Security is a team sport (and we are NOT playing like a team)

Security is a team sport (and we are NOT playing like a team) by Mark Simos Security is like a sports team where very few players actually know they are on the team, only a few of these players actually show up for games, and half of those are fighting with each other or playing like they are on the opposing team. Security will never be effective until everyone does their security job including boards of directors and CEOs, CISOs and CIOs, SOC analysts, everyday users, architects, IT engineers and operations, and more. This isn't happening because those players don't know their positions, roles, or goals. Very few people know what they are supposed to do for security, why it's important, or how to do it. This leads to ineffective defenses and internal conflict that threat actors regularly take advantage of This session will talk about how we go here and how to get the whole team playing together. This will show you how to use the Security Roles and Glossary standards from The Open Group to overcome these challenges and get some wins on the board!