CISO reaction to new 0-day should be akin to "do we have ability to detect and respond to this class of attack?" not "scan all the things!"

← @kwm Twitter archive

Keith

@kwm

When looking to improve organizational security, sweating the small stuff can actually be terribly unproductive.

7/11/2015, 8:26:26 AM

Favs: 0

Retweets: 1

link

Keith

@kwm

*Someone* should be sweating the small stuff. But as a leader it is critical that attention be paid to visibility, resources, process.

7/11/2015, 8:26:53 AM

Favs: 0

Retweets: 0

link

Keith

@kwm

CISO reaction to new 0-day should be akin to "do we have ability to detect and respond to this class of attack?" not "scan all the things!"

7/11/2015, 8:28:27 AM

Favs: 0

Retweets: 1

link

Keith

@kwm

Some 0-day may align closely with risk profiles, in which case ops should be digging in. But can't afford to chase them all in this manner.

7/11/2015, 8:30:25 AM

Favs: 0

Retweets: 0

link