All Hands on Deck – Handling Security Issues
summary
Provides a concrete incident playbook and a coordinated disclosure checklist that specify step-by-step roles for engineering, legal, communications, sales and support and determine what vulnerability details are released when. Describes tools and processes including a ticketed patch pipeline, CVE filing, automated rollback, a dedicated incident channel and runbook, and reports that a simulated drill for a vulnerability affecting millions reduced response time from days to hours while showing who authorises release, how customers are patched, and how social media and legal are involved.
AI-written summary · about
chapters (7)
- 0:00Security incident handling
- 1:32Security simulation
- 4:01Cross-team collaboration
- 6:21Security fixes
- 7:54Customer communication
- 9:27Incident response
- 10:41Key takeaways
related talks
10mHandling Security Issues
29mBuilding a Product Security Incident Response Team: Learnings From the Hivemind
18mWhat You Need to Know and Do about Vulnerability Disclosure
21mApplication Security Response: When Hackers Come A-Knockin
27mUrgent Cloud Deployment Practices and Insights
21mA Playbook for Effective Corporate Communication After a Cyber Security Incident
57mBuilding a Modern Security Engineering Organization
29mBuilding a Security Operations Program