A Few Things Right - Insights from Live and Simulated Incident Response

Explore insights from live and simulated incident response in this conference talk from Circle City Con 2019. Discover the power of simulations as tools for cybersecurity preparedness, starting with visualizing insider threats and outsiders with insider credentials. Learn the importance of designing processes that encourage restraint in initial incident communications. Focus on identifying weaknesses and using accurate threat models. Understand the challenges of balancing quantitative and qualitative aspects of incident response. Gain practical tips on improving your incident response strategies and embracing the inevitability of unplanned events. Compare cybersecurity approaches with resilience-focused methodologies to enhance your organization's preparedness for potential security incidents.

Intro
Live and Simulated Incident Response
Simulations are powerful tools.
A Great Starting Simulation: Visualize the possibility of insider threats or outsiders with insider credentials.
Don't forget to design processes that encourage the use of restraint when first communicating with anyone about incidents
Don't forget: focus on weaknesses. . Don't forget: use accurate threat models.
Incident Response The quantitative side is easy compared to the qualitative side
Why Does It Matter?
How You Can Do It WAY Better Thani Did
Acceptance Embracing the inevitable: Unplanned events will happen but we can be prepared
Cybersecurity versus Resilience