The benefits of police and industry investigation - NPCC Conference
•
2 likes•361 views
Keynote presentation delivered at an NPCC internal conference Jan 2020
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to The benefits of police and industry investigation - NPCC Conference
Similar to The benefits of police and industry investigation - NPCC Conference (20)
More from Dinis Cruz
More from Dinis Cruz (20)
Recently uploaded
Recently uploaded (20)
The benefits of police and industry investigation - NPCC Conference
- 1. @DinisCruz The benefits of Police and Industry Investigation Jan 2020, Dinis Cruz Keynote , Conference
- 5. @DinisCruz security Security team Incident Response MVP (Minimum Viable Prototypes) Genesis Custom Built Product Commodity invisiblevisible The Landscape
- 7. @DinisCruz Buy or Outsource Build Build Relationships Build vs Buy Share and Collaborate
- 8. @DinisCruz security Security team Incident Response MVP (Minimum Viable Prototypes) Genesis Custom Built Product Commodity invisiblevisible What we need Create products Commoditized solutions
- 9. @DinisCruz Case Study: Modern Security toolkit
- 10. @DinisCruz The reality in Jan/2020
- 11. @DinisCruz If the organization Has an history of attacks or major security incidents
- 12. @DinisCruz There is budget, focus and accountability
- 13. @DinisCruz If the organization Does not have An history of attacks or major security incidents
- 14. @DinisCruz It is a ‘Best Effort’ and Marketing exercise
- 17. @DinisCruz * created by Ashraf Aboukass
- 18. @DinisCruz * created by Ashraf Aboukass
- 19. @DinisCruz * created by Ashraf Aboukass
- 21. @DinisCruz Case study: Modern Security Incident Response Playbooks
- 22. @DinisCruz Capture data into graph
- 24. @DinisCruz Create issue and confirm activity with user
- 25. @DinisCruz Close issue (depending on response and rules)
- 27. @DinisCruz
- 28. @DinisCruz You need to think in Graphs
- 29. @DinisCruz You need an Graph Database
- 31. @DinisCruz Creating Graphs is a key capability you need to have in-house
- 32. @DinisCruz You need Developers and Data Scientists In your Teams
- 33. @DinisCruz APIs
- 34. @DinisCruz You need to think in APIs
- 35. @DinisCruz This is how Amazon did it Memo from 2002
- 36. @DinisCruz Push Model (broadcast only) No APIs Where are the Police and NPCC APIs?
- 37. @DinisCruz NPCC needs to be where the action is
- 43. @DinisCruz Case Study: Glasswall is sharing how it works
- 44. @DinisCruz Case study: Glasswall Engineering Blog
- 45. @DinisCruz Case study: Glasswall Security Policies
- 46. @DinisCruz Transparency is the new security
- 47. @DinisCruz You can do it
- 49. @DinisCruz You already have all resources you need
- 50. @DinisCruz Leverage best in class
- 51. @DinisCruz Use Pioneers, Settlers and Town Planners
- 53. @DinisCruz
- 54. @DinisCruz Case Study: Glasswall Threat Intelligence
- 55. @DinisCruz How do we Give you our Threat Intelligence?
- 56. @DinisCruz How do we Consume your Threat Intelligence?
- 57. @DinisCruz We need joint playbooks and collaboration touchpoints
- 59. @DinisCruz Created by this gentleman See his presentations!!! Read his book
- 60. @DinisCruz https://www.youtube.com/watch?v=ZB-4ynJPDIA Mapping Policing in the UK with Tim Ebenezer
- 61. @DinisCruz Great GCHQ publication on technology change
- 62. @DinisCruz See also (in slideshare) https://www.slideshare.net/DinisCruz/using-w ardley-maps-to-understand-securitys-landsca pe-and-strategy-191404053 https://www.slideshare.net/DinisCruz/modern -security-using-graphs-automation-and-data- science
- 64. @DinisCruz You need To engage with Industry BEFORE incidents
- 65. @DinisCruz You need To have modern development workflows
- 66. @DinisCruz You need To add value to the Top and Bottom line of business
- 67. @DinisCruz You need To proactively defend the Customer/Public
- 68. @DinisCruz You need To work with companies that want to engage with you
- 69. @DinisCruz You need to Productise and commoditize your services and mission