The Challenges Of Remediation During A Cyber Incident
summary
Argues remediation is an umbrella process distinct from eradication, warns organizations should expect remediation to cost roughly as much as investigation, and shows how weak asset visibility and missing controls cause failures. Uses the OPM breach timeline where two threat actor groups overlap, a missing MFA rollout and incomplete CMDB let a second actor persist and expose 21.5 million records. Calls out no remediation framework and lack of practical training as solvable gaps.
AI-written summary · about
chapters (6)
- 0:00About me
- 0:59What is remediation?
- 1:54Strategic challenges
- 4:18Technical challenges
- 7:12Challenges of remediation: case study
- 9:51Broader industry challenges
related talks
22mTreat the Problems, Not the Symptoms
30mThe **** we've seen
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
27mThe Offensive Approach to Cybersecurity
33mFrom Boardrooms to Polling Places: Securing Critical Infrastructure in 2024
32mIs Vulnerability Management Dead? A Security Architect’s...
51mRemediation-Aware Reachability: Patching Containers, Prioritizing with Agentic-CTI, and Scaling...
29mFighting Back Without Hacking Back: Why “Risk Management” Isn’t Enough In The Era of Cyber War