Incident Response: Practice Like you Play - Paul Kelly, Tim Morris - ESW #282

<p>Heightened emotions, demands for updates, not knowing how bad things might be... Incident response isn't easy, but practice and the right tools can make it a whole lot less stressful. Some regulations like PCI require annual IR tests, but is that enough? Imagine playing a sport where the team meets for one half-hearted practice once a year. How would that team perform under pressure? How would they communicate? Say this sports analogy has convinced you - the IR team should practice more and should practice effectively. Questions still remain - how often? Are tabletops enough, or are live exercises and simulations necessary? We'll aim to answer these questions and more during this interview with Tim and Paul from Tanium.</p> <p> </p> <p>This segment is sponsored by Tanium. Visit <a href= "https://securityweekly.com/tanium">https://securityweekly.com/tanium</a> to learn more about them!</p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/esw">https://www.securityweekly.com/esw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://securityweekly.com/esw282">https://securityweekly.com/esw282</a></p>