Put three endpoint security shortlists in front of a CISO and they’ll look nearly identical. Each vendor has an industry certification. Each has an analyst report that places them favorably, in one category or another. Most now carry a headline breach warranty worth a million dollars or more. On paper, the decision looks like a
Read More
SERIES: “The Death of Compliance Theater” — Part 2 of 3 Part 1 of this series made the case that a passing audit and a secure environment are two different things, answering two different questions. This post is about a specific, well-intentioned attempt to close that gap and why it mostly automated the wrong half of
Read More
SERIES: “The Death of Compliance Theater” — Part 1 of 3 In 2013, Target passed its PCI-DSS assessment. The retailer was, on paper, compliant with the payment card industry’s security standard, the same standard designed specifically to prevent exactly the kind of attack that hit it a few months later, when attackers used stolen vendor
Read More
Cybersecurity teams have access to more threat data than ever. Threat feeds can provide malicious IP addresses, domains, URLs, file hashes, vulnerabilities, and threat actor information. But more data does not automatically mean better security decisions. For a Security Operations Center (SOC), the real value of threat intelligence is what happens after the data arrives:
Read More