Understanding Incident Response Challenges in Modern Security Infrastructure

Explore a conference talk from Security BSides London that examines why incident response remains challenging despite widespread adoption of security solutions like MSSP, EDR, NDR, XDR, and MDR. Drawing from 30-40 years of cross-sector experience, learn about the critical distinctions between incident management and incident response, while understanding the historical context of security professional development. Gain insights into enterprise architecture perspectives and analyze the complex challenges created by non-technical incident managers handling response duties and technical responders working without proper business context. Examine the frustrations experienced by both MSSPs and Detection & Response providers alongside their customers, and discover potential solutions the security community can implement to bridge these gaps.