Cyber Fusion..... Marketing & Not

Lately everything has become "Fusion", a Fusion #EDR, a Fusion platform, I have even seen a SOAR that calls itself Fusion.

Its the new Buzz word in #Security :)

It is a fairly new concept, came to rise around mid 2021. But the concept has been around since 2016 (we used to call it Cyber Dome then instead of Cyber Fusion).

To understand the concept and sequences, we need to mention that in general #Cyber Fusion means, brining all Security Function (Blue, Red, GRC, Hunting, Intelligence etc. ) into one main function at the Cyber Fusion Center.(we should be soon seeing Chief Fusion Officer)

The concept so far is promoted as an organizational restructuring, moving few teams from different departments to a singular management. There are no actual platforms to support this yet except a single platform.

However, challenges I noticed so far

* Think of Fusion as the Totalitarian of #Cyber Security. Internal Departments will fight internally to gain power of the Center. whoever controls the CFC will feel less dispensable on an organization level, this leads to internal conflict and slows down the implementation

* Even in Organizations that are consolidating functions, some departments still retain certain functions , for example #red teaming. It is very common, specifically in banks, that RT engagements are initiated by different departments.

* The fear of Dictatorship :) . if the Fusion Officer holds all of the power, what are the controls to monitor him as well.

* Lack of awareness and/or understanding to the Concept. Some professionals think that their #SIEM is actually the #Fusion Center.

To have #Cyber Fusion concept (which I had personally always believed in since mid 90s regardless the branding) there has to be a clear platform that achieves the concept of Unity & Transparency.

The platform should offer a hierarchy approach

1) A President-like view to see Index, High Dashboard, Indicators, Current Status. This enables an informative decision making process and strategic planning

2) A Senate-like interface where each head of function can have a President-Like view over his own section/function/department/team, in addition to the President view

3) A House of Representative-like Interface for team members to monitor, operate, visualize, global hunt & risk assessment of their respective functions. get things done in the most efficient and speed possible .

This would help the concept to propagate in the right way, regardless all of the associated marketing pollution, and more importantly, will help applying a

Totalitarian concept in the most Democratic & Transparent way

#cybersecurity?#security?#intelligence?#cyberfusion?#deadcult?#ciso?#informationsecurity?#transformation