Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
Incorporating a Prevention Mindset into Threat Detection and ResponseThreat detection and response systems, by definition, are reactive because they have to wait for damage to be done before finding the attack. With a prevention-mindset, security teams can proactively anticipate the attacker's next move, rather than reacting to specific threats or trying to detect the latest techniques in real-time.
The report covers areas enterprises should focus on:
What positive response looks like.
Improving security hygiene.
Combining preventive actions with red team efforts.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
0 Comments
User Rank: Apprentice
12/15/2020 | 10:59:39 AM
Too many organizations think that they can mostly ignore security in how they go about operating and organizing what they do on a daily basis and then throw a bunch of cash at some fancy tools to layer on top under the false impression that will save them...it won't. Sure they may have a CISO and a cyber-security staff but those positions aren't looked at as fundemental to shaping how the business operates, they are add ons that live in thier own world and do their own thing and mostly get called upon to report when something has already gone wriong, much like the security guard in your story.
Ultimately, decent security isn't really that complex... what's going to stop 95 percent of the breaches that occur doesn't require rocket science or a boat load of cash, nor even that much in the way of tools beyond the basics.... what it does require is discipline and consistancy and an understanding from the ground up that security WILL effect the way the organization operates, how non-security staff have to behave and yes, sometimes it will be a slight inconvenience.
Cyber-security is much like sports, if you ignore the fundementals you aren't going to win ball games, no matter how much money you throw at equipment. Cyber-Security today for too many organizations is alot like spending $1000 on a bat and $1500 on a glove .... and never holding practice.