Topic: Cyber Incident Response Team Pot Luck

Nathan Clarke, former Australian Army IT soldier and Signals Officer, will discuss some pseudo-randomly selected considerations and ideas about incident response teams and operations such as:

• Building/recruiting a team and inculcating a self-supporting culture through training and retention initiatives (spoiler alert, it’ll cost you)
• Placement in the organisation (where it goes matters)
• Planning, Operations, & Exercises
• What is a security incident? (and what it isn’t, in my humble opinion)
• Measuring Performance using time
• How to extract every drop of useful/actionable information and tasks from the Lessons Learned phase in PICERL
• Getting involved in IT ;)
• Discussion/Conclusion.

Disclaimer: Nathan’s presentation, including discussion and opinions therein are based on his own experience and is not representative of his current and former employers.

Speaker: Nathan Clarke is a former Australian Army IT soldier and Signals Officer and now Cyber Operations (Incident Response) Manager at Telstra. He has worked in two Incident Response Teams and considers the field of Digital Forensics and Incident Response (#DFIR) his main field of interest/expertise. Nathan leads a dedicated team of incident responders and hopes to grow more for our local industry while driving a national agenda for greater focus on the IR discipline to compliment other sub-specialties in the market.

Additional Information: Drinks will be held next door at Akiba after the meeting. 

Many thanks to our sponsors

AISA thanks Thales for sponsoring this meeting