Surviving the Attack: Planning and Practicing IoT Security Response
summary
Covers actionable incident response steps: establish an inner circle for staged communications, follow a checklist to identify the compromise source, call vendors and intelligence-sharing groups for forensics, and treat the site like a crime scene to preserve evidence. Notes that 93% of organizations relying on IoT for critical ops have had breaches and gives a low-tech example (guessed password plus mail-forwarding). Emphasizes checking backups before restore, logging recovery steps, and running live play exercises to validate RTOs.
AI-written summary · about
chapters (12)
- 0:00Start
- 0:05Introduction to planning for the worst and ensuring secure business practices.
- 1:21The shift from preventative security to proactive breach response.
- 2:23How customer expectations have changed: now focusing on incident response.
- 2:56Jennifer shares a personal experience of dealing with a cyber attack.
- 3:25The importance of effective communication during a cyber attack.
- 6:25Business continuity vs disaster recovery: understanding their roles.
- 7:57How to identify the source of a compromise and use vendor support.
- 10:36Preserving evidence and documenting everything during a cyber incident.
- 11:04Recovery steps: Check backups and monitor for residual threats.
- 12:06Learning from the incident: how to improve processes for the future.
- 14:06Preparing for future cyber incidents with tabletop and live play exercises.
related talks
54mSOCcing: Responding to a Cyber Incident
25mTrust in the edge, trouble in the cloud
49mTraining for Incident Response: The Red, the Blue, and the Ugly
40mIncident Response – How to Give the Advantage to the Hackers!
40mBuilding a CISO Response Strategy to Advanced Threats
51mLife after the Breach: A Survivor's Guide
17mIoT Archaeology: Dig Security Lessons
50mBuilding Cyber Resilience - Considerations for CISOs