Call us now:
A great article further highlighting the challenges in the post by Brian Krebs. Companies such as Wiz, for example, are not just start-ups. They are companies upon which organizations rely to mange their security. If these companies fail, as we saw with Crowdstrike, we all have a problem.
One understands intimately the PE model. But is it at odds with the need for national, economic and corporate security, in the context of turning an organisation based on revenue. Especially when cybersecurity and ICT risk management is in a mess. (read any post by Chris Wrey, Director of the FBI)
We need to see tangible, reliable and consistent benefits from cybersecurity tech? It’s needed, in some cases its fragile and in others it doesn’t do the job. Especially when one considers the maturity of 90% of corporate cyber. Sime corporates will buy what they are told to. ‘It’s gona manage your cybersecuriry….honest govna’.
Cyber is not a tech risk, it’s a business risk mitigated by tech, with regulatory, legal and compliance risk thrown in for good measure.
There’s that Unit 8200 again. Offensive and defensive national security ain’t the same as defensive corporate security.
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC Senebria
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7222900003017502720