Kanban is Nice to Humans
Where
Talks
LASCON 2025
Duration
50 min
Shows how a kanban board and short team stand-ups can cut interrupts and bring order to a security team's reactive work.
Summary
Boyd Hemphill argues that a kanban board offers far more than a simple list of tasks, and that its value depends on the rituals built around it. He frames the core problem for security teams as constant reaction: urgent interrupts pull people off planned work, and vague task definitions cause items to stall or move backward across the board.
The talk walks through a sample board for a small application security and cloud team. Reading it statically exposes unclear done criteria, oversized tasks and ambiguous dates, while watching cards move reveals stalled reviews and external dependencies. Hemphill replaces round-the-room status updates with a short task-by-task stand-up, where the lead asks what each in-progress item needs and teammates help unblock it. Interrupts get their own swim lane so their load becomes visible, and work discussions move out of direct messages into team channels.
A weekly meeting uses a lean-coffee style vote to pick topics, and decisions become tickets prioritized in the backlog rather than meeting notes. Improvement items from stand-ups and incident retrospectives flow through the same board, so they compete for capacity like any other work. The practical takeaways: make work visible, cap work in progress, and use regular rituals to balance interrupts against planned improvements.
Related talks
Talks
Examines why mature security operations centers still fail during incident response, focusing on human factors under pressure.
Talks·52 min
Sarah Fuller
Argues that curiosity, rather than more tooling, can make overloaded incident response teams more effective with what they already have.
Talks·49 min
Chris Tillett
Argues security operations succeed or fail on people and process, drawing on two years of SOC leader and analyst interviews.


