From Detection to Recovery | Incident Response Lifecycle | Ft. Giorgio Perticone | Ep.81 | Cloudanix

Join us as we delve into the world of incident response with our guest expert Giorgio Peticone, a seasoned incident detection and response consultant.In this insightful podcast, we explore real-life incident scenarios, key components of a robust incident response plan, and the critical importance of team collaboration and effective communication. Learn valuable lessons from past incidents, discover how to navigate the challenges of shifting from detection to containment, and gain insights into managing stress and burnout within the incident response team. 00:00 Teaser and Introduction 06:30 Real-life experience of a security incident 09:36 Lessons learned from security incidents 12:47 Key components for building an incident response plan 16:51 Testing and validating an incident response plan 23:46 Team collaboration challenges faced during an incident 27:47 Team collaboration challenges before and after an incident has occurred 31:55 Shift from detection to containment 37:35 Challenges faced when shifting focus from detection to containment 42:00 The Most challenging phase of an incident response 44:50 Approaching a client who recently faced an incident 49:35 Role of automation in improving the efficiency of incident response 52:30 Ensuring automation does not compromise security 55:00 Role of Human Analysts in Incident Response 58:08 Managing stress and burnout after an incident response 01:02:14 Advice for upcoming incident response leaders 01:07:07 How not build a detection engineering capability in an organization? 01:09:55 Summary 01:10:50 Learning recommendation from Giorgio ScaleToZero: https://scaletozero.com/ Cloudanix: https://www.cloudanix.com/