3. What are Security’s meta objectives
● Allowing the business to execute it’s mission and objectives within their ‘accepted
risk level’
● Allowing the business to make FACT and RISK based decisions
● Improving the business’ ability to deploy changes and enabling it to ‘move faster’
● Allowing the business to understand better how it behaves and what are the side
effects of it’s actions/decisions
● Increasing the cost of malicious entities to execute their objectives
● Effectively handling incidents and preventing crisis
● Making compliance easy
● Enabling the business to think in ‘Graphs’
3
4. Security is a major
agent of change
(just about everything we do requires a change request)
4
5. Security is at the
epicentre of data
(we can get data feeds from everywhere)
5
6. Data is not linear or tabular
Data is hyperlinked and
relational
6
13. We created a serverless workflow
Graph
database
Queryable
data store
Lambda
functions
Command line /
feedback loop
Our hyperlinked
security taxonomy...
...is dumped every few
seconds into ELK...
...made queryable by
code functions...
...with the user
journey all in Slack.