With 80% of breaches involving compromised credentials, the pace and scope of cyber-attacks continue to accelerate along with the cost of a breach. Join cybersecurity expert Joseph Carson as he takes you from the moment you realize you’ve been breached, to getting back to business with an enterprise-wide privileged account management solution. You will learn how to: • Respond to a compromised credential • Identify your privileged account weaknesses and create an automated approach to Privileged Access Management • Set up early warning alerts of potential account compromise

1. BREACHED!
Implementing Incident Response for a
Compromised Credential

2. T H I R D G R E A T E S T I M P A C T / T H R E A T
Cyberattacks

3. Cyber Security Risk actors
Curiosity
Script
Kiddies
Financial
Organized
Crime
Retaliation /
Financial
Insider
Threats
Economic Adv &
Intelligence
Nation
States
Destructive
Terror
Groups

7. HACKER TECHNIQUES
It is critically important to know how cyber criminals target their
victims, what you can do to reduce the risk and make it more
challenging for the attackers who steal your information, your
identity or your money.

8. say traditional perimeter security
firewalls and antivirus are irrelevant
or obsolete
73%
OF HACKERS SAY

9. accessing privileged accounts was the
number one choice for the easiest and
fastest way to get at sensitive data
32%
OF HACKERS SAY

10. Reconnaissance
90% of TIME

11. Compliance
PCI & GDPR/NIS Directive

12. • Consent
• Data Protection Officer
• Data Breaches - 72 hours
- Legal Obligations to Notify without undue delay
• Data Portability
• Right to Erasure
• Joint Liability for Cloud
• Sanctions for failure to comply
EU GDPR Executive Summary

13. What can you do to
be prepared, survive &
stay compliant?

14. WHEN?

15. Source: www.bbc.com

16. Source: news.sky.com

17. You’ll most likely be
notified of a breach by an
OUTSIDER
Law Enforcement (41%)
Third Parties including customers (35%)

19. RANSOMWARE

20. DYN
DDOS

22. Incident Response Checklist
 Ownership
 Communications
 Contact List
 Clear Definition
of Threat
1. Confidentiality –
Data Loss
2. Integrity –
Data Poisoning
3. Availability - DDOS

23. Is Your Boardroom
Prepared?

24. Is Your Boardroom Prepared?
• Ownership – Defined Roles
• Communications and PR
• Contact List
• Cyber Awareness
• Red Team Exercise
• Press Statement

25. Is Your Legal Team
Prepared?

26. Help from authorities is easier if you
already have relationships with the right
people.

27. Is Your PR Team
Prepared?

28. What is the financial risk impact?
Do you know how to get and transfer bitcoins?

29. Is your Support Team
Trained & Prepared?

30. Ext. User
Application
Unix Server
Windows
Server
Database
Network Device
Int. User
Attacker
Active
Directory
Admin
PAM
Alert
Audit
Control
Workstation
Breach Notification &
Incident Response
Rotate
Rotate
Rotate
Rotate

31. Are you ready
to take the
responsibility?

32. FREE BOOK!
Download the free
Cybersecurity
for Dummies

33. QUESTIONS