Delete Yourself - Cognitive Bias During Incident Response
Explore cognitive biases in incident response during this BSides Cleveland conference talk. Learn how to develop and practice an effective incident response plan, emphasizing the importance of writing it down, understanding team roles, and knowing when to escalate. Discover the value of remaining calm and skeptical, verifying work at each step, and allowing subject matter experts to lead in their areas of expertise. Examine the role of logs in security investigations, understanding their limitations and potential for misinterpretation. Consider worst-case scenarios for your company and how to prepare for them. Gain insights into creating flexible incident response plans that can adapt to various situations, and understand the critical balance between technical expertise and legal considerations in cybersecurity incidents.