3 ms·
From this list I struggle the most with "Insufficient internal network monitoring", all the other 9 are easier than somehow monitoring everything going on aroun
by blakesterz 3y ago
From this list I struggle the most with "Insufficient internal network monitoring", all the other 9 are easier than somehow monitoring everything going on around the entire network. For my small team, I've yet to find anything that's easy/cheap/useful built to be used for a small team. We can't have a single person specialize in doing network monitoring, but I feel like to really do it RIGHT you need someone who does that.
- 9g3890fj2 3y agoPentester/red teamer here, this point from the article is the key: "Properly trained, staffed, and funded network security teams can implement the known mitigations for these weaknesses." You need someone who actually understands networking tech at a deep level to accomplish anything beyond what expensive tooling/devices will offer you. Otherwise, you're always going to be limited by whatever vendor you're using and the capabilities they build in, assuming you're using the solutions to their full capability.
- blakesterz 3y agoYeah, I feel that. Anyone can have a good password, but it's hard to do all that networking stuff. Small teams really suffer on this one more than the other 9, at least in my experience.
- entuno 3y ago> "Properly trained, staffed, and funded network security teams can implement the known mitigations for these weaknesses." A lot of companies struggle to have property trained, staff and funded IT, let alone their security team.