Triangle InfoSeCon Keynote - ISSA Raleigh 2023 - Brian Haugli - What does good look like?
What does good look like?
ISSA Keynote by Brian Haugli, CEO, SideChannel
Cybersecurity program goals are often centered around the comparison to sector peers, “best practices”, and “reasonable controls”. These terms and approaches leave much ambiguity in an industry that’s seeking defined, focused expectations on outcomes. While most acknowledge the existence of frameworks like NIST CSF or CIS Controls, many programs are not actually built to them. We see them, yet we do not use them.
This keynote will discuss the pragmatic approach to building frameworks backed and standards-based cybersecurity programs while not campaigning for purely compliance. It will cover the areas required to prioritize within an open framework, govern after it’s implementation, and how to report its effectiveness to leadership in a way they will understand the risks addressed.
Slides: https://sidechannel.com/wp-content/up...
Keynote Breakdown
0:00 - Intro
2:19 - What does good like?
3:35 - TL:DR; Good enough doesn't equal Good
5:15 - Choose your framework
6:48 - Controls- based Reality Check!
8:18 - xkcd - not another standard
9:18 - Identify your risks
10:00 - Risks: Attacks & Outcomes
13:55 - What about the people?
18:40 - Prioritization
23:06 - A logical non sequitur
24:00 - Impact: a real life example
26:16 - Govern your program
27:13 - Governance
29:14 - Report effectively
29:38 - Reporting
33:11 - Closing
#cisolife
Follow us -
Website - https://sidechannel.com
Podcast - https://anchor.fm/cisolife
LinkedIn - / sidechannelsecurity
Twitter / X - / sidechannelsec