Effective and Efficient Automation for Security Teams
Picture it: the company boardroom, two weeks ago: Due to “an uncertain economic outlook,” the expanded security budget and new hires you asked for in 2023 have been denied. As the company “tightens its belt,” you may even lose existing budget and some headcount. You had plans to use those resources to help you shore…
Major Security Breach From Business Users’ Low-Code Apps Could Come in 2023, Analysts Warn
In a recent report, Forrester analysts warned of a looming major security breach at a large enterprise in 2023 rooted in business users using low-code/no-code (LCNC). The first part of this prediction is, unfortunately, a shared industry assumption: It would be surprising if we had an entire year without major headline security breaches. But the…
Gartner: Regulation, Human Costs Will Create Stormy Cybersecurity Weather Ahead
Security teams should prepare for what researchers say will be a challenging environment through 2023, with increased pressure from government regulators, partners, and threat actors. Gartner kicked off its Security & Risk Management Summit with the release of its analysts’ assessments of the work ahead, which Richard Addiscott, the company’s senior director analyst, discussed during…
How Security Complexity Is Being Weaponized
In my last article, I discussed the trade-offs we often make between complexity and capabilities when adopting new security tools and why there is often a point of diminishing returns in terms of the value derived from these tools as we layer on incremental functionality. In this article, I delve a bit deeper into the…
You’ve Just Been Ransomed … Now What?
Seemingly every day, a new organization announces they’ve been hit by a ransomware attack. The agnostic nature of ransomware leaves no industry immune to vulnerabilities. Be it school systems, healthcare providers, or government agencies, the battlegrounds are increasingly widespread. Companies should operate not on a basis of if they’ll be hit, but when. Executives and…
Insider Threat: Common Myths and Misconceptions
Insider threat is a growing area of concern and confusion among security practitioners. Typically accustomed to concentrating their resources on combating external threats, many security teams are eager yet unsure of how to combat threats that arise internally. This uncertainty, unfortunately, is often exacerbated by numerous common myths and misconceptions about insider threat, some of…