@mikhail_khusid @cyb3rops @olafhartong Too many places get into the weeds of "Is X in my threat model? If yes, build detection." They can spend eternity in those decision/response loops. You can get coverage for a great percentage of threats handily, and buy yourself time to focus on the few, truly hard cases.

← @kwm Twitter archive

Keith

@kwm

@mikhail_khusid @cyb3rops @olafhartong Too many places get into the weeds of

"Is X in my threat model? If yes, build detection."

They can spend eternity in those decision/response loops.

You can get coverage for a great percentage of threats handily, and buy yourself time to focus on the few, truly hard cases.

5/14/2020, 7:57:46 AM

Favs: 1

Retweets: 1

link

Keith

@kwm

@mikhail_khusid @cyb3rops @olafhartong I am increasingly convinced that the "cyber security skills gap" is:

- 80% teams doing unnecessary or duplicative work (include in this teams that love tech projects, but lack strategy or required outcomes)

- 20% actual lack of foundational knowledge, ability, experience, etc.

5/14/2020, 8:05:44 AM

Favs: 8

Retweets: 3

link