Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
Incorporating a Prevention Mindset into Threat Detection and ResponseThreat detection and response systems, by definition, are reactive because they have to wait for damage to be done before finding the attack. With a prevention-mindset, security teams can proactively anticipate the attacker's next move, rather than reacting to specific threats or trying to detect the latest techniques in real-time.
The report covers areas enterprises should focus on:
What positive response looks like.
Improving security hygiene.
Combining preventive actions with red team efforts.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
0 Comments
User Rank: Apprentice
11/11/2019 | 5:24:39 PM
Anyone relying 100% upon cyber insurance for security is foolish.
Unfortunately, we are seeing more infosec professionals mistakenly use misleading and inaccurate examples of claim denials such as Sony, Mondelez, Bank of Blacksburg etcetera which did not involve stand-alone cyber policies. Other citings involve very early versions of cyber policies.
Best practice is to consider cyber insurance as the last piece of the cyber risk management puzzle. Use a broker with expertise, get multiple quotes and make sure to review the policy including conditions and exclusions. If you want to use your own IR folks, try to negotiate that into the deal.
Auto insurance is not a cure for reckless driving. The same is true for cyber insurance.