The CISO's Dilemma HITBGSEC2019
•
1 gefällt mir•903 views
Defending an enterprise is a balancing act. I have worked as an offensive testing vendor to several global organisations over 18 years. This talk explores the challenges that today’s CISOs face - the threat landscape, overall shortage of infosec expertise, the ever evaporating shelf life of infosec products and an increased burden of compliance requirements. I will share my experiences from working with highly effective CISOs and internal infosec teams and what it takes to function on the razor’s edge
Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Ähnlich wie The CISO's Dilemma HITBGSEC2019
Ähnlich wie The CISO's Dilemma HITBGSEC2019 (20)
Mehr von Saumil Shah
Mehr von Saumil Shah (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
The CISO's Dilemma HITBGSEC2019
- 1. #HITBGSEC2019NETSQUARE #HITBGSEC2019NETSQUARE A presentation by Saumil Shah HITBgsec2019 Singapore
- 2. #HITBGSEC2019NETSQUARE special thanks to Dr. Igor Podebrad Kelly White Anoop Sethi Hiren Shah Thomas Dullien
- 3. #HITBGSEC2019NETSQUARE A TALE OF TWO KEYNOTES
- 4. #HITBGSEC2019NETSQUARE ATTACKS ARE A TECHNICAL PROBLEM, DEFENSE IS A POLITICAL PROBLEM THOMAS DULLIEN, "Why we are not building a defendable Internet" BH ASIA 2O17
- 5. #HITBGSEC2019NETSQUARE DEAR CISO, WHO ARE YOU MOST SCARED OF? SAUMIL SHAH "The Seven Axioms Of Security" BH ASIA 2O17
- 7. #HITBGSEC2019NETSQUARE 1. CISO - Defend the organization. 2. Threat Intel - Collect Everything. 3. Test Realistically. 4. Can't Measure? Can't Use. 5. Users - One Size Fits NONE! 6. Best Defense = Proactive Defense. 7. Make Defense Visible. The Seven Axioms of Security
- 17. #HITBGSEC2019NETSQUARE x 2 WORLD 2-1 DILEMMA: ^C
- 18. #HITBGSEC2019NETSQUARE REGULATORS BOARD IT VENDORS YOUR TEAM CISO Understand the relationships
- 21. #HITBGSEC2019NETSQUARE CODE vs TOIL ! MANUALLY RUNS SCRIPT WRITES SCRIPT "# non GEEK GEEK MANUALLY MAKES FUN OF GEEK'S COMPLICATED METHOD CAN'T COPE
- 22. #HITBGSEC2019NETSQUARE SHOULDERS OF GIANTS ANOOP SETHI formerly BT KELLY WHITE formerly Zionsbank Dr IGOR PODEBRAD Commerzbank AG
- 24. #HITBGSEC2019NETSQUARE HAVE NOTS HAVES Capable of custom analytics threat detection and response Owning Cyber Security Sucked up all the talent Not capable Cyber Security is a necessary evil Purely dependent upon commercial solutions CYBERSECURITY ASYMMETRY DILEMMA
- 27. #HITBGSEC2019NETSQUARE TRANSPERSONAL PERSONAL Survival Power Gods control & ego Kin Spirits protection Truth Force conformity Strive Drive achievement Human Bond relationships Flex Flow adaptability Whole View experential
- 28. #HITBGSEC2019NETSQUARE Spiral Dynamics HIVE MIND The swarm will learn and overcome any obstacle The Leader is the CATALYST SELECT THE GOALS WORTH FIGHTING FOR
- 29. #HITBGSEC2019NETSQUARE The Downward Spiral Cascade Effect Doesn't take much to de-orbit It all hinges upon the LEADER
- 30. #HITBGSEC2019NETSQUARE Nurturing the Spiral The Leader's Reflection PROTECT the Swarm EMPOWER the Swarm Form strong PARTNERSHIPS
- 31. #HITBGSEC2019NETSQUARE Catalyst Listen more than you speak Build capabilities Strong relationships with the business Authoritative Behave in a superior way over their team-mates Fight the business The "Sky Is Falling"
- 32. #HITBGSEC2019NETSQUARE A CENTRE OF EXCELLENCE FOR ALL OF TECHNICAL SECURITY An Independent Consultancy within the organisation
- 33. #HITBGSEC2019NETSQUARE PROTECT THE SWARM Creative Insulation HONESTY and OPENNESS ! Happens Don't throw them under the bus! No Blank Cheques
- 35. #HITBGSEC2019NETSQUARE EMPOWER The Swarm Call you out on your bull!
- 36. #HITBGSEC2019NETSQUARE PARTNERSHIPS Surround yourself with Smart people in Small teams
- 37. #HITBGSEC2019NETSQUARE THE TALENT WILL COME TO YOU
- 38. #HITBGSEC2019NETSQUARE THE CISO'S DILEMMA YOUR OWN SIDE THE TEAM'S SIDE
- 39. #HITBGSEC2019NETSQUARE THE CISO'S DILEMMA YOUR OWN SIDE THE TEAM'S SIDE
- 40. #HITBGSEC2019NETSQUARE ALL ALONE AND NO WAY OUT
- 41. #HITBGSEC2019NETSQUARE A TALE OF TWO LETTERS @NOTtheGRUGQ