Incidents & Breaches

Vera Kask “The Incident Commander”

Vera ran incident response for a decade, which means she has spent more 3 a.m. bridge calls than she would like to count. She covers breaches and ransomware the way she used to write post-mortems: what happened, in what order, what the logs said, and which decision would have changed the outcome.

She is allergic to the word "sophisticated", believes most breaches start with something boring, and will always ask how long the attacker was in before anyone noticed.