Agile Incident Response - A Faster and More Effective Answer to Cyber Breaches

No ratings

Presented at BsidesOttawa 2016 by

Robert Beggs

Most organizations begin their response to a cyber breach when it is discovered; because they spend little time in preparation, and the detection controls that focus on their specific threats, their response is inadequate, time-consuming, and costly. When you consider that up to 40% of organizations undergoing a penetration test have been found to have been previously breached - and didn't know it - it becomes clear that organizations adopting a reactive approach have lost the initiative to attackers. Agile Incident Response is a framework that addresses this short-coming by implementing a coordinated program of proactive and post-response measures that are designed to provide a rapid resolution of cyber breaches. During this talk, we will review how your organization can implement these measures. Attendees will learn proven success factors, including the elements of an incident response plan, new tools and technologies to assist in the response, how to use third parties to their advantage, and effective training techniques. A white paper describing the AIM Framework will be released as part of the presentation.