conference Archives - Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/tag/conference Exploring the intersection of cybersecurity, psychology, and resilience. Sun, 27 Jun 2021 10:46:04 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.4 https://jeanchristophvonoertzen.com/wp-content/uploads/2020/10/favicon-4.png conference Archives - Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/tag/conference 32 32 Event takeaways: BSidesMeSh21 – day 2 https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-2 https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-2#respond Tue, 22 Jun 2021 16:05:01 +0000 https://jeanchristophvonoertzen.com/?p=511 My key takeaways 11 min from publishing credentials (accidently) to github till pwn 2019: ~200k credentials in Github ; 2021: +20% runtime secrets go to application secrets managers AWS Secrets Manager GCP Secrets Manager Hashicorp Vault Azure Vault InfoSec’s dirty little secret: We can’t know all the options, but we still need to help secure […]

The post Event takeaways: BSidesMeSh21 – day 2 appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-2/feed 0 Event takeaways: BSidesMeSh21 – day 1 https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-1 https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-1#respond Mon, 21 Jun 2021 16:34:29 +0000 https://jeanchristophvonoertzen.com/?p=507 My key takeaways Security in sprints vs whole security sprints? Smaller activities from the very beginning. It is not full time, but always ongoing. And maybe, if the situation is very tricky, entire sprints might be necessary, too. — Thomas Fricke Kubernetes does its best to be secure inside. Unfortunatly it is not configured so […]

The post Event takeaways: BSidesMeSh21 – day 1 appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-1/feed 0 Event takeaway: 1. IT-Grundschutz-Tag 2021 https://jeanchristophvonoertzen.com/event-takeaway-1-it-grundschutz-tag-2021 https://jeanchristophvonoertzen.com/event-takeaway-1-it-grundschutz-tag-2021#respond Tue, 19 Jan 2021 18:49:16 +0000 https://jeanchristophvonoertzen.com/?p=357 My key takeaways Presentation of BSI-Standard 200-4 today, min 6 month RFC BSI since 30 years, IT-Grundschutz since 27 years Business continuity controls are often costly e.g. redundancy, … so BCM strategy should match business needs Combining ISMS and BCM ISMS: focussing of confidentiality, integrety and availability BCM: availability highest priority Combining the duty for […]

The post Event takeaway: 1. IT-Grundschutz-Tag 2021 appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/event-takeaway-1-it-grundschutz-tag-2021/feed 0