Speaker
Description
Objective: Sharing RNP Brasil's experience in using the Fusion Teams concept for delivering projects and solutions, bringing greater integration with the teams and reducing the gaps that exist between the internal areas of information security and IT.
This concept also manages to produce a more agile and functional delivery, encompassing aspects such as governance, processes, and documentation, something that is usually lacking in the deliverables of technical teams.
Details: In 2025, the Information Security team (CAIS RNP) introduced a new concept for project management, team management, and value delivery: Fusion Teams.
This concept integrates different technical areas of CAIS RNP to work collaboratively and agilely to deliver results, working towards the evolution of monitoring and incident response capabilities, governance, and information security architecture.
With this approach, we were able to carry out 3 projects where we had members working from the following teams:
• Blue Team
• GRC
• Red Team
• Architecture
• Projects
• CSIRT
• SOC
This work gave the members a sense of "ownership." Allowing not only for delivery with greater operational excellence, but also for delivery with documents, processes, and regulations from the GRC team, continuous improvement processes by the Blue Team, offensive security validation processes by the Red Team, full infrastructure validation and network design by the Architecture team, incident response planning by the CSIRT, and constant monitoring by the SOC.
In this way, we demonstrate the strategic and operational value of the Fusion Teams approach to accelerate innovation, project delivery, and digital transformation, enabling synergistic collaboration between Information Security professionals and even other areas, since we will now expand this concept to have joint deliveries with the entire RNP (Brazilian National Research and Education Network).
The operational advantage of Fusion Teams is the ability to deliver a project or system/tool implementation involving members from all areas. This allows for a more complete delivery, as it involves multiple areas, and also enables more detailed delivery with processes and governance structures already in place.
Intended audience: This presentation is intended for professionals in the global research and education community who work to strengthen cybersecurity and risk management practices. It will be particularly relevant for research and education network security managers (NRENs), members of cybersecurity incident response teams (CSIRTs), risk management specialists, and technical leaders responsible for protecting digital infrastructure. It is also suitable for decision-makers, researchers, and technology vendors interested in adopting a practical approach to cybersecurity management in research and education networks.