If Kubler-Ross were handling vulnerabilities

FIRST TC Plennary sessions

Wednesday — October 17th, 2007 09:50

In her groundbreaking work, On Death and Dying, and her Ph.D. research preceding the book's publication, Dr. Elisabeth Kubler-Ross developed "The Five Stages of Grief" to describe the five unique stages experienced by a person facing a terminal diagnosis. For dealing with imminent death alone, this seminal work transformed grief counseling in health care and allied disciplines. It has broader applicability to many other similar situations, basically any event in which traumatic outcomes are presented. The speaker will apply the Five Stages to product security incidents with explanations and examples based on real events. The suggestions can be easily expanded to any other type of cyber security event or response to a disaster. Attendees will leave the session with one more tool in the CSIRT toolbox for handling incidents more quickly and effectively.

Presenters

• James N. Duncan (BB&T Corporation, US)

  

  James N. Duncan, CISSP, is the Cyber Security Incident Response Team Coordinator for BB&T Corporation, currently the 11th largest domestic financial holding company in the United States. His constituency extends over 34 subsidiaries and nearly 30,000 employees in eleven states providing nearly every imaginable financial service from traditional banking, wealth management, and investments, to insurance, payroll management, software development, and ASPs for other financial services companies. The bank's web presence, bbt.com, has received numerous awards for excellence in on-line banking.

  Previously, Jim Duncan worked at Cisco Systems where he provided incident response team support within the Critical Infrastructure Assurance Group, acting as technical liaison for various ISACs and government agencies (US and others), and was the team lead for the Cisco Product Security Incident Response Team, handling vulnerabilities in Cisco products from initial report to final composition and publication of a security advisory. Prior to that, he was employed as network engineer and principal systems administrator in various departments at the Pennsylvania State University.

  In between, Mr. Duncan developed one of the first tutorials focusing on developing incident response teams way back in 1996 (with Rik Farrow for the USENIX Association), served a two-year term on the Steering Committee/Board of Directors of the Forum of Incident Response and Security Teams, and became an approved TRANSITS instructor, teaching several TRANSITS classes around the globe.

  Jim is also a soccer referee, certified by the United States Soccer Federation, US Indoor Soccer, and the North Carolina High School Athletic Association, and has officiated many hundreds of matches in the last four years.

  He is in wide demand on multiple continents as a speaker and instructor (and referee).