Hope Is Not a (Security) Strategy - Security Boulevard

SBN Hope Is Not a (Security) Strategy

For anyone schooled in the sales discipline, this key tenet–hope is not a strategy–is at the core of consistent, predictable performance. The book has been around for some time but it still resonates today. This same notion applies to security and risk management. All too often, security teams are reacting to the latest threat, struggling with maintaining policies on their security gateways and buried in alerts and access control issues. 

DevOps Experience

Despite decades of investment in defense-in-depth strategies, many CISOs are hoping they won’t be next. This is where isolation comes in. What if, rather than responding to attacks after the fact, businesses can prevent them from reaching workers in the first place? Not only is hope not a strategy, but it’s bad for business. The 2020 IBM Data Breach Report put the cost of a breach at $3.86M in damages. Per breach. Seriously.

Cloudflare’s browser isolation announcement this week is the most recent of new entrants into this area of security and further cements the importance of isolation technologies in a modern security strategy. We couldn’t agree more with the Cloudflare team that “it is not a question of ‘if,’ but ‘when’ the next zero day vulnerability will exploit a web browser.”

For the past several years, Menlo Security has been at the forefront of innovation in applying zero trust principles to cybersecurity. Our patented Isolation Core™ powers our portfolio of SWG services including browser isolation, email isolation, CASB and DLP. We have been recognized as a Visionary in the Gartner Magic Quadrant for SWG for the past 3 years, and as Gartner notes, have “many large-scale, global enterprise deployments and is a good choice for enterprises that give security high priority.” In our current elevated threat reality, who doesn’t give security a high priority?

We know firsthand how complex it can be to deliver a seamless user experience with an isolation architecture that can scale functionally and horizontally to millions of users. Traditionally there have been trade-offs – and frankly today there are too many compromises in many isolation solutions that are bolted on to an existing product. Menlo is different, our Isolation Core™ was our founding innovation and is a foundational architectural element of our cloud security platform. We have extended our zero trust approach with isolation to power our entire portfolio including protecting mobile users from malware threats with an industry-first SWG powered by isolation.

To see how we are innovating and understand what is under the hood, read the blog by Gautam Altekar, founder of Menlo’s remoting technology, that explains Adaptive Clientless Rendering (ACR), and how content is rendered on the endpoint. 

 

While perfect security may be an aspirational goal for many, isolation as a zero trust approach can get you ahead of the game, blocking not only known and existing threats, but unknown and future threats too. With our platform, you can actually eliminate malware and open up access without risk. That’s what we set out to enable, and that’s what we make possible now.

——

 Hope is not a strategy, but isolation is.

 To dive in further check out the Definitive Guide to Internet Isolation ebook.

——

1 Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Gartner: Magic Quadrant for Secure Web Gateways, Lawrence Orans, John Watts, 8 December 2020

——

 

 

 

*** This is a Security Bloggers Network syndicated blog from Menlo Security Blog authored by Steven Wastie. Read the original post at: https://www.menlosecurity.com/blog/hope-is-not-a-strategy