Plays Incident Response
summary
Interactive incident-response exercise that stages a KYC vendor bug leaking other users’ IDs to signups, affecting about 20,000 IDs leaked mostly in the US over weeks. Attendees act as incident commander: declare incident, pull logs, invoke attorney‑client privilege, shut down vendor service and pivot to manual verification as fallback. Walks through vendor contract review, decision RACI, comms cadence for execs/customers, deploying the vendor’s fix, and a postmortem — shows what to do, who to call, and what actually stops the bleed.
AI-written summary · about
chapters (10)
- 0:00Introduction to incident response
- 6:42What is an incident
- 7:24Investigation and containment
- 13:04Service shutdown and legal response
- 16:35Recovery and vendor fixes
- 17:38Communicating with users
- 18:39Remediation lessons learned
- 19:44Postmortem and takeaways
- 21:09Key takeaways summary
- 23:14Q&A and closing
related talks
51mReal World Stories of Incident Response and Threat Intelligence
40mIncident Response – How to Give the Advantage to the Hackers!
32mHow to Orchestrate a Cyber Security Incident Tabletop Exercise
27mA Supply Chain Incident of Major Influence in Israel
40mBackdoor Investigation and Incident Response: From Zero to Profit
37mEmbracing the Multi-Party Dilemma: Incident Response Across...
49mTraining for Incident Response: The Red, the Blue, and the Ugly
28mVulnerability Response for Large Open Source Projects