air f01 building capacity in global incident response

2020-03-01 56浏览

1.#RSAC SESSIONID:AIR-F01 BUILDING CAPACITY IN GLOBAL INCIDENT RESPONSEMODERATOR:Peter Allor Chair, Education Advisory Board, Forum of Incident Response and Security Teams (FIRST)PANELISTS:Jean-Robert Hountomey Director, AfricaCERT Thomas Millar Chief of Communications, Department of Homeland Security Roziah Mohd Kassim Specialist, Cybersecurity Malaysia
2.FIRST.Org #RSA C Forum for Incident Response and Security Teams 409 Teams (Incident Response) in 84 Countries Founded in 1990Mission:FIRST Enables incident response teams to more effectively respond to security incidents by providing access to best practices, tools and trusted communication with member teams 2
3.Education Advisory Board #RSA C Best Practices Computer Incident Response Security Team (CSIRT) Services Framework Product Incident Response Security Teams (PISRT) Services Framework Training Programs for IR Teams Capacity building efforts 3
4.Themes for Panel Discussion #RSA C Trusted exchanges – common practices Regional approaches and differences Expand past the current vertical industries Race to the top labor market – workforce shortage What about the ‘soft skills’ Government – Technology – Industry – how do we best move forward Facilitation and retention 4
5.Questions for the Panel #RSA C What is government’s role in Capacity Building? Should it provide Free training; develop the training; certify the trainers? Can you avoid well qualified people leaving the country once they are trained? What experience keeps them ‘at home’? What is missing from Capacity Building? What is meant by Capability; Proficiency / Maturity; or Capacity? 5
6.Questions for the Panel #RSA C There is a lot of technical training available. What are the gaps? Do you see sufficient group versus individual training? Overall, organizations are showing an interest in investing. Do you see them investing in tools or in hiring high quality people? What would you do to change that? Why? 6
7.#RSAC QUESTIONS