RIO 2016 OLYMPIC CSIRT - CREATION, OPERATION AND LESSONS LEARNED

No ratings

Presented at First 2017 by

Romulo Rocha

Romulo Rocha was part of Rio 2016 Olympic Committee, being responsible for designing,building and acting as incident response leader in CSIRT during olympic games. Romulo has technical knowledge in incident response, data analysis and architecture of IT environments. Graduated in System analysis and development with post-graduation in information security at UFRJ (Rio Federal University), been part of Information Security market for 10 years, working in multiples companies in Brazil. This is a talk filled with good stories about our journey to establish a CSIRT team for Rio 2016 Olympic Games. A big and ambitious project, with multiple challenges, and a very limited time to put it alive. The participants will see how was our operations during Olympics, photos from our Technology Operations Center, number of incidents, examples of incidents, threat intel timeline and lessons learned from this athletic journey. This presentation provides insights on: How was our strategy to put our team ready for the games; CSIRT timeline (creation, important dates, highlights, life cycle); Our preparation using Cyber Wargames exercises; Challenges when dealing with rapid environment growth, government agencies, and third-party companies; Threat intel timeline and importance for our CSIRT; Lessons learned;