Explore key lessons from InfoSec failures in this 54-minute conference talk by Derek Milroy at GrrCON 2017. Delve into crucial cybersecurity topics, including pattern-based protection, vulnerability management, and data loss prevention (DLP). Learn about the importance of immediate patching, DLP log management, load balancing, and web application security. Gain insights on key management, IoT security, forensics tools, and the relationship between security and compliance. Discover the value of offensive training and research resurfacing in strengthening your organization's security posture.

Syllabus

Intro
InfoSec Fails
Pattern Based Protection
What is Vulnerability Management
What makes you recommend immediate patching
What is DLP
DLP Log Management
Load Balance
Web App Security
Key Management
IoT
Forensics
Tools
CMM
Security vs Compliance
Offensive Training
Research Resurfacing