EP179 Teamwork Under Stress: Expedition Behavior in Cybersecurity Incident Response

Guest:

Topics: 

How Google Does
 

Topics covered:

  • You talk about “teamwork under adverse conditions” to describe expedition behavior (EB). Could you tell us what it means?
  • You have been involved in response to many high profile incidents, one of the ones we can talk about publicly is one of the biggest healthcare breaches at this time. Could you share how Expedition Behavior played a role in our response?  
  • Apart from during incident response which is almost definitionally an adverse condition, how else can security teams apply this knowledge?
  • If teams are going to embrace an expeditionary behavior mindset, how do they learn it? It’s probably not feasible to ship every SOC team member off to the Okavango Delta for a NOLS course. Short of that, how do we foster EB in a new team?
  • How do we create it in an existing team or an under-performing team?
3 0 28