Talk H-1: Prepare for Impact: Incident Response Building Blocks

Cyber security incident playbooks, plans and SOPs tend to regulate responding to very specific scenarios which contradicts real world experiences where incidents hardly ever adhere to planned scripts. Therefore, incident response teams are often confronted with non-applicable therefore useless plans, because threat actors do not know which plans to follow and the real world is a bit more messy.
Incident Response Building Blocks enable security teams to build a flexible set of reactive pieces of a puzzle, that make up a whole picture of how to stay on top of the game during an incident. This talk will showcase how to develop individual building blocks for an organization and demonstrate how they allow effective and efficient incident response planning in case of an emergency, therefore saving time, money and nerves in times of crisis.