All Articles

And what you mentioned um is something really really pertinent so so let's dive deeper uh into the topic of like where do you see the industries today so we know the hackers and attackers has become very sophisticated so where where is the industry today that's say part one and uh part two let's also look into what's the state of industry in terms of the types of testing available Etc so both the maturity and also what's in the kit of the Defenders cor yeah and basically um I'll kind of weave in where organizations are today with your Bas and red timming can give you the um depth but a narrow one narrow Focus depth but that's more point in time but cart is making it more automated right so um so that's how if we kind of create a 2 by two metrics I mean then you can place all these various things uh into that so that's very interesting uh Brad so so let's uh get into the next part which is um around like if an organization has to or wants to build a capability around continuous security validation uh uh what what how should they build a program what should be the kind of high level program structure what are the critical capabilities what I call the human element so they'll get in through fishing or social engineering you know they'll convince you knock on the door and and you know try to figure out a way to get into your your organization and it's really just a it's typically an outside in view you know it's like if I was an attacker how would I break into this house how would they break how would I break into your infrastructure it helps identify those weak points so you can address it and sometimes it ends up being um areas where you know it might be on uh email security because of fishing or social engineering it might be just uh security awareness training and leveling up your people in terms of being aware of these types of scenarios and then it might be.