Communicating Security Incidents: Best Practices and Regulatory Considerations

Explore best practices for communicating about cybersecurity incidents in this 35-minute SANS DFIR Summit 2024 talk. Delve into the challenges of incident reporting in an era where cybersecurity has become a major news topic and regulatory landscape is rapidly evolving. Learn how to effectively share information about network compromises, considering timing, audience, and compliance requirements. Examine case studies to understand internal and external communication strategies before, during, and after an incident. Gain insights on adapting your approach to meet changing regulations and security needs. Leave equipped with strategies to inform stakeholders, regulators, and the public during security events, preventing them from escalating into crises.

The Tortured Responders Department: Scott & Rebekah's Version