Techno Security & Digital Forensics Conference
Kall Loper, Protiviti's National Lead for Incident Response, will present at the Techno Security & Digital Forensics Conference in San Antonio on the topic of "Creating an Incident Response Program that Actually Works When You Need It".
Recent major cyber security incidents have highlighted the fact that organizations don’t just need incident response plans, they need plans that work. Typical IR Plans can lead to poor information flow, frustration, and delay, wasting time during critical phases of incidents. Methods presented can be readily adapted to various frameworks (e.g. NIST 800-61) and compliance standards in use today. Using case studies and observations from years of IR experience, this presentation covers:
- two existing models for IR Plans and a new model for creating or growing your incident response program;
- a method to include input from various stakeholders including: risk, legal, operations, information security, and corporate communications;
- the key characteristics of a good incident response plan: brief, clear, resilient, and living; and
- a method to build a program of tabletop exercises to support compliance requirements and drive improvement in the IR team and organizations.
Session Learning Objective:
Students will be able to: Identify organizational needs for IR Plans. Adapt IR Plans to changing organizational environments. Recognize and mitigate impediments to IR Plan function. Recognize factors contributing to IR Plan failure. Structure an IR Program to achieve organizational goals.
Dr. Loper has been a practicing professional and researcher in Digital Forensics and Incident Response (DFIR) since 1997. Dr. Loper is the National Lead for Incident Response at Protiviti, a full-service, global consulting company. Before Protiviti, Dr. Loper worked in the forensics and incident response practices at a Big 4 consulting firm. Dr. Loper was lead instructor, author, and peer review board member for the Electronic Crime and Technology Center of Excellence in USDoJ. Dr. Loper has authored books, presentations, and articles on DFIR. Dr. Loper is a professor of computer science at Southern Methodist University where he teaches DFIR.
Use promo code SPK18 and save 30%