FIRSTCON21 - June 9 | Stream 3 (12:00-14:15 UTC)
summary
Three short, concrete takeaways to pick tonight: a Japanese CSIRT survey finds 90% prepared BCP but ~80% needed extra measures and only 10% had remote incident hunting (training 5%), so expect operational gaps and checklists; threat briefings that win CISO support use a 40–70 word concise analysis with IOCs, CVEs, impact and a 3‑minute briefing to request decisions and resources; a hospital incident shows lateral pivot through a shared provider, 80+ stakeholders, a three‑week cleanup with missed scoping and provider missteps; and a production tool — Dispatch on GitHub — automates engagement, tactical CA N reports, and reduced toil at Netflix.
AI-written summary · about
chapters (5)
- 0:00Start
- 1:09Considerations in CSIRT Activities in the Risk of Infection with New Real Viruses
- 27:41Gaining CISO Support and Improving Security Operations Situational Awareness with Threat Briefings
- 1:13:40From a Hospital into the Realm of Hades
- 1:42:40Dispatch: Crisis Management Automation for the Entire Organization
related talks
14mClosing + CTF Wrap Up
37mMore Than a CSIRT: Lessons Learned from Supporting a National Response to COVID-19
25mConsiderations in CSIRT Activities in the Risk of Infection with New Real Viruses
51mReal World Stories of Incident Response and Threat Intelligence
46mCISO Series Podcast - LIVE!
20mCalcifying Crisis Readiness
44mFireside chat
09mOpening Remarks + CTF Overview