Information security professionals often play the role of detective analyzing large amounts of data in an effort to confirm information assets are properly protected and untainted. In today’s security ecosystems, the challenge becomes even greater because systems are integrated to process more information, more quickly in an effort to effectively protect organizations from cybercrime. During this session, we will investigate a serious hidden challenge which results in unreal conclusions, inaccurately gauged security risk and wasted SecOps resources, thereby killing your InfoSec program. Reminiscent of a Sherlock Holmes scenario, this session shares clues on a critical shortcoming, step by step, in the form of a murder mystery game, ultimately reveals the faults, and highlights strategies to overcome them. Come participate, play, and interact - see if you can be the first to solve this InfoSec murder mystery!