Root Cause Analysis (RCA) in Dell PSIRT
summary
Dell PSIRT centralizes a scalable RCA pipeline that maps each vulnerability to a CWE then to applicable SDL controls, automates that mapping, backfills six months of incidents for baseline data, and feeds results into CWE→SDL control mapping and BI dashboards for live slicing by product, business unit, reporter type and criticality. A concrete case assigns CWE‑668 for an exposed port, finds a missed threat‑model step, recommends adding network scans and defense‑in‑depth; results drive just‑in‑time education and a small number of novel residual risks.
AI-written summary · about
chapters (14)
- 0:00Start
- 0:56How Important Root Cause Analysis Is in a Secure Development Life Cycle
- 3:41Security Champions
- 5:01Scalability
- 5:51Approach to Root Cause Analysis
- 9:06Messaging
- 10:00Asset Categorization
- 10:47Normalizing the Outcomes
- 12:01Building a Starting Point
- 14:34Examples of Root Cause Analysis
- 18:07Post Remediation
- 21:06Conclusion
- 29:11What's Next
- 30:06What Is the Data Telling Us So Far
related talks
28mHow Do We Leverage CVE Root Cause Mapping and CWE Data to Prevent New Vulnerabilities?
53mPanel Discussion: Enabling Accurate, Decentralized Root Cause Mapping at Scale
37mPrioritizing Vulnerability Response with a Stakeholder Specific Vulnerability Categorization
58mFIRSTCON21 - June 8 | Stream 2 Part 1 (12:00-13:00 UTC)
30mManaging Vulnerabilities through SSDLC
40mManaging Risk Across the Vulnerability Ecosystem
31mEfficient Vulnerability Management in Hierarchical Supply Chains
01h 01mFrom Roadmap to Results: Measuring CWE Adoption to Enable Prevention