Robust Defense for the Rest of Us

Explore effective cybersecurity strategies for small organizations in this BSidesLV conference talk. Learn how hackers defend their networks and discover why size and budget don't necessarily equate to better information security. Gain insights into affordable robust defense techniques, including perimeter protection, geo protection, network segmentation, and user-level protections. Understand the importance of management commitment, flexible policies, and homefield advantage in smaller organizations. Delve into practical aspects such as patching, network and system monitoring, daily ticket reviews, configuration management, and vulnerability scanning. Discover how to implement instant response protocols and secure remote access. Benefit from a real-world case study and conclude with actionable steps to enhance your organization's cybersecurity posture, regardless of its size or budget constraints.

Intro
How to hackers defend their networks
Size and budget dont equal better information security
Small organizations can afford a robust defense
About me
Large organizations have silos
Large companies outsource
Smaller organizations
Management commitment
Policies and procedures
Flexible and adaptable
Homefield advantage
Case study
Perimeter protection
Geo protection
Network segmentation
Default deny
User level protections
Patching
Network Monitoring
System Monitoring
Daily Ticket Reviews
Configuration Management
Vulnerability Scanning
Instant Response
Conclusion
Remote Access