Better Connected

Lightning talk presented at Microsoft Ignite NZ 2015 by Laura Bell

Transcript

1. Laura Bell Founder  and  Lead  Consultant  -­‐  SafeStack @lady_nerd    laura@safestack.io   h6p:/ /safestack.io   Better connected
2. this  is  a  story  about  security
3. PEOPLE   TECHNOLOGY   PROCESS   CULTURE   ORGANISATION  
6. 87  ac=ve  usernames  and  passwords • 7  Twi6er  accounts • 1  Facebook 28  second  factor  authorisa=on  tokens • 22  applica=on  based • 6  SMS  code  based • 280  backup  codes Mul=ple  encryp=on  keys  &  certs •  PGP,  S/Mime,  SSL Mul=ple  financial  iden==es • 7  taxa=on  accounts • 6  na=onal  banking  iden=fiers • 3  payment  processors
9. PART  OF  THE  PROBLEM
10. 93%  organiza=ons  use  poor  quality,   shared  passwords  and  do  not  change  them   when  people  leave
11. 80%  organiza=ons  use  produc=on  data  in   test  environments
12. We  don’t  understand  our  own   environments  and  technology  suites
14. PART  OF  THE  SOLUTION
15. SORT  OUT  THE  BASICS. NO  EXCUSES PASSWORD   MANAGEMENT BACKUPS ROLES PERMISSIONS LANGUAGE PROTECTING   PRODUCTION   DATA
16. DATA  IS  A  PRIVILEGE …  store  less
17. WORDS  ARE  EXPENSIVE say  less,  communicate  more
18. YOU  CANNOT  REMOVE  RISK by  making  things  more  complex
19. EXPOSE  YOUR  VULNERABILITY focus  on  visibility  and  survival
20. EVERYBODY EDUCATED EMPOWERED ACCOUNTABLE
21. we  live  in  a  connected  world
23. go  protect  it  together
24. Laura Bell Founder  and  Lead  Consultant  -­‐  SafeStack @lady_nerd    laura@safestack.io   h6p:/ /safestack.io   Questions?