CYBERIMMERSION Workshop

Intelligence: The Planners Strategic Edge is an expert led, interactive workshop. The purpose of the workshop is to familiarize participants with intelligence and how to integrate cyber intelligence into their cyber security profile.

When correctly employed, intelligence including ‘threat intelligence’ as described by the computer security industry, provides focus for:

• Long-term planning (strategic intelligence);
• Direction in the current cyber environment (using intelligence for operational management)
• Situational awareness and tactical intelligence supporting defence against current attacks, cyber, social and/or physical.

Participants will learn how executive direction is translated by the intelligence team in order to deploy specific products to specific management levels in the organization. This workshop provides project managers, security leaders and system integrators with the tools to deploy and utilize intelligence in their organizations.

A key feature of the workshop is the integration of intelligence into security processes and the distribution of intelligence products. Participants should be able to discuss examples of: corporate organizations, IT security organizations as well as cyber security policies. Participant examples will be used in discussions on how-to implement intelligence processes and procedures.

Key Takeaways

• Become proficient with critical definitions of Intelligence and intelligence processes
• Understand the difference between ‘threat intelligence’ and integrated intelligence
• Gain insight into the differences between ‘analysis’ and ‘intelligence’
• Project managers will learn to integrate cyber + intelligence into security processes
• Determine the prerequisites required BEFORE intelligence processes can be initiated
• Learn the importance of getting intelligence direction from your CEO/President
• Discover the different types of intelligence reporting.
• Master the distinctive elements of a thorough intelligence report.
• Know what you should expect from an intelligence provider.
• Perfect what an intelligence team will expect of your organization.
• Tie in your lessons learned to maximize the return on investment for your security investment

The workshop opens with an example of ‘executive level intelligence.’ This is followed by outlining some key intelligence definitions and then describing processes essential to implementing intelligence. The final areas covered are: what is needed to support an intelligence team and a discussion of ‘actionable intelligence.’

This is a workshop designed to address skills, methodologies and knowledge required to properly conduct information assurance testing in a structured manner. It will empower managers to fully understand the impact and pitfalls of penetration testing and engagement management.

Security penetration testing is an excellent method for determining the strengths and weaknesses of a network and its architecture. However, the process of performing a penetration test is complex, and without due diligence and care can have disastrous effects on the systems being tested. This workshop will lead participants through the processes involved in proposals, scoping, contractual elements, and NDA requirements. It will cover the fundamentals of testing, spanning the relative phases of penetration testing and ‘attack’, leading to reporting and document preparation and security.

Penetration testing is best performed by a team, which delivers several benefits from both a technical and a managerial standpoint ensuring a successful test.

• Understanding basic definitions and elements of security testing including legal requirements
• Learn how to run and manage testing through teams to ensure efficiency and accountability
• Essential components of security tests and methodologies
• Knowing the various phases of a security test and information feedback
• Application of elements, including legal agreements, tools, technologies, scoping, attack planning and project management
• Engagement management and communications, in test and post engagement reporting, delivery, expectations and data security

Key takeaways:

• Discover and incorporate lessons into your specific security testing methodologies
• Understand the attack process, and associated management
• Comprehend the tools, technologies, their employment, and placement in the process of conducting a security test
• Think strategically and incorporate testing into an ongoing program
• Learn how to effectively assess, scope, plan and deliver a security test
• Recognize the potential ramifications and impact of testing, during and after testing has taken place
• Tie in lessons learned: understand what your company can do to prevent an attack
• Gain insight into the mindset of Threat Actors and how they look at your network
• Learn key concepts associate with cybersecurity testing, trends and terminology and their application