Re:Blue teams, what has had the most impact protecting again...
by moviuro on Tuesday August 20, 2019 @05:28AM
(#20745075)
- Keep up with the latest trends (supply chain, credential leaks, etc.) and published CVEs (a CERT can help)
- Risk analysis with business stakeholders (maybe they care nothing for confidentiality, but tons for integrity, or there are market regulations a security expert has no knowledge of)
As said by jesterson, there's no silver bullet in security, only adequate counter-measure given a threat model.
Re:Blue teams, what has had the most impact protecting again...
by badrabbit on Tuesday August 20, 2019 @08:27PM
(#20753611)
Keep up with it and do what? Threat intel is nice but quite a waste of time if you can't adapt to new threats by implementing or adapting security controls fast.
- Risk analysis with business stakeholders (maybe they care nothing for confidentiality, but tons for integrity, or there are market regulations a security expert has no knowledge of)
As said by jesterson, there's no silver bullet in security, only adequate counter-measure given a threat model.