Lean Security: A Practical Approach to Security Projects

Summary:

It has been said "information wants to be free." A corollary to this could be "security wants to fail." And fail it does, time and time again. Traditionally, we solve this problem by tightening the screws, but is this right or does it just make things worse?

By adapting key ideas from Agile Development and Lean Manufacturing, this presentation illustrates a smarter way to strategize. Learn how to think differently and create a cost-conscious, less-is-more security environment. Stop locking horns and get your team to work together by focusing on learning, simplicity and measurement. It's time to shift from "Best Practice" to "constantly improving Better Practice."

Bio:

Josh More has worked as a security consultant, developer and system administrator. This has given him the experience to know when and why security projects often fail, and how to maximize success. Josh holds multiple security and technical certifications and has served in a leadership position on several security-focused groups. Josh believes that security works best from a holistic approach, and works all angles: risk assessments, posture analysis, incident response, malware analysis, infrastructure defense, system forensics, employee training and business strategy.