Career Series :: Talk & Tackle — Threat Modelling with ATT&CK

⚠️⚠️ To attend, please also fill up this registration form: [https://forms.gle/NAY2Ju1EsGNaqDo79] ⚠️⚠️
*Please keep a look out for our email on the outcome of your registration that will be sent to you at 1-2 day(s) before the session. If you did not receive any updates, please drop Anna an email at anna@div0.sg*

Career Series: Talk & Tackle is a dynamic initiative designed to elevate the professional development of cybersecurity practitioners. This series will feature a combination of hands-on workshops and interactive Q&A sessions, providing an engaging platform for experienced professionals to tackle pressing technical challenges in real-time.
Each quarter, Talk & Tackle will focus on four distinct themes:

1. Red Team: Participants will explore offensive security tactics, learning how to think like an attacker. Workshops will cover topics such as penetration testing methodologies, social engineering techniques, and the latest tools used in red teaming, equipping attendees with the skills to anticipate and counteract threats.
2. Blue Team: This theme will delve into defensive strategies, emphasizing threat detection, incident response, and risk management. Attendees will engage in simulations and case studies that allow them to practice and refine their skills in protecting networks and systems against various cyber threats.
3. White/Yellow/Green Team: These sessions will foster collaboration between offensive and defensive teams. We’ll address best practices in threat intelligence sharing, security policy development, and compliance measures. This integrated approach will highlight the importance of a cohesive cybersecurity strategy across different teams.
4. Emerging Technologies: As technology rapidly evolves, this theme will focus on the latest advancements in cybersecurity, including artificial intelligence, machine learning, and blockchain security. Participants will gain insights into how these technologies are reshaping the cybersecurity landscape and explore practical applications to enhance their own security practices.

ABOUT THE WORKSHOP
Read more here

AGENDA

• 6.30pm: Registration
• 7.00pm - 10.00pm: Talk & Tackle — Threat Modelling with ATT&CK
• Till Late: Networking

SPONSORS

• MEETUP VENUE SPONSOR: CyberSG TIG Collaboration Centre

SPEAKERS' BIO
Desmond CHER | Desmond is a Lead Cybersecurity Consultant with GovTech’s Cyber Security Group. With 14 years of ICT security experience under his belt in the public sector, his areas of expertise include threat modelling, risk assessment, wireless security assessment and cybersecurity innovative engineering and governance. Desmond is a strong advocate for the adoption of threat modelling in risk assessments, innovating a threat modelling methodology and toolset to guide security consultants in performing threat-based risk assessments with ease. He is CISSP, CSSLP, CCSP, CRISC and GIAC-GAWN certified.

Andre NG | Andre is an engineering manager for GovTech Anti-Scam Products (GASP). With his team, he builds tech products to enable the Government (including law-enforcement) and the industry to detect, deter, and disrupt tech-enabled scams at scale. Before working on combating scams, Andre led the Engineering team that supported the Government Cybersecurity Operations Centre (GCSOC), wrote and reviewed cybersecurity policies, and delivered on Government wide programmes such as the Vulnerability Disclosure Programme (VDP) and the Bug Bounty Programme (BBP).

IMPORTANT NOTICES

• Code of Conduct: [https://www.div0.sg/code-of-conduct]
• Terms of Use & Disclaimer Notice: [https://www.div0.sg/terms-of-use-disclaimer-notice]