Security professionals at most organizations often have a thankless job.
Typically challenged with a shortage of technologies, clearly defined processes, and supporting personnel and resources, they live in a reactive world handling the latest operational problem, patching the latest vulnerability, or responding to another compromise.
Unfortunately, in this state, the organization is likely to see continued incidents and the associated degradation of its security posture. While most security professionals do not have the power to increase investments and make organizational changes that will help alleviate the aforementioned situation, they can, with the help of their leaders, drive key low-cost to high reward investments that will improve their security posture.
In this paper, we will explore those changes, including:
- Following sound risk management practices
- Prioritizing customization and tuning of technologies used to detect incidents
- Acquiring automated, intelligent and integrated security technologies
- Partnering with a managed security services provider (MSSP) to fill in capability gaps
