Fragmented security
Feb 20th, 2013 by Jesper Kråkhede
One of the more common questions I get is if their security is enough. In conjunction with that I get a perfectly matched risk analysis and a bunch of defined security mechanisms. Still, my answer quite often is: No, sadly it isn´t.
It is quite easy to create good security for a single entity but creating an overall working security strategy is something else. As many of you certainly know security architecture is my gambit (yes, I used to be a rather good chess player when I was young). Sound security architecture will give you more than a nice view of your security landscape; it will give you some degree of control of where you have assets that needs protection, where those assets normally move and a dashboard of your current security situation.
The trick is, as always, to gather all those security islands you have in your environment and get them to work as part of bigger machinery. First step is to identify them, second to eliminate or replace them and third to move everything together into an easy administration system.
Sounds easy enough for you?
Well, add Jericho 2.0 on top of this and sprinkle with a global market and mobile workforce and you have a bigger, but solvable challenge.