Embracing the Multi-Party Dilemma: Incident Response Across Company Boundaries

For many companies, the past several years have represented a marked shift toward transferring operational responsibility of running critical services to third-party external vendors. This is particularly true as companies seek to scale and lower capital costs. From elastic compute capacity via external cloud providers, vendors for CDN and Edge, DDoS protection and beyond; vendors have increasingly become vital components in software systems. This talk speaks to some of the complexity of managing vendor relationships and the insights gleaned when looking at incidents with vendor involvement across 3 separate companies. Through a dynamic called “The Multi-Party Dilemma,” we introduce concepts from research and real-world findings to help us all learn from incidents across organizational boundaries.