Ash Carter (Mandiant)
Stacey Ross (Mandiant)
Jason Pang (Retrospect Labs)
This is a tabletop/discussion based exercises for members interested in incident response and management as a cyber team lead or who wish to fill that role in future. Over the course of the workshop (approx. 3 hrs) the group will be walked through a range of situations (otherwise referred to as injects) and provided time to respond to prompting questions. After each inject the delivery team will facilitate discussion based on participants responses to prompting questions as well as provide a range of considerations and appropriate responses based on our experience working with cyber team leads across the globe. This will allow members to considers a small range of the different issues, situations and problems that cyber team leads face building on their experience.
Cyber Team Lead: A cyber team lead can be a member who manages and leads a response team, this can include a Security Operations Centre (SOC) Manager, a Cyber Incident Response Team (CIRT) Manager or other similar roles.