For years the security industry has talked about how hard it is to communicate and work with users. But what about the relationship between security and operations? How is your relationship with Ops? Do you have a solid partnership or do you only talk when absolutely necessary? How much is the security of your enterprise helped by cooperation or hurt by the lack thereof? Is it possible to have a fully OPERATIONALLY SECURE network without these two groups working well together? Unfortunately, these two groups usually are in opposition to each other, with each side complaining that the other doesn't know what they are doing, doesn't understand what's important, and doesn't know how to run a network. This presentation will discuss the reasons for some of the biggest sources of friction and provide suggestions for resolution. If the gap between these two groups can be bridged, it will increase our ability to provide our customers and our users a secure environment to interact with, work in, and develop for so they can accomplish their mission.
Craig Bowser is an infosec professional with 15+ years of experience in the field. He has worked as an Information Security Manager, Security Engineer, Security Analyst and Information System Security Officer for the DoD, DOJ and Dept of Energy. He has some letters that mean something to HR departments. He is a Christian, Father, Husband, Geek, Scout Leader who enjoys woodworking, sci-fi fantasy, home networking, tinkering with electronics, reading, and hiking. And he has a to do list that is much larger then the to do slots that are open.