The CISO is Dead, Now What ?
summary
Claims a repeatable method for building DR/IR/BCP exercises: define clear goals, ban production, inject randomness with dice/envelopes or simulate randomness via AWS triggers, automate scenario playback, and rotate real backups so key roles have substitutes. Cites impact metrics—outages cost hundreds to hundreds of thousands per minute, 4% productivity loss, 30% permanent data loss, 72.7% faced ransomware—so exercises include finance legal PR and expect to fail and learn to win management buy‑in.
AI-written summary · about
chapters (8)
- 0:00Introduction and Speaker Backgrounds
- 1:06Overview of Today's Topics
- 1:30Key Terminology Explained
- 3:30Developing Quality Simulations
- 8:56Introducing Randomness in Exercises
- 12:51Gaining Management Buy-In
- 18:20Including Other Teams in Exercises
- 21:36Conclusion and Final Thoughts
related talks
50mBuilding Cyber Resilience - Considerations for CISOs
35mDefeating Ransomware Attacks
32mHow to Orchestrate a Cyber Security Incident Tabletop Exercise
48mSecuring Buy-In for Security Budgets
02h 11mCISO Track Panel
20mCalcifying Crisis Readiness
45mBuilding Your Roadmap to Cyber Resilience – Five Things You Can Do Today
41mMore Than Backups and Hope