Cybersecurity as an ecosystem
summary
Argues that cybersecurity must move from an empire model to an ecosystem because commoditized attack toolchains, rising regulatory fines, and digitalization (5G, IoT) outpace a hammer approach. Describes concrete moves: a team of teams org from Siemens, a dashboard used for CEO reporting, blocking a plan to put critical SAP data in a vendor cloud after a risk walkthrough, and building developer outreach across ~9,000 engineers via a business-side project manager. Emphasizes hiring nontraditional roles and that scale fails if security tries to rule everything.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 8:14Big blue screen
- 10:09Digitalization
- 13:52How are we pivoting
- 17:52How we talk about cyber
- 21:22How we define our scope
- 23:49Working with a business
- 26:42Cybersecurity strategy
- 32:13Critical sap data
- 36:10How we lead
- 40:26Team of Teams
- 46:07The most important thing
- 47:26Making an impact at scale
- 52:33Democracy of technology
- 53:47Risk conversation
related talks
11mCybersecurity for an Inclusive Future
01h 09mKeynote: What Do We Owe One Another In Cybersecurity?
03mInterview
28mCyberSecurity is too general: Why we need Security Domains
19mNavigating the Cyber Frontier
38mKeynote: Dumping Traditional Security Teams
41mIndustrialising Cyber Defence in an Asymmetric World
51mThinking Differently About Security