2024 Security BSides // Mick Baccio
summary
Argues that applying the SECI model — converting tacit experience into explicit playbooks and back — measurably speeds security learning, citing automotive history where Japanese firms hit >20% US market in 1981 by continuous improvement. Shows concrete mappings: cyber kill chain origins, SOC workflows, ISAC sharing, DevSecOps pipelines and MITRE ATT&CK as explicit knowledge repositories. Notes slides were AI‑generated with spelling errors as a real example of flawed externalization. Claims this loop produces better detection, faster incident response, and steadily evolving defenses.
AI-written summary · about
chapters (24)
- 0:00Introduction and welcome
- 1:33Speaker introduction and background
- 3:41Tacit vs explicit knowledge
- 6:0980s car industry comparison
- 8:21Lean manufacturing and Kaizen
- 12:19Introduction to SECI model
- 13:41Socialization in SECI
- 14:44Externalization in SECI
- 15:48Combination in SECI
- 16:51Internalization in SECI
- 17:54SECI model visualization
- 18:16Applying SECI to cybersecurity
- 19:20Cyber Kill Chain as derivative work
- 20:42MITRE ATT&CK framework
- 21:22ISACs and knowledge sharing
- 22:24Threat hunting and SOC collaboration
- 23:07DevSecOps and continuous learning
- 23:51Kaizen culture in organizations
- 25:35Breaking down silos
- 26:41Evolution of knowledge practices
- 27:45Call to action for knowledge sharing
- 28:29Mentorship in cybersecurity
- 29:35AI and tacit knowledge
- 31:23Q&A session begins
related talks
51mThinking Differently About Security
31mThe Art of Cybersecurity Mastery: From Entry-Level to Staff+
40mMaking Security an integrated part of the SW Dev Lifecycle
46mPerforming Like a Cybersecurity Champion
25mSecurity Chaos Engr.: Fix Things and Make Friends
43mOpening Keynote - Flipping the script
57mBuilding a Modern Security Engineering Organization
47mEverything I Know About Security I Learned... [KEYNOTE]