Slide 1

Slide 1 text

@purpleteamlabs @binarymistbooks @binarymist 

Slide 2

Slide 2 text

COMMUNITY TOPICS Welcome InfoSecNZ Slack, OWASP Slack purpleteam now in alpha and pre-releases being published regularly Anything else people want to mention? 

Slide 3

Slide 3 text

WHAT DO YOU WANT FROM OWASP CHCH THIS YEAR? We have 3 slots le for this year Ideas for meetups... 

Slide 4

Slide 4 text

1. Talk and workshop 3 things that Devs can do in their Sprints to improve their security, possibly a series of these? 2. Session on what goes into a good build pipeline 3. A walk through the new OWASP API Security Top 10 and how they compare with the OWASP Top 10 Web Application Security Risks 4. Threat modelling code, how to do it? how to get the most out of it? 5. OWASP tooling and all the new projects that are happening 

Slide 5

Slide 5 text

OWASP MEETUP COVID 

Slide 6

Slide 6 text

IMPACTS What negative infosec impacts has Covid had on you and/or your work-place? What positive infosec impacts has Covid had on you and/or your work-place? 

Slide 7

Slide 7 text

ATTACKERS TACTICS What sort of attacks are on the rise? Obviously phishing, what else? What have you and/or your org done or are doing about this? 

Slide 8

Slide 8 text

BUSINESS CONTINUITY Has business continuity been affected for you, if so, how? How can you improve this? What do we need to be thinking about in our jobs in relation to InfoSec and personal OpSec? What must orgs and us personally be considering in order to sustain/create data, application, infrastructure and personal security while still considering efficiencies and user experience? 

Slide 9

Slide 9 text

REMOTE WORK How has/is remote work changed/changing the infosec stack? What do we need to be thinking more about now than we used do? 

Slide 10

Slide 10 text

TAKE-AWAYS (IMPROVEMENTS) What do we need to improve? Ideas on how? 

Slide 11

Slide 11 text