Go Back to the Basics with Your Processes - Improving Operations Without Technology

Explore strategies for improving security operations without relying solely on technology in this 55-minute conference talk from BSides Cleveland 2018. Learn how to understand and enhance operational processes through metrics, mapping, and effective business case writing. Examine lessons from historical events like the Three Mile Island nuclear meltdown to grasp operational complexity. Discover tools such as the Turtle Diagram for process analysis and the Overall SOC Operational Capacity Model for team productivity assessment. Gain insights into creating comprehensive process maps and understanding their limitations. Leave with practical knowledge to optimize your security operations center (SOC) and drive meaningful change in your organization.

Syllabus

Intro
Goals for this presentation 1. Understand that Technology is a piece of the puzzle when improving operations 2. How to understand your operations through metrics and maps 1. How to write a business case that will help get your work prioritized over others.
Security Operations Centers
Who can we learn from?
Operational Complexity - Three Mile Island Nuclear Meltdown What didn't go wrong?
Change is Difficult!
Change Entails...
Understanding your process
The Turtle Diagram
How many clocks in a process?
Measurement Systems
Overall SOC Operational Capacity Model
Team Productivity in a Global Environment
Mapping Processes
What a Process Map doesn't account for
Summary