ROI: What are some technologies/solutions that can aid in the prevention process?
CS: First of, the market needs to shift from negative security technologies to a positive, proactive security methodology. Technologies that can enforce policy are mandatory to aid the prevention process. Security solutions that contain the data necessary to prove that a policy has been disseminated and consumed are paramount to the success of any prevention program. Technologies that focus on the business process and help organizations concentrate on their critical functions are important.
Companies need a clear picture of what's running within their infrastructure. You don't know what you don't know, and reactive or passive scanning of systems isn't going to cut it with today's cybersecurity threats. Systems need to provide real-time visibility into and focus on a trust policy that can ensure active monitoring of the critical processes of key importance, which will lower the administrative effort around collecting information on the risk of the systems.
Lastly, technologies that enable control across system boundaries that can understand and avoid unauthorized change to systems will help prevent compromise. The first step in stopping something that could cause harm is to understand what your systems should be doing in the first place. If something weren't part of your "known good," than it would be an unauthorized process for change and therefore wouldn't be allowed to cause change regardless of what it is.
- Companies:
- Target
- People:
- Chris Strand