Effective security can help companies save in excess of $1 million on a nation-state attack from the likes of Russia, China and North Korea. Today’s columnist, Dan Pitman of Alert Logic, says as part of the security equation, companies should focus requests-for-proposals around business goals vs. looking to bring on too many products.

Today’s columnist, Richard Cassidy of Exabeam, says companies need to create a culture inside the SOC where the staff enjoys its work, respects leadership and wants to be there.

The Solarwinds Orion SUNBURST attack has been in the news for weeks. We’re starting to get great details into the actual attack, especially after FireEye released the initial set of indicators of compromise. But the question I want answered is why didn’t anyone discover this attack before the breach. What defenses are we missing to […]

Survey respondents said the investment spike was due to a major rise in cybersecurity attacks during the pandemic last year.

51% of 17,200 surveyed IT and security practitioners said that
their SOC’s ROI has gotten worse.

Last fall we discussed what security data do I really need to collect and analyze.  We know we don’t need it all, but this was only the sensor part of the discussion.  Now that we have that data identified and those sensors in place, what brain do I need to collect and analyze it? There […]

As defenders, we’re often forced to work in silos because of our dependence on an ever-growing array of tools that focus only on the assets they are designed to protect.

Paul and I have talked a lot about his enchanted quadrants on the podcasts, but for those who haven’t watched, here’s a quick summary…  An effective security program requires the integration of four key data sources: Logs (firewall, network, application, etc.) Endpoint (files, processes, logs, etc.) Network (flow and packets) Threat Intelligence Most organizations build […]