,
9 tweets,
2 min read
Read on Twitter
Do companies really take your data's security and privacy seriously? *cough* wait. Let me stop laughing...
techcrunch.com/2019/02/17/we-…
techcrunch.com/2019/02/17/we-…
"The truth is, most companies don’t care about the privacy or security of your data. They care about having to explain to their customers that their data was stolen."
"It shows that they don’t know what to do next."
"It shows that they don’t know what to do next."
The cybersecurity teams are often too focused on individual tools and do not have a holistic view on the data, architecture and infrastructure.
How does this happen? It's a complex issue, but a few major things jump out. One - business and executive level support. Until that happens, ain't nothin' gonna happen, babe.
Two, the security team is often siloed away. Security needs to be deeply embedded within the business and infrastructure teams.
Thirdly...
Remember, 50% of the industry "experts" are below average. We need a better way to gauge how good your "expert" is.
Thirdly...
Remember, 50% of the industry "experts" are below average. We need a better way to gauge how good your "expert" is.
We need more certification, not the individual certifications each company or organization offers, but a comprehensive design and analysis type, such as a Professional Engineer (PE) certification. Knowing how to use metasploit just means you know how to use metasploit.
It does not mean you understand the business, the data flow, and all the other issues.
Obviously these are not an exclusive list. I would love to hear what do you think are the top three issues.
@threadreaderapp unroll
