red and blue teams, ultimately enhancing your organization's ability to respond to catastrophic events.

Introduction
Storytime
Fire
Uptime
Disasters
Business Continuity Disaster Recovery Plan
Business Continuity vs Disaster Recovery
Recovery Time Objective
RTO
Example
Authentication
NIST Standards
Tabletop Exercises
Functional Exercises
Tabletop Exercise
Video Games Play That Can Do Serious Good
Biasing Decisions
Best Practices
Summary
Questions