Incident Response from a Maritime Sysadmin’s War Room
Breaks down executive and technical incident response perspectives following real-world cyber incidents at the Marine Exchange of Southern California.
Summary
The Crucial Role of Maritime Exchanges
The Marine Exchange of Southern California manages vessel traffic service and harbor safety across major seaport complexes, serving as an indispensable operational hub for maritime logistics.
Executive and Leadership Perspectives on Cyber Incidents
Executive Director Kit Louttit shares the strategic and operational considerations that arise during active cyber threats, focusing on stakeholder communication, business continuity, and maritime safety.
Firsthand Technical Incident Response in the War Room
Senior Systems Administrator Steve Winston breaks down the technical triage, log analysis, and rapid containment actions executed during incident response in the Marine Exchange's war room.
Building Resilient Maritime IT/OT Infrastructure
Lessons learned emphasize the necessity of cross-functional disaster recovery drills, robust network segmentation, and continuous monitoring to maintain harbor traffic services during critical outages.
Related talks
AUSCERT·23 min
Lesley Carhart
When Critical Infrastructure Is Hacked: Inside Industrial Incident Response with Lesley Carhart.
The Linux Foundation·36 min
Eloi Bail · Mathieu Dupré
Explores SEAPATH: A LF Energy Project for Critical Infrastructure with an and evaluates key implications for security practitioners.
Community Stage·26 min
Pratik Lotia · Spencer Koch
Explores Reddit's defense architecture and custom in-house resiliency engineering designed to handle massive traffic spikes and sophisticated platform abuse.