The best cyber threat intelligence in the world may be useless, unless it can help shape decisions at senior leadership levels. A well-written and thoroughly researched report may just end up as another task on an ever-increasing to-do list for executive leadership teams without any good effect. How can CTI better inform the critical security decisions for organizations? There is no easy answer, because organizations differ greatly in structure, knowledge, funding, and strategy. This presentation focuses on how increase the effectiveness of CTI reports, recommendations, and warnings to better inform strategic decision making in organizations. This is through a process of 'credible communication', which aims to build trust, break down barriers, and speed decision-making. Using real-life examples from over 20 years in the intelligence community, federal law-enforcement, and the Infosec community, the presenter will walk CTI professionals through the most critical part of building trust with their executive teams: how to have credible communications that build trust, rather than relying on less effective means that could leave critical vulnerabilities open for adversaries. Seeing examples from the U.S. Intelligence Community, federal law enforcement operations, and also recent information security issues such as the MGM hack in Las Vegas will provide up-to-date and relevant examples, coupled with a few stories from the lighter side of things that demonstrate that credible communication is a human endeavor, and it does not have to be robotic, boring, or an endless string of bad news.
View upcoming Summits: www.sans.org/u/DuS
SANS Cyber Threat Intelligence Summit 2024
Why Won’t They Listen? - ConnectingYour CTI to Decision Makers
Bret Irwin, Information Systems SecurityAnalyst, CGS Administrators LLC