May 12, 2022
Cybersecurity Defense-in-Depth (DiD) has layers with some redundancies to eliminate a single point of failure and reinforce the control of modern attack vectors. The issue is the ‘glue’ that connects these layers so that they can ideally reinforce each other.
In reality, if these systems aren’t integrated tightly together, adversaries will eventually slip in through the cracks. Instead of a reinforced system, you get silos and complexity.
Therefore, even if you adopt the best technology, it must be accompanied by a continual process of validate-remediate-repeat to assure that the collective effect of these technologies delivers on their promise.
<Previous
The Artistic Nature of The External Attack Surface
What’s the attack surface of our Information Technology? Which are the exploitable digital assets? Are we even aware of all the doors and windows a cyber-burglar could leverage to enter our shop? Enough with the questions! We simply don’t have all the answers. We have a partial picture of our rather ambiguous attack surface, as […]
Next>
The Cyber David
This is a story of one David versus many Goliaths. Of an asymmetrical fight. Let’s start with the finances, a company with 1,000 employees might have 9-12 IT employees of which only 3 would be cybersecurity professionals. These 3 need to fend off thousands of well-funded adversaries who are looking for a breach-point 24/7, not […]