The majority of security teams are stuck between a rock (almost static risk registers, updated quarterly from hand-curated spreadsheets), and a hard place (a SIEM - or several! - aggregating 1000s of alerts). But neither of these create, deliver, nor easily link inputs and outputs and reasoning to business context.
If you forgot the status quo existed, and imagined nirvana, what might that look like?
For the Photobox Group Security team, the answer was: ""A continuously updating knowledge graph, that automatically links security and business data to create relevant relationships between all the parts of our enterprise ecosystem, and which enables us to input, query, vizualize, share, update and distribute information. In seconds.""
This talk demos the technology stack we've built to achieve that, using commercially available SaaS-based components including JIRA, Slack and ELK. We'll open-sources the code to run the robot army and give you an introductory handbook for how to adopt a graph-based approach to security in your own organisation, (starting with data you already have!)