There are very few, if any, security tool sets that allow an administrator to simply implement them and walk away. Many tools require constant tuning and improvement activities to remain effective and thus require decisions on settings and approaches that need to be both risk and outcome focused.

How is this achieved? How many of us are clear on the granular outcomes of the security tools we employ? For example, should a network based Intrusion Prevention System (IPS) block Skype traffic? To answer this we really need to define what the network IPS should be doing by giving it a role/purpose and aligning to the overall risk based strategy.

In this month’s presentation, Tristan Bennett will walk through an example of how to define the purpose of security infrastructure including:

• How this will result in a more holistic view of your organisation’s security capabilities and weaknesses
• How roles interact with business risk and support operational decisions
• Providing an overview of Lockheed Martin Kill Chain.

Speaker: Tristan Bennett
Tristan Bennett has over a decade of experience within the IT industry in numerous roles for both Government and private entities across Australia. Mostly working in operational roles he has been involved in implementing and tailoring a wide range of security technologies. His latest role has seen him take on the lead technical position in establishing the Kinetic IT Security Operations Centre, which now provides security monitoring and oversight for a number of private and public organisations.

Many thanks to our sponsors

AISA thanks Thales for sponsoring this event



AISA also thanks EY for sponsoring the venue for this event