Building and Sustaining an Effective Incident Response Center
summary
How to design and run an incident response center that meets its objectives by integrating feedback loops into the infrastructure. Covers setting up processes and mechanisms to deliver proactive anomaly indicators and timely, actionable information to incident handlers so they can make informed decisions.
AI-written summary · about
chapters (22)
- 0:00Intro
- 0:38Drivers
- 1:16Mission & Vision
- 2:04Constituents & Success factors
- 2:57Threat Actors & Targets
- 4:07Key Challenges
- 5:44Incident Lifecycle
- 6:38Use case development
- 7:33Sustenance & Innovation
- 7:54SOC Governance
- 8:40Foundation Process
- 9:01Team
- 11:56Incident Handler
- 12:39Incident Response Center Framework
- 14:51Time based Security Incident Defense
- 15:28Models
- 16:26Defensible Network
- 17:42Incident Response Maturity Model
- 18:05Optimized & Effective IRC
- 18:53NEW BUSINESS IMPERATIVE..
- 20:33Wrap up - Key takeaways
- 22:42RSA Conference 2016 Singapore
related talks
28mHow to Have an Operational Incident (A Crash Course)
44mPanel: Peak Performance Under Pressure: Building Cross-Functional Resilience in Incident Response
30mHow To Have An Operational Incident (a crash course)
23mEnforcing Your Code of Conduct: Effective Incident Response
33mDon't Panic! Effective Incident Response
44mBest Teacher is Last Mistake: Improving and Applying Incident Response Plan
55mThe State of Incident Response
30mHow to have an operational incident a crash course