How to prevent cyber-attack, & what to do when attacked?
summary
Argues companies need a written strategy, risk analysis and enforced policies rather than ad hoc fixes, citing the Kaseya supply-chain ransomware and PrintNightmare incidents and a German hospital fatality; prescribes 2FA everywhere, disk encryption (AES-256), enterprise anti‑malware, HIBP monitoring and 12–16+ character passwords; recommends formal BYOD and remote‑work rules, red/blue/purple team exercises, incident-response roles and postmortems, and promises a GitHub checklist of "10 steps to cybersecurity" and hands‑on tests to validate controls.
AI-written summary · about
chapters (14)
- 0:00Start
- 4:58Recent attacks
- 9:15Increasing range and frequency
- 12:29Strategy
- 17:39Planning
- 21:10Policies and execution
- 28:56Security exercises and testing
- 32:31Red vs. Blue team
- 35:28Check yourself please
- 39:17What if?
- 41:13What is a cyber security incident?
- 43:57What is incident response team?
- 44:43Incident response team roles
- 49:42Awareness
related talks
01h 00mProtect your assets: A data protection and cyber resiliency panel
40mIncident Response – How to Give the Advantage to the Hackers!
51mSurvive the Breach-Protecting People & the Company When the Worst Happens
40mMulti-Front War: Mitigating Cyber Risk and Maximizing Security
40mJustified Insomnia – Protecting against Lazy and Sophisticated Cyber Criminals
27mReality Check: Cybersecurity’s Story
20mOpening Keynote
01h 14mKeynote: Our Secure Future