MacEnzie Brown of MSFT DART discusses IR Competence & Capabilities

In this video, Mackenzie Brown from Microsoft’s DART team discusses the intricacies of incident response and the challenges faced by MSPs in managing security incidents. She highlights the importance of asset management and threat-informed defense for businesses, particularly in the education sector, which has been increasingly targeted by cybercriminals. Brown also emphasizes the need for critical thinking and digital forensics skills in cybersecurity, and shares insights on how organizations can improve their security posture and prepare for potential cyber threats.

• The importance of asset management is foundational in identifying and managing security incidents, ensuring that organizations know what systems they have and how they are being used.
• The cyber talent gap is a critical issue, with a need for creative solutions to train and recruit individuals into cybersecurity roles, emphasizing critical thinking and practical skills over traditional education.
• Understanding threat actor techniques and having a threat-informed defense are crucial for MSPs to mitigate risks, especially in the wake of supply chain attacks targeting IT service providers.