2022-05-19, 15:55–16:25, Ville-Marie
Incidents are a bad time to try to figure out what you don't know. This talk will highlight the most important things IT, Security and IR teams should know before an incident happens.
The first major incident response I was involved in was a nightmare. Why? Because I didn’t know what we didn’t know. Sixteen years and too many incidents to count later, I’ve come up with a list of 10 (or more) things that I wished I had known then. In this talk, we’ll cover what those 10 things are, some adjacent questions to those, and some war stories to show you why you should care.
This isn't your dad's IR plan....
Caspian Kilkelly is a senior consultant with CrowdStrike's Canadian services team. Caspian's career highlights include a variety of roles over 20 years that usually end in the word "security" or the word "consultant". Caspian has worked with the security teams of a variety of different companies across North America and Europe as an incident responder, advisor and exercise lead. In his spare time, Caspian helps organize cybersecurity conferences you've probably never heard of.