When: Thursday, November 21st, 2019 9:00AM – 2:00P
Note: The October meeting was postponed until November and the format has been expanded to a half day event.
Register:
https://www.eventbrite.com/e/issa-portland-october-meeting-incident-response-tickets-75703257481
Description:
“Prevention is ideal, but detection is a must. However, detection without response has little value.” -anonymous
So, I have an incident, now what? In this talk we will explore PICERL, the six phases of the incident handling process (preparation,
identification, containment, eradication, recovery, and lessons learned). Afterward, participants will know the phases and understand next
steps for each phase, how to identify the team, communicate during an incident, and how to build out the process.
Speaker bio:
Brian Ventura – Information Security Architect, City of Portland
With a diverse background in consulting, public and private sector, and project
management, Brian brings a comprehensive view of security and technology. Brian advises public entities and private companies on security
best practices generally and within large projects. Brian’s day job is with the City of Portland, where he focuses on enterprise security.
Brian also teaches as a SANS Instructor.
Speaker bio:
Pete Dedes – Forensic Examiner Consultant, Avertium
Pete has more than 30 years of experience as a Computer Professional. Current responsibilities at Avertium (formerly Sword & Shield Enterprise Security, Inc.) includescomputer forensics, security assessments, incident response and tasks in the enterprise solutions arena. As a forensic analyst, Pete has provided courtroom testimony in several Tennessee State Courts.
Pete’s education includes an Associate’s degree in Electo-Mechanical Engineering from Owens Technical College in Toledo, OH and a Bachelor of Science Degree in Computer Science from the University of Tennessee.
Industry certifications include the Certified Computer Examiner (CCE) for forensics, and two GIAC certifications, Certified Forensic Analyst (GCFA) and Certified Incident Handler (GCIH). Pete is also licensed in the State of Tennessee as a Private Investigator.
Location:
Schwabe, Williamson & Wyatt
1211 SW 5th Ave
Suite 1900
Portland, OR 97204