Tim Bandos

Tim Bandos, CISSP, CISA is the former Chief Information Security Officer & VP of Managed Security Services at Digital Guardian. An expert in incident response and threat hunting, he has over 15 years of experience in the cybersecurity realm at a Fortune 100 company with a heavy focus on Internal Controls, Incident Response & Threat Intelligence. At this global manufacturer, he built and managed the company’s incident response team. Tim has a wealth of practical knowledge gained from tracking and hunting advanced threats targeted at stealing highly sensitive data.

Incident Response

Screenshot Demo

Threat Hunting

Learning from a Security Incident: A Post-Mortem Checklist

Our Field Guide to Incident Response series concludes with a post-incident checklist you can use to make sure you’re learning from every incident and improving your defenses against future attacks.

Using Existing Tools to Facilitate Incident Response

Part 7 of our Field Guide to Incident Response series offers tips for using your existing security tools to facilitate incident response efforts.

3 Tips to Make Incident Response More Effective

Part 6 of our Field Guide to Incident Response series offers 3 tips to optimize coordination across the IR team and limit the opportunity for follow-on incidents.

The Five Steps of Incident Response

Part 5 of our Field Guide to Incident Response Series outlines 5 steps that companies should follow in their incident response efforts.

Creating an Incident Response Classification Framework

Part 4 of our Field Guide to Incident Response series outlines a two-tiered framework for classifying security incidents to enable more efficient incident prioritization and response. This video clip is taken from our webinar, Incident Responder's Field Guide - Lessons from a Fortune 100 Incident Responder. Feel free to watch the full webinar here.

Building Your Incident Response Team: Key Roles and Responsibilities

Part 3 of our Field Guide to Incident Response series covers a critical component of IR planning: assembling your internal IR team.

The Do’s and Don’ts of Incident Response

Time is of the essence when responding to a security incident – Part 2 of our Field Guide to Incident Response series offers five don’ts and four do’s for effective incident response. The video clip below explains the do's and don'ts of incident response and is taken from our webinar, Incident Responder's Field Guide - Lessons from a Fortune 100 Incident Responder. You can watch the full webinar here.

The Evolution of an Insider Threat: How a Business Analyst Turned into a Rogue Hacker

The Advanced Threat & Analysis Center (ATAC) team here at Digital Guardian are on high alert for any suspicious activity that is generated from our customer environments through our Managed Service offering. Most times we’ll detect external cyber-attacks and/or intrusions, however recently we came across a rather interesting finding that was almost too good not too share with our readers.

The Five Ws of Incident Response

Good incident response starts with answering these basic questions.

The Industry’s Only SaaS-Delivered Enterprise DLP

No-Compromise Data Protection is: