1 of 30

Slide Notes

DownloadGo Live

CLUSIL WG-IMP - EoY 2013

Published on Nov 18, 2015

No Description

View Outline

MORE DECKS TO EXPLORE

PRESENTATION OUTLINE

1.

incident management preparedness

CLUSIL WG-IMP / EOY 2013
Photo by anieto2k
2.

scope

Photo by Glc PHOTOs
3.

Incident

ICT EVENT THAT CAN LEAD TO LOSS/DISRUPTION OF OPERATIONS/SERVICES
Photo by ecstaticist
4.

Threat landscape

WHY ALL THIS EFFORT ?
Photo by Johnson Cameraface
5.

Key figues (world-wide 2012)

6.

Incidents in Luxembourg (CIRCL 2012)

7.

Victims by sector (CIRCL 2012)

8.

Motivations (CIRCL 2012)

9.

Management

  • Discovery
  • Analysis
  • Mitigation
  • Recovery
  • Investigation
Photo by Stéfan
10.

Preparedness

  • Procedures, Requirements
  • Regulations, Obligations
  • Recommandations, Communication
  • Practices, Checklists, Tools
  • Actors (Regulators, CERTs)
Photo by a4gpa
11.

OBJECTIVES

Photo by kennymatic
12.

Target Audience

  • SME (small/medium entities)
  • non-IT core business
  • but IT "dependent"
  • with vital ICT assets
Photo by kevin dooley
13.

3-LEVEL DELIVERABLE

Photo by Das Fotoimaginarium
14.

EXECUTIVE

  • Strategic planning
  • Business preparedness
  • Cost efficiency
  • Risk awareness
  • Be ready !
Photo by RLHyde
15.

Functional

  • Proactivity
  • Intelligence
  • Governance
  • Awareness
  • Risks
Photo by JD Hancock
16.

OPERATIONAL

  • Procedures
  • Checklists
  • Instructions
  • Infrastructure
Photo by Aaron Escobar
17.

Support

  • Toolbox (wiki based)
  • References
  • Handbooks
Photo by guldfisken
18.

THE TEAM

Photo by 'PixelPlacebo'
19.

THANK YOU

  • Olivier Montée, Laurent Collée
  • Paulo Rocha, Thierry Grandjean
  • Michael Sim, Christophe Bianco
  • Hervé Cholez, Daniel Marnach
  • Ferdinand Tagheu, Pascal Maillot
Photo by 'PixelPlacebo'
20.

Status

WHERE ARE WE TODAY ?
Photo by Leah Gregg
21.

Toolbox

  • Documents
  • References
  • Tools
  • Checklists
  • Procedures
Photo by Robert S. Donovan
22.

(desktop) INSTRUCTIONS

cheat sheets and others checklists
Photo by Paul Nicholson
23.

CERT-SG

INCIDENT RESPONSE METHODOLOGIE (IRM)
24.

LENNY ZELTSER

25.

Skeleton Structure

  • Plan, prepare, be ready
  • How to manage an incident
  • Mitigation strategies
  • Relevant regulations
  • Communication (lessons learned)
Photo by angela7dreams
26.

Untitled Slide

27.

Untitled Slide

28.

Untitled Slide

29.

2014 OUTLOOK

  • Skeleton: develop details (via wiki)
  • IRMs: translate, adjust, enhance
  • More langs: fr, de
  • Involve actors: CERTs, ISPs, Specialists...
  • Partner with: CNPD, CSSF, ILR, LEX, PGD
Photo by Stuck in Customs
30.

THANK YOU

to my team & FOR YOUR ATTENTION
Photo by nickwheeleroz

Pascal Steichen

https://lhc.lu/