Downloaded 38 times
Uploaded byRahul Neel Mani
Get the Basics Right
The document emphasizes the importance of getting the basics right in cybersecurity. It provides three reasons why basics are important: 1) because basics never change, 2) because basics support more complex systems, and 3) because basics have stood the test of time. However, the document notes that in several data breach examples, the basics were missed. This led to personal information being exposed. The document stresses that strong cybersecurity requires keeping the basics, like access management and patching, as a strong foundation to build upon while also adapting to new priorities and complexities.
More Related Content
Similar to Get the Basics Right
Get the Basics Right
- 1. GET THE BASICSRIGHT because basics never change because basics support complexities because basics are time tested and proven
- 2. Because basics weremissed! Database of 191 million U.S. voters exposed on Internet as a result of incorrect configuration Database leak exposes 3.3 million Hello Kitty fans The personal information of 150,000 consumers who went into bankruptcy between 2007 and 2011 - including their SSN - were exposed after company failed to properly redact court records before they were put on the public access to Court Electronic Records system Code.org - Volunteer email addresses were left accessible via web browser
- 3. What caused HumptyDumpty’s fall apart? Was the foundation weak? Did Humpty Dumpty miss the basics?
- 4. Change in Management/ Leadership Change Management Patch Management Anti-Virus Management Identity & Access Management Supplier Management Aware & Knowledgeable culture Industry Collaboration Security Analytics System Hardening Acquisitions and Mergers Client Business Imperatives
- 5.
- 6. MirrorMirror Security Imperatives = Basics+ New Priorities + Complexities How big the issue looks in mirror? & Effort Spent We don’t know what we don’t know We know what we don’t know We know what we know We don’t know what we don’t know We know what we don’t know We know what we know RealWorld Get / Keep the BASICS right for a strong foundation Defenders are mired in FUD (fear, uncertainty and doubt) and fairy tales FantasyWorld
- 7. Cyber security willnever be “solved” but has to be “managed”
- 8. Thanks - RishiRajpal