The speaker(s)/presenter(s) of the session you are trying to access did not provide permission to record their presentation. Consequently, the video recording is not available.
Incident Response & Forensics
Education Level: Intermediate
3310 - It's Not If, But When: How To Build Out Your Cyber Incident Response Plan and The Art and Science of Incident Response (Workshop Parts 1 & 2)
Wednesday, September 27
10:00 AM - 12:00 PM
Co-Speaker(s)
-
Michael Quinn
Associate Managing Director
Kroll Cyber Security LLC
-
Part 1 - A strong incident response plan is a key component of any organization's cyber defense. Many organizations, however, have an ineffective, or non-existent cyber response plan. We only need to look to the daily news to see the impact that an ineffective cyber response can have on an organization's bottom line. A strong plan can help you identify and respond quickly to a cyber incident, and mitigate the financial and reputational costs. Cybersecurity experts Michael Quinn and Lucie Hayward will talk through the key components of a successful incident response plan. As experienced cyber professionals, they have worked with organizations across all industries to develop and improve their cyber incident response plans.
Part 2 - You’ve identified a possible network compromise. Now what? Is your team ready to respond quickly? Do you know what steps to talk in order to mitigate damage and begin remediation? What decisions need to be made? Do you have the right people at the table? Do you disclose to the public? Are you adequately prepared to handle an insider threat? In this session, we'll talk you through a real-world scenario and help you identify critical decision points and key next steps, both business and technical.
NOTE: In-conference workshops offered this year will have limited seating and will require an attendee to pre-register. If you would like to attend a certain workshop, please register for the workshop during your registration process. Attendees will be checked in at the door, and walk-ups may not be granted access based on limited space.
Learning Objectives:
- Understand the difference between an event and an incident, and why the difference is important.
- Learn out to build out your incident response team (IRT) and who should be included.
- Understand the incident response process—who does what, and when.