Incident Response Planning as a DnD campaign - Ivan Burke | 0xCON 2024 скачать в хорошем качестве

Incident Response Planning as a DnD campaign - Ivan Burke | 0xCON 2024

In an ideal world an incident response plan should capture all the required actions to mitigate, contain and eradicate any threats resulting from a cyber incident. Over the past few years it became clear that these plans need to be robust enough to stand up to real world incidents. Often times these plans contain idealised scenarios with perfectly working systems and resource availability. Unfortunately during a real world incident not everything runs according to these plans. Thus it is good practice to run through various iterations of these scenarios and add an element of uncertainty. Thus in this talk I will discuss how I modelled an incident response scenario to a DnD campaign. By running the scenario as a table top exercise one can implement execute multiple response plans in short succession without relying on tech dependencies or impacting business operations About Ivan: I have been a Cyber Security researcher for over 15 years. As part of my research I have helped develop numerous cyber security incident response plan, recovery plans and doctrine. Our company has also assisted with numerous incident responses on behalf of clients over the last 4 years.