CypherCon 2026

Tales from the Inside: An Incident Response Weekend

Sahan Fernando

Abstract:

Organization’s rarely get to talk about their responses to activities. This talk is intended to discuss a weekend spent doing incident response, remediation, and recovery. We intend to discuss what happened, how were able to respond, the impacts on our organization short and longer term, things that went well, and the issues we ran into, both from an investigation and an impact on the organization. We intend to wrap with suggested areas of focus and emphasize the controls that helped keep the incident from escalating.

Sahan Fernando

CISO, Rady Children’s

Sahan Fernando is the Chief Information Security Officer for Rady Children’s Hospital San Diego, one of the nation’s top pediatric health care systems. His experience includes security operations and engineering, incident response, and IT and Information Security Program Development in different verticals. He has spoken at multiple security conferences including Bsides CLT, Health-ISAC, Blue Team Con, and Epic XGM/XGM. He also serves on the board for Health-ISAC.