4 ms·
- Keep up with the latest trends (supply chain, credential leaks, etc.) and published CVEs (a CERT can help) - Risk analysis with business stakeholders (maybe
by moviuro 7y ago
- Keep up with the latest trends (supply chain, credential leaks, etc.) and published CVEs (a CERT can help)
- Risk analysis with business stakeholders (maybe they care nothing for confidentiality, but tons for integrity, or there are market regulations a security expert has no knowledge of)
As said by jesterson, there's no silver bullet in security, only adequate counter-measure given a threat model.
- badrabbit 7y agoKeep up with it and do what? Threat intel is nice but quite a waste of time if you can't adapt to new threats by implementing or adapting security controls fast.