Security and Privacy Incident Response at Ericsson

No ratings

Presented at FirstConferenceKualaLumpur 2018 by

Thomas Grenman

I will set the stage of this presentation by giving a brief introduction on how privacy as well as product incident response is anchored into Ericsson's security reliability model. I describe the internal privacy assessment as well as those mandatory deliverables that are an integral part of the product development process. I also give an overview of the triage process adhered to by Ericsson's Product Security Incident Response Team. With the stage set, I go into detail on how privacy related incidents are handled, managed, and coordinated within Ericsson. I describe the challenges that arise from having critical infrastructure products deployed and operated under almost all conceivable laws and regulations in nearly all available time zones. While some of the products are managed by Ericsson as a service, some product are hosted and run by external parties under a wide variety of service level agreements. I conclude by presenting ways of working and practices that we have found valuable during real-life incidents. I also discus lessons learned and how those lessons have been used to make our processes even more effective.