Make It Fixable

Explore a comprehensive conference talk on preparing organizations to effectively handle vulnerability reports. Delve into common challenges faced in this process and learn strategies to overcome them. Examine various scenarios including Internet of Things security, custom-built systems, framework vulnerabilities, and operating system issues. Discover how to address problems when development teams are no longer available, the importance of treating IT as a core business function, and the complexities of back-sourcing. Gain insights on improving user experience, managing vulnerabilities, and dealing with backup failures. Discuss the impact of office politics, the need for security hotlines, and the importance of building trust. Learn why "less is more" in security, and why everyone's expertise matters. Leave with practical ideas to enhance your organization's ability to receive and act on vulnerability reports effectively.

Intro
Make It Fixable
Patricia Aas
Outline
System
Internet of Things
Build it yourself
Get the fix
Framework avalanche
Operating systems
Examples
How did people deal with these
The team is gone
IT is our business
Take it on
Back sourcing
User experience
Vulnerability
Live It
Backup Fail
My Boss Made Me Do It
What If
AntiCrack
Why didnt you say anything
Office politics
Security Hotline
Unfortunate Screen
Make Less is More
Be Careful
Trust
Everyone is an Expert
So these were the challenges
Hopefully you have ideas
Thats my talk