Too many companies are tool rich, process poor when it comes to cybersecurity. The best tools are worthless when they're not implemented properly or operationalized in your environment. ------------------------------ ?? The easiest way to stay up to date in cybersecurity is with my newsletter. ??Sign up with the blog link at the top of this post.
David Kruse
10 个月
If you can’t operationalize your tools to extract security value from them, it’s like staking a claim to a gold mine, buying dozens of pickaxes, shovels, and wheelbarrows, but forgetting to hire miners.
Johnny Collins
10 个月
A gray beard taught me a while ago, "A fool with a tool is still a fool." It still applies 20+ years later. Tools help, but both qualified people and tested processes are key. And this has to be done internally and with 3rd party providers. I have clients who want to run their incidents and have us check them. Others are just not there and rather have us run with it. Know where you are in the maturity cycle and test, test, test ahead of incident. The same gray beard mentioned above taught me "Proper prior planning prevents piss poor performance." Again, still true today.
Lisa Ackerman
10 个月
I couldn’t agree more! I would add having people trained to use them as another important piece of this.
Walter Haydock
10 个月
And if all you have is a hammer... ...you are going to get a lot of holes in your wall.
Nathaniel Shere
10 个月
Tools without strong processes and skilled engineers simply add more overhead, more frustration, and more opportunities for attackers.
Lester Chng
10 个月
Is today bash your tools day?
I am inclined to believe there are probably a lot of underutilized tools in many organizations, which could be due to a lack of adequate training on those tools, or probably the more common issue of being so busy working tickets that you have no time to develop skills on them.
Aqsa Taylor
10 个月
So glad to see the focus on processes! I was just talking about this too ??
Nicolas Thomas
10 个月
Love the formula ! Furthermore they seems to look for the tools instead of the persons/process who will choose the best suited tools
Taking the "Ugh" Out of Proposal Development
10 个月This is also where duplicative tools come from in the same stack. Orgs don't know their overall goals and process and just keep adding to the stack.