I’ve been on the road lately asking security leaders how their teams reply to the question: Can we defend our most valuable information assets against techniques known to be used by this threat actor, and, if not, what can we do about it?   Answering this question quickly and with confidence ... Read More

“Can we defend against this threat actor? If not, what should we do about it?” On the surface, it’s a basic question and senior leadership expects their CISO to give a quick answer.  If answering that question is what we’re paid to do, why do most of us suck at ... Read More