OWASP LA November In-Person Meetup - Cassio Goldschmidt

​OWASP LA November In-Person Meetup:

​Topic: Why Incident Response Plans Fail Under Pressure

​Abstract
Most incident response plans do not fail because the document is missing. They fail because people do. Under pressure, some teams panic and abandon strategy. Others choke, overanalyze, and freeze. In both cases, the plan may be technically sound, but human performance and cross-functional coordination break down.

This session explores why comprehensive IR plans still collapse in real incidents, even in organizations with mature security programs and well-documented procedures. Through breach case studies and practical lessons from high-pressure performance, we will examine what traditional tabletop exercises and compliance-driven training rarely test: legal pressure, executive escalation, media scrutiny, conflicting incentives, and the absence of pre-authorized decisions.

Attendees will leave with a practical framework for making incident response more resilient. We will cover how to reduce panic through cognitive offloading and automation, how to reduce choking through pre-authorized response paths and role clarity, and how to design adaptive simulations that force teams to make decisions under realistic pressure. We will also discuss how blameless postmortems turn failure into better instincts for the next crisis.

The goal is not a better-looking incident response plan. The goal is a response culture that still works when the facts are incomplete, the stakes are high, and every minute counts.

Bio
Cassio Goldschmidt is Co-Founder, CTO, and CISO of Reflex Security and previously served as CISO of ServiceTitan, where he built the company’s security program and launched award-winning security awareness experiences. Over a 25-year career, he has led cybersecurity, product security, and cyber resilience initiatives at Aon/Stroz Friedberg, NCR, Intuit, Symantec, and Cisco. A three-time Top 100 CISO, Cassio is the founder of OWASP Los Angeles and a frequent speaker at RSA, Black Hat, OWASP, and ISC2 events. He holds an MBA from USC, an MS in Software Engineering from Santa Clara University, and multiple patents.

​This event is intended for security professionals, developers, engineers, students, researchers, and anyone interested in application security, developer security, software supply chain security, and practical security engineering.

​More details coming soon.

Code of Conduct

​OWASP is committed to providing a welcoming and inclusive environment for everyone. Please review the OWASP Conference and Event Anti-Harassment Policy:
https://owasp.org/www-policy/operational/conferences-events.html#conference-and-event-anti-harassment-policy

​Sponsorship Opportunities

​Sponsorship opportunities are available for future OWASP Los Angeles events.

​Vendors interested in sponsoring may contact:
sponsorship.la@owasp.org