SolarWinds, Colonial Pipeline - How to collect and share cybersecurity incident data?

SolarWinds, Colonial Pipeline, and countless other cyberattacks - How can we collect and share cybersecurity incident data? This panel discussion will explore: • How you can collect and share cybersecurity incident data • How you can use VERIS for incident metrics, threat modeling, countermeasures, and risk management • How you can get started in using VERIS Join David Thejl-Clayton, Senior Advisor - Cyber Defence; John Grim, Head of Research, Development, Innovation, VTRAC; and Suzanne Widup, Co-Author, DBIR team and Founder of the Digital Forensics Association to learn VERIS, the Vocabulary for Event Recording and Incident Sharing, is a set of metrics designed to provide a common language for describing cybersecurity incidents (and data breaches) in a structured and repeatable manner. VERIS provides cyber defenders and intelligence practitioners with the ability to collect and share useful incident-related information - anonymously and responsibly - with others. Takeaways from this session will include: • VERIS Framework Overview • A4 Threat Model Components • VERIS Use Cases Speakers David Thejl-Clayton, Senior Advisor - Cyber Defense at Combitech Danmark John Grim, Head of Research, Development, Innovation, VTRAC Suzanne Widup, Co-Author, DBIR team and Founder of the Digital Forensics Association Host Niloufer Tamboly