(ISC)2 CT Chapter Meeting July 2023

Chapter Meeting - July 2023

Discussion Topic:  The Difference Between Internal and External Threat Actors in Detection and Response

The latest Verizon DBIR report found that 74% of all breaches include the human element, and internal threat actors are behind nearly 1 in 5 breaches. These incidents require a different strategy for detection and response to effectively mitigate risk. This talk will highlight some of the key differences and provide actionable advice on what to do before, during, and after an insider threat incident.

Presenter:  Stacey Champagne

Stacey Champagne is a multi-disciplined expert in insider risk and cybersecurity leadership, with experience conducting analysis, investigations, and program management at globally recognized companies.

Stacey believes inspiring vigilance and loyalty in employees—through a holistic approach of technology and operational psychology strategy and solutions—is vital to effectively mitigate insider risk. Between 2019 and 2022, Stacey connected over 70 insider risk practitioners to elevate conversations on the subject matter through The Trade Secrets Network. Stacey is also the Founder & CEO of Hacker in Heels, a company disrupting the cybersecurity industry with tools and strategies for women to rise to top positions, claim six-figure salaries, and create a work culture that supports the next generation of cybersecurity talent.

Stacey holds multiple certifications including Certified Forensic Computer Examiner (CFCE), GIAC Security Leadership Certified (GSLC), GIAC Security Operations Manager (GSOM), and Insider Threat Program Manager (ITPM). She is an award-winning “Cyber Advocate” by the Women’s Society of Cyberjutsu in 2023, a 2019 Executive Women's Forum "One to Watch" Finalist, and alumni of Secure Diversity and SANS Institute's "Operational Cyber Executive" program. Stacey earned her Master of Science in Security and Resilience Studies with a focus on Cybersecurity Policy from Northeastern University, and a graduate certificate in Cybercrime Investigation and Cybersecurity from Boston University.