Chris Schreiber
Higher Education Cybersecurity Strategist,
CampusCISO
Incident response (IR) in higher education is a target-rich environment; this allows for lots of opportunities to test tools and techniques. By analyzing your incident statistics and your IR team's metrics, you can start to pinpoint gaps. We will review historical stats, incident details, and tools deployed. We will also discuss how we reduced discovery time and investigation time at the University of South Carolina and what change was the most effective. These lessons can be applied to your environment to improve your IR program.