DFIR maturity, what is it and how to achieve it?
One of the most difficult concepts for a corporate DFIR team is that of maturity. How is it proven and measured? How does a DFIR team bring value when events of interest aren’t happening? This presentation will show some of the high-level topics that begin to answer those questions as well as cover current cybersecurity topics that can be utilized to create a top-tier and mature DFIR team. Topics include the creation of metrics and KPIs, essential skill sets, advanced tools and technologies, automation and AI, robust playbooks, documentation, and communication plans, senior leadership buy-in and support, and the adoption of a maturity model.