building extended teams for security operations · social networking society/daily living software...
TRANSCRIPT
![Page 1: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/1.jpg)
Building extended teams
For Security Operations (Win executive support)
David Nathans
![Page 2: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/2.jpg)
Managed security for:
Partnership for peace
Post breach recovery architect and CISO for:
Large breach retailer
Large international defense contractor
![Page 3: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/3.jpg)
Author TheSOCBook.com
![Page 4: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/4.jpg)
![Page 5: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/5.jpg)
![Page 6: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/6.jpg)
Too Many Secrets
![Page 7: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/7.jpg)
Learn 1 thing today:
It’s not about secrets… It’s about security
![Page 8: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/8.jpg)
EVERYONE NEEDS
TO CARE
ABOUT SECURITY
![Page 9: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/9.jpg)
SOC
HUMAN RESOURCES
LEGAL
R&D
FINANCE AUDIT
IT
3RD PARTIES
![Page 10: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/10.jpg)
![Page 11: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/11.jpg)
![Page 12: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/12.jpg)
WE’RE GOING TO NEED A BIGGER SOC.
![Page 13: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/13.jpg)
Let’s build a bigger SOC
![Page 14: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/14.jpg)
HUMAN RESOURCES
Is Human Resources a part of the SOC?
Abortion Adult/Mature Content Alcohol Alternative Spirituality/Belief Art/Culture Auctions Audio/Video Clips Brokerage/Trading Business/Economy Charitable Organizations Chat (IM)/SMS Child Pornography Computer/Information Security Content Servers Controlled Substances Dynamic DNS Host E-Card/Invitations Education Email Entertainment
Extreme File Storage/Sharing Financial Services For Kids Gambling Games Government/Legal Hacking Health Humor/Jokes Informational Internet Connected Devices Internet Telephony Intimate Apparel/Swimsuit Job Search/Careers Malicious Outbound Data/ Botnets Malicious Sources/Malnets Marijuana Media Sharing
Military Mixed Content/Potentially Adult News/Media Newsgroups/Forums Non-Viewable/Infrastructure Nudity Office/Business Applications Online Meetings Peer-to-Peer (P2P) Personals/Dating Personal Sites Phishing Piracy/Copyright Concerns Placeholders Political/Social Advocacy Pornography Potentially Unwanted Software Proxy Avoidance Radio/Audio Streams Real Estate Reference Religion
Remote Access Tools Restaurants/Dining/Food Scam/Questionable/Illegal Search Engines/Portals Sex Education Sexual Expression Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation Travel TV/Video Streams Uncategorized Vehicles Violence/Hate/Racism Weapons Web Ads/Analytics Web Hosting
![Page 15: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/15.jpg)
HUMAN RESOURCES
Human Resources is responsible for:
People and policy • Codes of conducts • Ethical behavior policy • Harassment policies • Acceptable use policies SNL
Escalation point for a policy violation
![Page 16: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/16.jpg)
Services for legal:
• e-Discovery • Data protection • M&A Audits • Privacy protection • Risk evaluations
Escalation point for data loss or breach activity
LEGAL
![Page 17: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/17.jpg)
Partnership with Audit:
• PCI DSS • Sarbanes Oxley • FISMA • GLBA • HIPPA • Internal risk • FCC / FDA • More… Necessary evil
Overlapping?
LEGAL AUDIT
![Page 18: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/18.jpg)
![Page 19: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/19.jpg)
Product Security:
• SDLC • BSIMM • Vulnerability Management • Scanning • Customer IR
LEGAL AUDIT R&D
Help advise, recommend and develop easy to Understand threat and risk registers
![Page 20: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/20.jpg)
3rd party support
Not everyone is as secure as you Provide useful guidelines, standards and offer support Monitor everything
LEGAL AUDIT R&D
3RD PARTIES
![Page 21: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/21.jpg)
Finance Support
How are you saving the company money Defense in-depth without overlap Demonstrate maturity Protect the money chain
LEGAL AUDIT R&D
3RD PARTIES FINANCE
![Page 22: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/22.jpg)
USERS LEGAL AUDIT R&D
3RD PARTIES
Users
Challenge them Employ them Make them part of the team
![Page 23: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/23.jpg)
IT as a customer (really!)
Give them good usable data Let them play with your toys
LEGAL AUDIT R&D
3RD PARTIES FINANCE IT
![Page 24: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/24.jpg)
![Page 25: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/25.jpg)
Learn 1 thing today:
It’s not about secrets It’s about security
![Page 26: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/26.jpg)
SOC
HUMAN RESOURCES
LEGAL
R&D
FINANCE AUDIT
IT
3RD PARTIES
![Page 27: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/27.jpg)
![Page 29: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/29.jpg)
![Page 30: Building extended teams For Security Operations · Social Networking Society/Daily Living Software Downloads Spam Sports/Recreation Suspicious Technology/Internet Tobacco Translation](https://reader034.vdocument.in/reader034/viewer/2022042302/5ecd4aaae08c7f5c76406f5f/html5/thumbnails/30.jpg)