Back | Home Agenda

Steve Benton

VP, Anomali Threat Research, Former CSO BT Group | Anomali

Biography

Steve Benton is the Vice President of Anomali Threat Research at Anomali. He is a highly experienced executive-level security expert. Prior to joining Anomali, he was BT’s Deputy CISO and, latterly, CSO for this global communications company.

Sessions

15:15h

Keynote Session | BARCELONA CYBERSECURITY CONGRESS

Elite SOC Performance through Intelligence Led Security Operations – The “Wartime” Perspective

Steve Benton Anomali VP, Anomali Threat Research, Former CSO BT Group Speaker

23-05-2024 15:15 23-05-2024 15:45 Europe/Madrid Elite SOC Performance through Intelligence Led Security Operations – The “Wartime” Perspective With over a decade of experience protecting BT across the globe Steve will share his real world experience and how the security mission can be achieved at an elite level of performance. In his two talk series for BCC 2024 he will share a different approach that recognises the two states organisations operate in versus the dynamic cyber threat. In this first talk he will focus on “Peacetime” (where no significant threat is affecting the organisation). Smart use of intelligence in Peacetime drives preparedness and resilience for the wars that will ultimately come. NIS2 now expects this from organisations - but how? - surely there is too much to do and not enough time? Post the Covid fueled rapid digitisation of enterprises cyber threat now constitutes a full on business interruption risk for which the consequences can be significant and potentially existential. C-level execs and boards are worried and the CISO and security team have never been under more pressure to achieve the security mission Cybersecurity Congress room

Thu 23 15:15h - 15:45h Cybersecurity Congress room

11:45h

Talk | HACKING VILLAGE

Incident First Golden Hour – Elite SOC Performance on the razor’s edge

Steve Benton Anomali VP, Anomali Threat Research, Former CSO BT Group Speaker

Jean-Luc Labbe Anomali Technical Lead, Southern Europe Speaker

22-05-2024 11:45 22-05-2024 12:05 Europe/Madrid Incident First Golden Hour – Elite SOC Performance on the razor’s edge Organizations must be prepared to respond swiftly and decisively to cyber incidents. The "Incident First Golden Hour" represents a critical window of opportunity for elite Security Operations Centers (SOCs) to effectively disrupt attacks and minimise harm. This workshop outlines crucial steps for elite Security Operations Centers (SOCs) during the "Incident First Golden Hour," a critical period for responding to cyber threats. From briefing key stakeholders and assembling response teams to identifying affected systems and potential business impacts. Participants learn to assess vulnerabilities and detect compromises, while maintaining real-time awareness of unfolding events. See the strategies in operation that make the difference - swift reaction, threat intelligence enrichment, and continuous attack surface reduction. Sounds like a lot to achieve in the 'Golden Hour' right? You’ll be astounded! Be different. Be the Anomali! Hacking Village

Wed 22 11:45h - 12:05h Hacking Village

14:05h

Keynote Session | BARCELONA CYBERSECURITY CONGRESS

Elite SOC Performance through Intelligence Led Security Operations – The “Peacetime” Perspective

Steve Benton Anomali VP, Anomali Threat Research, Former CSO BT Group Speaker

22-05-2024 14:05 22-05-2024 14:35 Europe/Madrid Elite SOC Performance through Intelligence Led Security Operations – The “Peacetime” Perspective With over a decade of experience protecting BT across the globe Steve will share his real world experience and how the security mission can be achieved at an elite level of performance. In his two talk series for BCC 2024 he will share a different approach that recognises the two states organisations operate in versus the dynamic cyber threat. In this first talk he will focus on “Peacetime” (where no significant threat is affecting the organisation). Smart use of intelligence in Peacetime drives preparedness and resilience for the wars that will ultimately come. NIS2 now expects this from organisations - but how? - surely there is too much to do and not enough time? Post the Covid fueled rapid digitisation of enterprises cyber threat now constitutes a full on business interruption risk for which the consequences can be significant and potentially existential. C-level execs and boards are worried and the CISO and security team have never been under more pressure to achieve the security mission Cybersecurity Congress room

Wed 22 14:05h - 14:35h Cybersecurity Congress room

Please Share This

Steve Benton

Biography

Sessions

Elite SOC Performance through Intelligence Led Security Operations – The “Wartime” Perspective

Incident First Golden Hour – Elite SOC Performance on the razor’s edge

Elite SOC Performance through Intelligence Led Security Operations – The “Peacetime” Perspective