Back to the Future: What Will Endpoint IR Really Look Like?

Presented by

Greg Scheidel, SANS | Robert Fink, BlackBerry

About this talk

Let’s go back, way back to 2013 when AV was AV, whitelisting was whitelisting, and EDR ads were taking over airport terminals. Ah, the good old days. News Flash! Dr. Emmett Brown just showed up and he’s got urgent news from the future. No matter how good your incident response capabilities are, they cannot stand on their own (sort of like Biff, who was nothing without his buddies). To be effective, incident response (IR) must be part of an overarching strategy that includes prevention and detection. It must be integrated with and supported by SOC and adjacent services that identify, prevent, and detect threats regardless of source and location, internal and external, or on network or off. Join SANS Instructor Greg Scheidel and BlackBerry’s vCISO Robert Fink as they discuss what we’ve learned about prevention, detection, and response in the past, what we can glean about the future of enterprise IT, and what it means for the future of your endpoint protection strategies.
Related topics:

More from this channel

Upcoming talks (0)
On-demand talks (73)
Subscribers (7435)
BlackBerry (NYSE: BB; TSX: BB) provides intelligent security software and services to enterprises and governments around the world. The company secures more than 500M endpoints including 150M cars on the road today. Based in Waterloo, Ontario, the company leverages AI and machine learning to deliver innovative solutions in the areas of cybersecurity, safety and data privacy solutions, and is a leader in the areas of endpoint security management, encryption, and embedded systems. BlackBerry’s vision is clear — to secure a connected future you can trust. For more information, visit and follow @BlackBerry.