by Jesper Kråkhede, Sweden
Posted in Business, Security Architecture on Nov 25th, 2021
A last business post for the year, and it ties together the two previous ones. Many security organisations are built on old competence areas. Network security, server security, application security, compliance. Each with its own manager, budget and priorities. It made sense when the threats followed the same lines. They don´t anymore. Look at the […]
Posted in Business on Jun 14th, 2021
There are two reasons companies get a SOC. Because they must, or because they want to. The first kind is bought to satisfy a regulator, an auditor or a customer. The requirement says ‘continuous security monitoring’, so a service is purchased, preferably the cheapest one that ticks the box. It collects some logs, sends a […]
Posted in Business, Security Architecture on Oct 27th, 2020
When I look back at the incidents I have worked on, very few of them were caused by a lack of money. Most of them were caused by money spent on the wrong things. The next generation firewall that nobody configured. The expensive SIEM that collected everything except the logs that mattered. The awareness training […]
Posted in Security Architecture on Nov 19th, 2019
After my posts about Zero Trust I have got a few questions from managers along the lines of: ‘Sounds great, what does it cost?’ Fair question. The answer is that it depends on where you start, but probably less than you think. Zero Trust is not a product you buy. It is a way of […]