We all know the theory, some of us have also taught it, but reality is a different story.

In this talk we are going to discuss the reality of incident response through war stories, suitably anonymised, spanning a career of over 35 years.

We are going to touch on subjects such as the fallacies in crisis committees, the difficulties in communications, journalists getting a tip-off, backups which are not, ransomware negotiations, and the fabled “cyber insurance”.

Hopefully, the audience will not consider a career change immediately following the talk but, instead, appreciate that they are not alone in the struggle.

About the speaker

Arrigo Triulzi

Arrigo is the person that high-stake companies call when crises escalate. With over 30 years of experience, he’s a security all-rounder serving as step-in CISO, he provides creative offensive and defensive solutions executing physical penetration tests, but he is also the person leading the negotiations with the ransomware gangs. Arrigo is a longtime SANS instructor and auditor for IT systems when you want to go beyond the checkbox review. In his keynote, Arrigo will share from his rich experience and teach us how he supports teams so they survive tough incidents.
Read more …