Security BSides Las Vegas 2025

Scott Fraser

Scott has over a decade of experience in information security in offensive and defensive security teams. A majority of his experience comes from thinking like an adversary trying to infiltrate hospitals, warehouses, office buildings, and colleges. Scott has spent a considerable amount of effort developing exploits and thinking of ways to make devices do things they weren’t designed to do. He has also spent time building and maintaining defenses for hospitals, K-12, secondary education, and corporate networks.
Scott is an active volunteer at denhac, The Denver Hackerspace. He helps manage the local network and occasionally instructs classes on various information security topics and software defined radios. When he’s not sitting in front of a computer, he can commonly be found riding his adventure motorcycle in the mountains of Colorado, Utah and Arizona.


Session

08-04
17:00
40min
Cyber Incident Command System (CICS) A people orchestration layer
Blake Scott, Scott Fraser

During a wildfire, tornado or hurricane, who is in charge? In the United States, the answer is the Incident Commander as defined by the National Incident Management System (NIMS). NIMS provides a method to herd cats for all types of hazards regardless of agency. While the information security community developed several incident response systems from Fortune 100 companies to MITRE, these frameworks generally address tactics of an incident, instead we present a better way. Come drink the Kool-Aid with us and bring IT into the 20th century of incident response.

I Am The Cavalry
Copa