The next attack on your organization is closer than you think. While you are attending meetings and complaining about the quality of coffee in the break room, the genesis of your next security incident is breeding and lurking inside your systems, and it’s probably not where you think it is. That cool new firewall you bought?… Not the problem. The cloud services?… Not the problem. The problem is walking around your office. The problem is the inattentiveness to the mundane realities of security operations. The problem is the dull, boring, and inglorious aspects of running an IT security program.
In this presentation, IT security veteran Andrew Plato will review the decades of security assessments Anitian has completed to compile a portrait of a what a weak organization looks like. Inside that data is the roots of how organizations get attacked and the simple, yet often dull, things that can be done to avoid it.