Overview
Learn about the System-Centric Threat and Resilience Assessment Tool (STRAT) in this 35-minute conference talk that introduces a novel systems thinking approach to enhance cyber defense postures. Explore how to evaluate specific threats while understanding the interconnected nature of system components and their behavior over time, leading to more robust defensive strategies. Discover the application of systems thinking principles for analyzing both threat actors and organizational defensive strategies, enabling visualization of feedback loops, identification of resilience factors, and anticipation of system-wide impacts from adversarial actions. Master key takeaways including systems thinking for cyber defense, practical implementation of the STRAT methodology through case studies, and techniques for building resilience into both technological and human aspects of security. Additionally, gain insights into the CTI Capability Maturity Model (CTI-CMM), a practitioner-led initiative providing a vendor-neutral framework for assessing and maturing cyber-intelligence programs across industries, addressing common misconceptions about technology-driven solutions and offering practical roadmaps for program development.
Syllabus
Building Cyber Threat Resilience with STRAT: A new Methodology for CTI
Taught by
SANS Digital Forensics and Incident Response