Is Increasing Security Maturity And Decreasing Operational Load Possible?
summary
Argues that higher security maturity and lower operational load are achievable by consolidating controls into a platform that combines signals with environment context, not by piling point tools. Offers concrete numbers: 1.2 billion known malware, growing ~90–100 million a year; typical breach dwell time ~80–100 days; endpoints often run 10–15 agents. Cites a real C2 takedown done with Microsoft and the FBI as evidence of coordinated action. Recommends vendor consolidation, open schemas like OCSF, and service outsourcing for SMBs.
AI-written summary · about
chapters (9)
- 0:00RSAConference 2023
- 2:16Security Maturity
- 7:44Attack Surface: Hybrid Environments
- 13:05Security Products Evolving with Attack Surface
- 16:34Security Challenges
- 20:43Cybercrime Evolution
- 28:002 Layer Systems = Platform
- 35:11Key Takeaways
- 41:07Machine Learning in Cybersecurity
related talks
20mEvolving from patch management to risk mitigation
53mSecurity Operations 2018: What Is Working? What Is Not.
45mPanel: Modernizing Security Architecture: Platforms or Best-of-Breed, What Works?
50mThe Price is WRONG - An Analysis of Security Complexity
03mAn infinite set of security tools
34mSecDevSecOpsSec
19mNavigating the Cyber Frontier
47mThe Only Reason Security Really Matters for DevOps