9B Breaches and Screams: They Woulda, Coulda, Shoulda,….but Didn’t

No ratings

Presented at COSAC 2015 by

John O'leary

In this full COSAC rules interactive session, we’ll analyze what happened in some notorious and some not so well-known recent security incidents. Calling on the expertise of all delegates in the room, we’ll try to determine what the breached organizations could and should have done to either prevent or limit illicit access and subsequent damage. We’ll cover the before, during and after phases and ask what attending delegates would have done had they been walking in the shoes of the target companies’ responsible person(s). Since some of the cases will still be active, we’ll also ask what appropriate next steps should be for the victim firms. Nobody will get fired or sued or physically punished during this session. We hope that the material covered here will help prevent those things in the future.