What I Learned From Building A Tabletop Security Exercise

No ratings

Presented at Wild West Hackin Fest 2025 by

Dwayne McDaniel

At DEFCON 32, my team taught over 160 people the limitations of manual code review to solve secrets sprawl. We did not use new tech, we did not use computers or anything that needed electricity. We used paper cards. What we learned along the way was eye opening and changed the way I think about security. This talk is a quick recap of the surprising findings we unexpectedly gathered and the power of getting away from the keyboard. I will reveal my new theory on driving better conversations across teams and roles to actually try and improve security and not just show how clever we are.