Lesley Carhart

Critical infrastructure, such as water, electric power, oil and gas, and manufacturing are crucial to our modern society. Unfortunately, the cyber threats facing them are increasing - from state actors pre-positioning for future attacks, to ransomware gangs out for the money, to disgruntled insiders. As industrial technology (ICS) has converged with information technology and become increasingly connected, these systems are increasingly ripe for abuse. Lesley has spent a career responding to and conducting forensic investigations of intrusions into industrial computer networks, and will discuss the current threat landscape, proper preparation for cyberattacks against industrial networks, and what we must do as a society to improve the cybersecurity of our most critical systems.

We do our best to build defenses to prevent cyberattacks in our organizations, but the reality is that any organization can be the victim of a cyberattack. It is always important to prepare for a worst case scenario, and that includes cybersecurity incidents. Lesley has spent a career responding to and investigating diverse cyberattacks, and professionally trains and tests the capabilities of incident response teams. This talk will discuss how to build a successful and healthy incident response program from a strategic, logistical, and tactical level - from constructing essential documentation, to engaging appropriate resources, and measuring and testing success.