~/talk

Exit Stage Left: Replacing Theater with Chaos

on YouTube 21m
Talkat Cloud Native Security Day North America 2020 · on Tuesday, 2020-11-17· at 12:25· Virtual , VIrtual· [security, soft-skills]

speaker

name:Kelly Shortridge
website:https://kellyshortridge.com/

resources

video:https://youtu.be/Z8scunfsgRQ
slides:none on file

summary

Argument: security theater creates slow, brittle delivery by adding approvals and blunt tools like scanners and gatekeeping that inflate friction and correlate with 46–60% change failure rate in constrained organizations, making patches slower and risk higher. Alternate approach uses security chaos engineering: run experiments, measure negative externalities, install localized change approvals and security champions so teams accept risk and recover fast. O Reilly report offers patterns and metrics to prove whether these practices actually reduce incidents and speed recovery.

AI-written summary · about

chapters (17)

  1. 0:00Exit Stage Left: Replacing Theater with Chaos Kelly Shortridge, Capsules
  2. 1:31Act 1: Welcome to Security Theater
  3. 1:55Security Theater optimizes for drama
  4. 8:01Cumbersome change management will hinder speedy patch deployments, too
  5. 8:53How do we spot Security Theater's red flags? And is there a better way ahead?
  6. 9:04Act II: Theater & Chaos in Fisticuffs
  7. 9:23Security Chaos Engineering: Let's harness failure to build knowledge
  8. 10:07SCE: Failure is a natural part of systems ST: Bad humans cause failures
  9. 10:48SCE: Adapt to minimize incident impact ST: Prevent failure from happening
  10. 11:26SCE: Security is collaborative & open ST: Security teams operate in a silo
  11. 12:13SCE Culture: Learning & experimenting ST Culture: Fear and mistrust
  12. 15:39Act II, Scene II: Judgment
  13. 17:38Compare security code review coverage vs. lead time or deploy frequency
  14. 18:30The Grande Finale
  15. 19:05Strive for continuous improvement through Security Chaos Engineering
  16. 19:16Attackers behaviors constantly evolve. Defender behaviors must evolve, too.
  17. 19:27Treat security teams as advisors & hold P&E teams accountable for changes

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.