Degrees of Defense: Mapping the Pyramid of Pain to Layered Security Systems
Summary

Prioritization of risk is a perennial challenge for CISOs. In 2013, David Bianco of the SANS Institute published his "Pyramid of Pain" model to prioritize IOCs based on the amount of cost they impose on adversaries. This talk will expand on this model to help inform which defensive layers should be

Description

Prioritization of risk is a perennial challenge for CISOs. In 2013, David Bianco of the SANS Institute published his "Pyramid of Pain" model to prioritize IOCs based on the amount of cost they impose on adversaries. This talk will expand on this model to help inform which defensive layers should be prioritized for maximum ROI.

Date Submitted:
August 22, 2025
Category:
Information Technology
Audience:
  • Information Technology Staff

Presenter Information


Presenter(s):
Victor Weis
Consulting Systems Architect
Fortinet
About the Presenter(s):

Victor Weis is a Cybersecurity Architect for Fortinet Public Sector US. Based in Ohio, he consults with government and educational organizations across America on practical strategies for improving cyber outcomes in harmony with the mission of citizen service. In his spare time, he enjoys playing chess and reading RFCs by candlelight.

This entry has no reviews.

Leave a Comment