SolarWinds, Colonial Pipeline, and countless other cyberattacks - How can we collect and share cybersecurity incident data?

This panel discussion will explore:

• How you can collect and share cybersecurity incident data

• How you can use VERIS for incident metrics, threat modeling, countermeasures, and risk management

• How you can get started in using VERIS

Join David Thejl-Clayton, Senior Advisor - Cyber Defence; John Grim, Head of Research, Development, Innovation, VTRAC; and Suzanne Widup, Co-Author, DBIR team and Founder of the Digital Forensics Association to learn

VERIS, the Vocabulary for Event Recording and Incident Sharing, is a set of metrics designed to provide a common language for describing cybersecurity incidents (and data breaches) in a structured and repeatable manner. VERIS provides cyber defenders and intelligence practitioners with the ability to collect and share useful incident-related information - anonymously and responsibly - with others.

Takeaways from this session will include:

• VERIS Framework Overview

• A4 Threat Model Components

• VERIS Use Cases

Speakers

David Thejl-Clayton, Senior Advisor - Cyber Defense at Combitech Danmark

John Grim, Head of Research, Development, Innovation, VTRAC

Suzanne Widup, Co-Author, DBIR team and Founder of the Digital Forensics Association

Host

Niloufer Tamboly

Subscribe to Cybersecurity Career Talks on Soundwise