Applying Forensic Engineering in Cybersecurity Incidents
summary
Argues that layering forensic engineering onto incident response proves legal liability and root cause rather than just blaming attackers, using the Treehouse of Failure model and end‑to‑end technical, ergonomic and procedural checks. Presents Experian 2020: a breach exposing nearly every South African citizen and 60% of businesses, where root cause was a single employee and the vendor tool met its integrity tests, so the company is found not negligent. Recommends revising IR plans and building forensic‑engineering capability.
AI-written summary · about
chapters (10)
- 0:00Introduction and disclaimer
- 1:43Accountability in physical vs digital systems
- 6:00Defining information systems and engineering
- 10:40Limitations of traditional incident response
- 13:11Holding organizations accountable
- 16:29Forensic engineering fundamentals
- 21:48Treehouse of Failure model breakdown
- 28:48Experian case study analysis
- 34:51Action steps and call to action
- 39:09Q&A session
related talks
34mThe Aftermath of a Social Engineering Pentest - Are We Being Ethically Responsible?
28mBeyond Penetration Testing: Developing a Defensive Cyber-Workforce
55mKeynote - The Future of Cybersecurity Needs You, Here is Why.
01h 00mFrom the Fry Pan to the Fire—Personal Liability for CISOs and InfoSec Pros
05mEnterprise security: A new hope
53mForensic Investigations of Web Exploitations
30mThe Lifecycle of Cybercrime
27mThe Offensive Approach to Cybersecurity