We have vetted several specialist firms who do this. While we can orchestrate the response, and ensure compliance throughout, we find that having a forensic partner is essential for non-trivial cases. Happy to discuss.
for the larger community I am engaged efforts in CNCF security groups to shore up the cloud native supply chain security and as part of that response to CVEs from the projects and guidance to the downstream cloud providers, vendors, and of course end users. If anyone is interested please join our Wed 10APT calls. If there is a similar effort here @ CSA would love to collaborate.
Michael, will DM you offline.
------------------------------
Robert Ficcaglia
CTO
SunStone Secure, LLC
------------------------------
Original Message:
Sent: May 12, 2021 10:22:35 AM
From: Michael Carr
Subject: Cloud Incident Responders
Anyone have any advice or recommendations on where best to post/find experienced Cloud incident response candidates?
Feel free to contact me offline . . .
Thanks.
------------------------------
Michael Carr
Attorney at Law
[email protected]
------------------------------