9. The 411 on PSIRTs and the Incident Response Framework

Ngarama

29 min

Knowledge

Description

In this episode of Cyber Security Inside, hosts Tom Garrison and Camille Morhardt talk PSIRTs with Director for Red Hat Product Security, Pete Allor. Pete has an impressive history with PSIRT and the convo covers things like: • What a PSIRT is and why you need to have one • The dangers of falling into a technical trap when addressing product vulnerabilities or problems • Evaluating risk and scoring vulnerability • Why incident response requires organization-wide coordination and communication • The Incident Response Services framework • The role transparency plays • And more Plus, Pete’s got a book recommendation, Camille’s got a tip for musicians forced to play in the dark, and Tom’s got a trivia question that will get you free drinks, every time. Check it out! Here are some key take-aways: • PSIRT is designed to address vulnerabilities with the company’s own products. If you don’t have a Product Security Incident Response Team, you need one. • Get to know your auditor well and figure out what your risk tolerance is internally. • PSIRT should be proactive, not reactive. • We need to talk vulnerability scoring, so we have a commonality, a base to work from. And we need to talk about severity, as in risk. <span style="font-weight:

Uploader

josie.shore

Episodes

9. The 411 on PSIRTs and the Incident Response Framework

Ngarama

29:21