On Building Teams
summary
Practical lessons on building security teams and culture: a red‑team proof‑of‑concept uses bucket-stream piped to a bucket‑finder to enumerate exposed S3 content and discovers 46,000 files, including an ID card, which triggers a messy cross‑border disclosure handled better via national CERTs and journalists; hiring guidance uses the Dreyfus model to recommend pairing novices with competent mentors, reward‑based phishing education, and creating a common goal so specialists move as one.
AI-written summary · about
chapters (7)
- 0:00Start
- 12:58How To Build a Brand
- 17:44Put the Blame on Users
- 33:10What Happens When You Put a Novice and Novice Together in a Team
- 40:13Things Will Not Always Go Right
- 42:07Use the Certificate Transparency Log
- 51:54Five Stages of Data Breach
related talks
01h 03mBe your own Threatbuster!
20mBuilding security culture on infrastructure teams
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus
34mPurple Team Strategies for Application Security
36mThe Road To Being Rugged
24mConcrete Steps to Create a Security Culture
35mRed Teaming AWS: Practice What You Preach/
49mTraining for Incident Response: The Red, the Blue, and the Ugly