Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
Practical Network Security Approaches for a Multicloud, Hybrid IT WorldThe report covers areas enterprises should focus on for their multicloud/hybrid cloud security strategy:
-increase visibility over the environment
-learning cloud-specific skills
-relying on established security frameworks
-re-architecting the network
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
0 Comments
User Rank: Apprentice
7/27/2016 | 8:01:33 PM
The real problem I see is lack of training of management of what a professional in the field needs to be effective. I often get unreasonable requests for job responsibilities from the manager; demands for skills not required as well as ignoring critical skills that the manager does not themselves posses and does not realize how crucial they are.
A great way to improve the information security status of an organization would be to improve the low and mid-level management of such teams. It would also help if organizations stopped focusing on the wrong problem. A defensive expert is not a penetration tester, nor are they useful on my team. As one coworker of mine phrased it, a pen tester knows one trick really well and they keep applying it across lots of applications, lots of systems until it works. A defensive expert has to address every application, every threat, every system to ensure that the risks are identified, mitigated and addressed: they have to have something in every column.