Piloting Through Cybersecurity

No ratings

Presented at SecureWorldDallas 2019 by

Piloting through Security – Using pilot skills and techniques to secure your world against cyber threats.• Use Checklists – Develop both Emergency and Normal operations checklists and then use those to develop standard operating procedures.o Runbook developmento Incident Management guide and artifacto Change Management guide and artifact• Fly the Plane! Secure the Environment! – During an incident don’t get distracted by finding the cause. Secure the environment first. Then when its safe do the research.• PAVE: A Personal Minimums Checklist for Risk Managemento Personal – I ‘M SAFE (Illness, Medication, Stress, Alcohol, Fatigue, Emotion)o Aircraft (Infrastructure, apps, and tools)o Environment (Situational Awareness)o External Pressures (Customers, Executive Leadership, Board, regulators)• “Flying is hours and hours of boredom sprinkled with a few seconds of sheer terror” – Pappy Boyingtono Don’t let repetition lull you into a sense of complacency with your security program.• Spatial Disorientation and trusting your instrumentso Cross-check your tools to confirm what they are sayingo Trust what your tools are telling you• Big Sky Theory – Two randomly flying bodies (little airplanes) are very unlikely to collide, as the three-dimensional space is so large relative to the bodies.• Situational Awareness “See and Be Seen”, “See and Avoid”