Strange Species
We keep adding cybersecurity controls – so many, in fact, that we’ve classified them into acronym categories like SIEM, SOAR, AEV, and CTEM, amongst many more.
Yet, despite significant investments in cybersecurity technology, attacks continue to rise. The bad guys keep winning.
This calls for a different approach. Perhaps we’re doing something wrong?
It doesn’t take an alien in a flying saucer to realize that most cybersecurity controls are rarely tested. An annual, manual pentest covering just 5%-10% of the attack surface is merely a sampling exercise.
Instead of adding more technology, let’s focus on continuously validating that the controls we already have in place actually work!
