Quick Look: Operationalised Risk Modeling Using the Data Breach Repository
summary
Verizon’s DBIR and Data Breach Digest power a taxonomy that maps who, what, why and how for breaches and yields nine incident patterns used to prioritize controls and spending; contributors include law enforcement and incident responders. The digest supplies attack-defend cards with asset attributes, time-to-discover and time-to-contain metrics. Data shows 50% organized crime and 12% state-affiliated actors, so teams run tabletop exercises, benchmark industry frequencies, build detection use cases, and aim to measurably improve detection and response within six months.
AI-written summary · about
chapters (8)
- 0:00Intro
- 0:48Industry Leading Security Thought Leadership
- 2:11VERIS Framework and Data Breach Corpus End-to-End Capability and Value Add
- 4:24VERIS Framework Making it work for you!
- 5:50Making sense of the data: Incident Classification Patterns
- 7:19Data Breach Digest (DBD): Operationalizing Data-Driven Security
- 9:13Advanced Threats need Comprehensive Countermeasures. Remember it is a Journey!
- 11:09Apply What You Have Learned Today
related talks
37mWhat a Year! - Insights and Forecasts from the 2021 DBIR
27mFrom Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices
50mUnveiling the 2024 Data Breach Investigations Report (DBIR)
22mPrivacy Threat Modeling
25mDisparate Data, Distorted Decisions: Vendor Data Bias in CTI
45mFrom Attacks to Action: An Open Community Model to Drive Defensive Choices
40mForecasting Threats is Way Easier Than You Think
24mVERIS Mappings to ATT&CK - Bridging Risk-based and Ops-focused Incident Classification