The CISO's Dilemma 44CON 2019
•
2 gefällt mir•1,089 views
Defending an enterprise is a balancing act. I have worked as an offensive testing vendor to several global organisations over 18 years. This talk explores the challenges that today’s CISOs face - the threat landscape, overall shortage of infosec expertise, the ever evaporating shelf life of infosec products and an increased burden of compliance requirements. I will share my experiences from working with highly effective CISOs and internal infosec teams and what it takes to function on the razor’s edge
Empfohlen
Weitere ähnliche Inhalte
Ähnlich wie The CISO's Dilemma 44CON 2019
Ähnlich wie The CISO's Dilemma 44CON 2019 (20)
Mehr von Saumil Shah
Mehr von Saumil Shah (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
The CISO's Dilemma 44CON 2019
- 1. #44CONNETSQUARE #HITBGSEC2019NETSQUARE A presentation by Saumil Shah 44CON 2019 London
- 2. #44CONNETSQUARE special thanks to Dr. Igor Podebrad Kelly White Anoop Sethi Hiren Shah Thomas Dullien
- 3. #44CONNETSQUARE A TALE OF TWO KEYNOTES
- 4. #44CONNETSQUARE ATTACKS ARE A TECHNICAL PROBLEM, DEFENSE IS A POLITICAL PROBLEM THOMAS DULLIEN, "Why we are not building a defendable Internet" BH ASIA 2O17
- 5. #44CONNETSQUARE DEAR CISO, WHO ARE YOU MOST SCARED OF? SAUMIL SHAH "The Seven Axioms Of Security" BH ASIA 2O17
- 7. #44CONNETSQUARE 1. CISO - Defend the organization. 2. Threat Intel - Collect Everything. 3. Test Realistically. 4. Can't Measure? Can't Use. 5. Users - One Size Fits NONE! 6. Best Defense = Proactive Defense. 7. Make Defense Visible. The Seven Axioms of Security
- 8. #44CONNETSQUARE x 3 WORLD 1-1
- 10. #44CONNETSQUARE
- 11. #44CONNETSQUARE
- 15. #44CONNETSQUARE
- 16. #44CONNETSQUARE
- 17. #44CONNETSQUARE x 2 WORLD 2-1 DILEMMA: ^C
- 18. #44CONNETSQUARE REGULATORS BOARD IT VENDORS YOUR TEAM CISO Understand the relationships
- 19. #44CONNETSQUARE
- 20. #44CONNETSQUARE
- 21. #44CONNETSQUARE CODE vs TOIL ! MANUALLY RUNS SCRIPT WRITES SCRIPT "# non GEEK GEEK MANUALLY MAKES FUN OF GEEK'S COMPLICATED METHOD CAN'T COPE
- 22. #44CONNETSQUARE SHOULDERS OF GIANTS ANOOP SETHI formerly BT KELLY WHITE formerly Zionsbank Dr IGOR PODEBRAD Commerzbank AG
- 23. #44CONNETSQUARE THERE IS A WAY
- 24. #44CONNETSQUARE HAVE NOTS HAVES Capable of custom analytics threat detection and response Owning Cyber Security Sucked up all the talent Not capable Cyber Security is a necessary evil Purely dependent upon commercial solutions CYBERSECURITY ASYMMETRY DILEMMA
- 27. #44CONNETSQUARE TRANSPERSONAL PERSONAL Survival Power Gods control & ego Kin Spirits protection Truth Force conformity Strive Drive achievement Human Bond relationships Flex Flow adaptability Whole View experential
- 28. #44CONNETSQUARE Spiral Dynamics HIVE MIND The swarm will learn and overcome any obstacle The Leader is the CATALYST SELECT THE GOALS WORTH FIGHTING FOR
- 29. #44CONNETSQUARE The Downward Spiral Cascade Effect Doesn't take much to de-orbit It all hinges upon the LEADER
- 30. #44CONNETSQUARE Nurturing the Spiral The Leader's Reflection PROTECT the Swarm EMPOWER the Swarm Form strong PARTNERSHIPS
- 31. #44CONNETSQUARE Catalyst Listen more than you speak Build capabilities Strong relationships with the business Authoritative Behave in a superior way over their team-mates Fight the business The "Sky Is Falling"
- 32. #44CONNETSQUARE A CENTRE OF EXCELLENCE FOR ALL OF TECHNICAL SECURITY An Independent Consultancy within the organisation
- 33. #44CONNETSQUARE PROTECT THE SWARM Creative Insulation HONESTY and OPENNESS ! Happens Don't throw them under the bus! No Blank Cheques
- 34. #44CONNETSQUARE
- 35. #44CONNETSQUARE EMPOWER The Swarm Call you out on your bull!
- 36. #44CONNETSQUARE PARTNERSHIPS Surround yourself with Smart people in Small teams
- 37. #44CONNETSQUARE THE TALENT WILL COME TO YOU
- 38. #44CONNETSQUARE THE CISO'S DILEMMA YOUR OWN SIDE THE TEAM'S SIDE
- 39. #44CONNETSQUARE THE CISO'S DILEMMA YOUR OWN SIDE THE TEAM'S SIDE
- 41. #44CONNETSQUARE "I'VE LEFT TWO LETTERS FOR YOU" @ NOT the GRUGQ Blame it all on me. Write two letters.