Explore the relevance of Department of Defense (DoD) level security in the private sector through this 30-minute conference talk from BSidesSF 2017. Delve into the foundational aspects of data security, major tenets, and common pitfalls faced by companies in implementing basic security measures. Learn how a DoD-centric approach to data security could be adapted for private sector use. Examine key concepts such as the basic risk equation, risk parameters, and factors contributing to network insecurity. Gain insights into building a culture of security, understanding the security lifecycle, and evaluating data value. Engage with the speaker's experiences from both DoD and private sector perspectives to challenge preconceptions about the applicability of high-level security practices in various environments.
Overview
Syllabus
Intro
Audience Survey: Does DoD Security Work in the Real World?
The Naval Surface Weapons Center Summer Intern
My Summer Assignment
My first lesson in Data Security
The ultimate level of security!
There are many disciplines
The Basic Risk Equation
Risk Parameters
Why DoD Level Security Doesn't Work
Yeah, you really do!
What Makes a Network Insecure?
It's All About the Information!
Risk-Based Security Model
How Valuable is the Data?
Building a Culture of Security
The Security Lifecycle
The Security Life Cycle
The components of information security
Parting Shots
Taught by
Security BSides San Francisco
