The Death of Compliance Theater – Part 3 of 3 Across the first two posts in this series, we made the case that compliance and security answer different questions and that even the last decade’s wave of GRC automation mostly made the wrong question faster to answer, by speeding up configuration snapshots rather than replacing
Read More
SERIES: “The Death of Compliance Theater” — Part 2 of 3 Part 1 of this series made the case that a passing audit and a secure environment are two different things, answering two different questions. This post is about a specific, well-intentioned attempt to close that gap and why it mostly automated the wrong half of
Read More
SERIES: “The Death of Compliance Theater” — Part 1 of 3 In 2013, Target passed its PCI-DSS assessment. The retailer was, on paper, compliant with the payment card industry’s security standard, the same standard designed specifically to prevent exactly the kind of attack that hit it a few months later, when attackers used stolen vendor
Read More
The Zero-Friction Alternative: How Seceon aiSecurity UIDGuard360 Approaches Identity Threat Detection Across the first two posts in this series, we made the case that identity has quietly become the real perimeter, and that the four dominant approaches to defending it (kernel agents, walled gardens, governance platforms, and privileged access vaults) all tend to break down
Read More
