"Using data-driven metrics to anticipate and prevent security incidents" by Caitlin Buckshaw

Working on an incident response team means you deal with fire after fire. At GitHub, we developed a team whose primary focus was not to respond to fires but to anticipate them. This talk will cover how the new PSIRT Engineering team was able to prevent future incidents from happening and reduce pressure on the incident response team by analyzing data driven metrics, digging into specific product area pain points and performing variant analysis of historic incidents.
Caitlin Buckshaw
GitHub, Product Security Engineer
@caitlin_v3
Caitlin Buckshaw is a Product Security Engineer at GitHub. With over a decade of experience in the IT/Security domain, she has channeled her skills into product security and incident response in recent years. Her mission is to employ a data-driven approach, along with an emphasis on education and her ardor for security, to delve deeper into the nuances of incidents and develop comprehensive measures to mitigate their impact and prevent future happenings. In her non-security time, she enjoys walks along the Carolina beach and gardening.
----
Recorded Sept 22, 2023 at Strange Loop 2023 in St. Louis, MO.
thestrangeloop.com