Explore the concept of DoD-level security and its applicability in real-world scenarios through this BSides Nashville 2017 conference talk. Delve into the speaker's career journey starting from 1984, including experiences at the Naval Surface Weapons Center. Examine the basic risk equation, risk parameters, and reasons why DoD-level security may not be effective in all contexts. Investigate factors contributing to network insecurity, the risk-based security model, and the importance of data valuation. Learn about security-in-depth strategies, building a security culture, and the components of the security lifecycle. Gain insights into information security components and receive parting thoughts on the subject.
Overview
Syllabus
Intro
We don't need DoD Level Security. We
FANX Complex
My Career Started in 1984...
The Naval Surface Weapons Center Summer Intern
My Summer Assignment
My first lesson in Data Security
The Ultimate Level of Security!
The Basic Risk Equation
Risk Parameters
Why DoD Level Security Doesn't Work
What Makes a Network Insecure?
Risk-Based Security Model
How Valuable is the Data?
Security-in-Depth
Building a Culture of Security
The Security Lifecycle
The Security Life Cycle
The Components of Information Security
Parting Thoughts
A Quick Word About My Sponsor
Look for Training from Yours Truly Soon...
