C2. PCI Alone Won't Save You: Lessons Learned from Credit Card Data Breaches
Wednesday, June 5, 2019
2:00 PM - 3:00 PM
After observing millions of dollars stolen and large fines assessed during the response to over 15 card data breaches, I thought, “We can do better”. During each investigation I observed similar security gaps and questions from the technical and leadership teams. Learn from my experience in the trenches and what PCI doesn’t tell you. The presentation includes (1) a technical dive into observed trends and methods for credit card data theft and (2) a walkthrough of what to expect during a card data breach.
Attendees of the presentation will walk away with key controls to implement, potential areas to expand in their threat hunt program, and key updates to make in their Incident Response Plan or table top exercises.
Phillip Kealy is the Senior Manager for Incident Response for the Mandiant Denver and Phoenix offices and provides emergency services to clients when a security breach occurs. With over 15 years of experience in both private and public sector environments, Mr. Kealy has a solid background in incident response, security architecture, and networking.