Abstract

This presentation will demonstrate, using actual examples seen over the past 15 years, the best practices incident responders are using in the initial 72-hours of an incident response. While containing and recovering data may seem to be the right thing to do, it also may be the most counterproductive to removing threats from your environment. Incident responders, business leaders, governance managers, legal counsels, law enforcement, and policy makers must understand the questions to ask, expectations, processes, and procedures that need to happen in the first 72-hours in order for the organization to efficiently and effectively respond to an incident.

Presented by

Bio

15 years cybersecurity field experience