Better Connected

Lightning talk presented at Microsoft Ignite NZ 2015 by Laura Bell

Transcript

1. Laura Bell
   Founder  and  Lead  Consultant  -­‐  SafeStack
   @lady_nerd    laura@safestack.io  
   h6p:/
   /safestack.io
    
   Better connected
   

   View Slide

2. this  is  a  story  about  security
   

   View Slide

3. PEOPLE  
   TECHNOLOGY  
   PROCESS  
   CULTURE  
   ORGANISATION  
   

   View Slide

4. View Slide

5. View Slide

6. 87  ac=ve  usernames  and  passwords
   • 7  Twi6er  accounts
   • 1  Facebook
   28  second  factor  authorisa=on  tokens
   • 22  applica=on  based
   • 6  SMS  code  based
   • 280  backup  codes
   Mul=ple  encryp=on  keys  &  certs
   •  PGP,  S/Mime,  SSL
   Mul=ple  financial  iden==es
   • 7  taxa=on  accounts
   • 6  na=onal  banking  iden=fiers
   • 3  payment  processors
   

   View Slide

7. View Slide

8. View Slide

9. PART  OF  THE  PROBLEM
   

   View Slide

10. 93%  organiza=ons  use  poor  quality,  
    shared  passwords  and  do  not  change  them  
    when  people  leave
    

    View Slide

11. 80%  organiza=ons  use  produc=on  data  in  
    test  environments
    

    View Slide

12. We  don’t  understand  our  own  
    environments  and  technology  suites
    

    View Slide

13. View Slide

14. PART  OF  THE  SOLUTION
    

    View Slide

15. SORT  OUT  THE  BASICS.
    NO  EXCUSES
    PASSWORD  
    MANAGEMENT
    BACKUPS
    ROLES
    PERMISSIONS
    LANGUAGE
    PROTECTING  
    PRODUCTION  
    DATA
    

    View Slide

16. DATA  IS  A  PRIVILEGE …  store  less
    

    View Slide

17. WORDS  ARE  EXPENSIVE
    say  less,  communicate  more
    

    View Slide

18. YOU  CANNOT  REMOVE  RISK
    by  making  things  more  complex
    

    View Slide

19. EXPOSE  YOUR  VULNERABILITY
    focus  on  visibility  and  survival
    

    View Slide

20. EVERYBODY
    EDUCATED
    EMPOWERED
    ACCOUNTABLE
    

    View Slide

21. we  live  in  a  connected  world
    

    View Slide

22. View Slide

23. go  protect  it  together
    

    View Slide

24. Laura Bell
    Founder  and  Lead  Consultant  -­‐  SafeStack
    @lady_nerd    laura@safestack.io  
    h6p:/
    /safestack.io
     
    Questions?
    

    View Slide