A Day in the Life of a Product Security Incident Response Manager

Explore the role of a Product Security Incident Response Manager in this 21-minute conference talk from BSidesLV 2017. Gain insights into the daily responsibilities, challenges, and best practices of product security incident response. Learn about handling user reports, coordinating vulnerability disclosures, and managing open-source vulnerabilities. Discover why disclosure processes can fail and receive practical advice for improving security incident response. Delivered by Tyler Townes, this talk provides a comprehensive overview of the critical role played by security professionals in protecting products and managing security incidents.

Introduction
Background
What does a PG do
User Reports
Brad Pitt Attack
Vulnerability Reporting
Coordinated Disclosure
Open Source Vulnerability
Why Disclosure Fails
Quick Advice
Outro