October 23rd, 2019 Chapter Meeting: Incident Response

When: Wednesday, Octobert 23rd, 2019 11:30AM – 1:00P




“Prevention is ideal, but detection is a must. However, detection without response has little value.” -anonymous

So, I have an incident, now what? In this talk we will explore PICERL, the six phases of the incident handling process (preparation,
identification, containment, eradication, recovery, and lessons learned). Afterward, participants will know the phases and understand next
steps for each phase, how to identify the team, communicate during an incident, and how to build out the process.


Brian Ventura is an Information Security Architect. With a diverse background in consulting, public and private sector, and project
management, Brian brings a comprehensive view of security and technology. Brian advises public entities and private companies on security
best practices generally and within large projects. Brian’s day job is with the City of Portland, where he focuses on enterprise security.
Brian also teaches as a SANS Instructor.


Schwabe, Williamson & Wyatt
1211 SW 5th Ave
Suite 1900
Portland, OR 97204

This entry was posted in Uncategorized. Bookmark the permalink.